Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231382e302f32332d3234203d3e203233323433.roa
File:                     3138362e3138392e3231382e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          rDW/9nWe/S5S/DW1PoJo8vPzCVuhhxK8GGQwtMmLgZo=
Subject key identifier:   79:16:5C:2A:DC:06:46:15:05:AD:77:E6:76:19:CA:A4:B2:F9:17:01
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       6B23A61F2F7A09C8CA5AD118551B7C10F45189FA
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231382e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:05 +0000
ROA not before:           Tue 05 Mar 2024 17:51:05 +0000
ROA not after:            Tue 04 Mar 2025 17:56:05 +0000
asID:                     23243
IP address blocks:        186.189.218.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:23:a6:1f:2f:7a:09:c8:ca:5a:d1:18:55:1b:7c:10:f4:51:89:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Mar  5 17:51:05 2024 GMT
            Not After : Mar  4 17:56:05 2025 GMT
        Subject: CN=79165C2ADC06461505AD77E67619CAA4B2F91701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:88:a2:60:a7:2b:09:59:ee:21:d7:c4:c2:3b:
                    26:e9:f1:a9:a0:f5:82:94:71:dd:cf:ec:48:06:1d:
                    d6:97:bf:90:b4:50:af:b1:e3:c1:d2:9b:79:ba:5f:
                    dc:77:46:7b:47:f9:b5:67:a0:32:8b:7e:70:9b:b6:
                    6f:db:c5:58:db:3d:26:f8:fc:dd:58:2a:fd:f1:e7:
                    c3:9f:f5:1b:ee:2d:73:75:b6:ce:b4:50:07:bb:e9:
                    9b:bc:bc:8e:65:7e:14:c7:84:35:2c:73:87:a9:3d:
                    5a:1b:86:6c:fc:6b:8d:2e:5f:79:93:fa:8b:a1:51:
                    42:b7:6d:88:76:c2:f0:86:04:42:78:6e:d0:91:e4:
                    82:2d:28:00:59:87:11:fc:41:cd:af:b9:e8:af:42:
                    98:ae:67:24:6a:57:77:0b:f0:09:92:a7:0a:99:06:
                    55:51:88:bb:e7:ae:82:4b:b3:e5:b4:6b:46:e5:e9:
                    1b:67:63:7e:51:61:d5:5e:a4:82:43:6b:61:9d:b8:
                    42:52:7b:4e:56:ea:bb:cd:42:8a:c2:cd:82:bf:63:
                    45:6a:75:c4:4c:02:d0:36:4d:e6:56:59:97:7a:b4:
                    09:96:8b:ec:0e:ac:9e:01:2d:76:27:09:64:34:c0:
                    03:fc:51:c2:44:fd:d6:24:4c:5f:67:58:83:c0:8b:
                    b3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:16:5C:2A:DC:06:46:15:05:AD:77:E6:76:19:CA:A4:B2:F9:17:01
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138362e3138392e3231382e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:d8:a3:3b:cc:de:5a:cb:ee:3b:e4:1a:ff:4d:09:6a:b9:21:
         c5:bf:59:db:68:37:07:11:a9:33:35:e4:74:0d:ec:58:69:af:
         7a:0a:47:83:71:14:a4:ec:4d:a6:19:87:d5:9e:cc:46:b5:c3:
         97:5c:32:52:38:82:e2:29:e2:4a:f0:7f:ff:ea:56:d7:bc:c5:
         64:cc:62:39:15:78:4a:39:0d:ec:d7:94:8f:96:5a:c2:73:c4:
         9e:5f:43:71:5b:f1:ee:a6:01:33:9e:c2:c4:ac:60:31:5b:fa:
         f2:b2:11:78:a7:77:93:04:61:98:b6:7f:33:cc:b6:42:f0:b3:
         ba:65:b7:f4:13:24:ae:57:fa:31:ff:19:33:56:54:74:5f:85:
         b3:12:61:80:a1:d5:50:f1:09:a8:8d:bd:1d:39:f3:9c:b8:c0:
         2a:38:7f:61:64:cf:f4:06:ba:2a:75:44:11:5d:51:b8:6b:00:
         0c:d1:47:03:e1:e9:55:dd:c4:eb:90:2f:f5:46:94:dc:c2:b2:
         8f:3e:b5:8e:52:98:ce:b1:63:b0:74:b0:a3:56:ea:29:d0:3b:
         75:e8:42:f9:c8:f9:1b:b0:1c:0d:bf:49:c9:1f:ad:37:25:1e:
         84:76:cc:fe:0b:73:6e:bc:7f:7c:1c:af:39:ba:ca:fb:84:aa:
         a5:1b:ac:a0
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUayOmHy96CcjKWtEYVRt8EPRRifowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxNDk5RDEyMDY3RjJCRUExMjg3QjYzNDI1RUEzQjcw
RkNBRkZDMTAeFw0yNDAzMDUxNzUxMDVaFw0yNTAzMDQxNzU2MDVaMDMxMTAvBgNV
BAMTKDc5MTY1QzJBREMwNjQ2MTUwNUFENzdFNjc2MTlDQUE0QjJGOTE3MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQiKJgpysJWe4h18TCOybp8amg
9YKUcd3P7EgGHdaXv5C0UK+x48HSm3m6X9x3RntH+bVnoDKLfnCbtm/bxVjbPSb4
/N1YKv3x58Of9RvuLXN1ts60UAe76Zu8vI5lfhTHhDUsc4epPVobhmz8a40uX3mT
+ouhUUK3bYh2wvCGBEJ4btCR5IItKABZhxH8Qc2vueivQpiuZyRqV3cL8AmSpwqZ
BlVRiLvnroJLs+W0a0bl6RtnY35RYdVepIJDa2GduEJSe05W6rvNQorCzYK/Y0Vq
dcRMAtA2TeZWWZd6tAmWi+wOrJ4BLXYnCWQ0wAP8UcJE/dYkTF9nWIPAi7NBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUeRZcKtwGRhUFrXfmdhnKpLL5FwEwHwYDVR0j
BBgwFoAUjhSZ0SBn8r6hKHtjQl6jtw/K/8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTdENjU5ODQ4M0IwRDFFNTJFMjJERkU2N0IzN0YwM0VB
RTE4QTMzQUVDQzZFQzFCQzM2NDg2MUIxQjIxNENCLzAvOEUxNDk5RDEyMDY3RjJC
RUExMjg3QjYzNDI1RUEzQjcwRkNBRkZDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTE0OTlEMTIwNjdGMkJFQTEy
ODdCNjM0MjVFQTNCNzBGQ0FGRkMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzU3RDY1OTg0ODNCMEQxRTUyRTIyREZFNjdCMzdGMDNFQUUxOEEzM0FF
Q0M2RUMxQkMzNjQ4NjFCMUIyMTRDQi8wLzMxMzgzNjJlMzEzODM5MmUzMjMxMzgy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMzMzIzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBur3a
MA0GCSqGSIb3DQEBCwUAA4IBAQBH2KM7zN5ay+475Br/TQlquSHFv1nbaDcHEakz
NeR0DexYaa96CkeDcRSk7E2mGYfVnsxGtcOXXDJSOILiKeJK8H//6lbXvMVkzGI5
FXhKOQ3s15SPllrCc8SeX0NxW/HupgEznsLErGAxW/ryshF4p3eTBGGYtn8zzLZC
8LO6Zbf0EySuV/ox/xkzVlR0X4WzEmGAodVQ8Qmojb0dOfOcuMAqOH9hZM/0Broq
dUQRXVG4awAM0UcD4elV3cTrkC/1RpTcwrKPPrWOUpjOsWOwdLCjVuop0Dt16EL5
yPkbsBwNv0nJH603JR6Edsz+C3NuvH98HK85usr7hKqlG6yg
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org