Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139352e302f32342d3234203d3e203532343930.roa
File:                     3138362e39362e3139352e302f32342d3234203d3e203532343930.roa (raw, json)
Hash identifier:          KejCCgDVVflR409tVGBIFjynBwd+UMpO/HSX2bHka4g=
Subject key identifier:   59:7F:CA:AF:DE:3B:FD:58:BC:AB:EA:53:A7:F6:30:F7:BD:D7:AE:E1
Certificate issuer:       /CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
Certificate serial:       26D2C21F35A3AFAB6F5F96744164EA59C32909B8
Authority key identifier: 61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139352e302f32342d3234203d3e203532343930.roa
Signing time:             Tue 05 Mar 2024 18:16:46 +0000
ROA not before:           Tue 05 Mar 2024 18:11:46 +0000
ROA not after:            Tue 04 Mar 2025 18:16:46 +0000
asID:                     52490
IP address blocks:        186.96.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d2:c2:1f:35:a3:af:ab:6f:5f:96:74:41:64:ea:59:c3:29:09:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61BC0DF9DC0EB328D3B5AA53024308EF6731BC88
        Validity
            Not Before: Mar  5 18:11:46 2024 GMT
            Not After : Mar  4 18:16:46 2025 GMT
        Subject: CN=597FCAAFDE3BFD58BCABEA53A7F630F7BDD7AEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:01:6c:b1:e6:f2:b8:6b:25:b9:a6:dd:a7:
                    16:a2:e3:dd:3a:39:ee:44:03:52:95:20:b1:57:e7:
                    bb:4d:2e:a6:bb:5a:1d:f3:37:02:92:d9:0e:da:ee:
                    89:25:2d:40:95:b7:a4:b7:8b:a5:f7:92:58:c2:0e:
                    d1:87:fa:3b:8d:c6:6f:3c:69:3f:c4:d9:e3:04:d6:
                    2d:c5:5f:19:2c:07:ca:d0:0b:59:68:f3:98:2e:fe:
                    e2:b3:2e:d2:39:fb:3d:f7:20:96:f4:5a:1e:d1:ff:
                    5c:47:63:26:2b:f9:18:38:f7:5b:05:9f:7f:91:05:
                    32:87:4c:94:74:83:6b:dd:ee:39:1e:e9:2a:6e:52:
                    19:e1:e6:16:ea:88:80:28:8e:58:5c:77:d8:8e:e6:
                    a0:cf:c6:58:93:7d:77:1d:6e:fd:b0:04:7c:fe:05:
                    43:47:71:35:34:c8:da:f5:40:bb:52:9f:42:88:47:
                    30:0c:c6:b5:17:8c:bf:5f:8f:e6:f3:e5:f3:55:96:
                    0d:f3:97:3c:45:82:3a:82:ca:00:d8:b3:c3:d7:9f:
                    65:8e:24:86:bf:70:4c:b5:c1:70:22:ce:06:de:5d:
                    cd:d4:e4:71:59:59:d2:20:4e:db:0f:52:e7:18:4f:
                    33:9c:92:c5:1f:fc:9e:0a:f1:05:63:30:8e:3a:fe:
                    92:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7F:CA:AF:DE:3B:FD:58:BC:AB:EA:53:A7:F6:30:F7:BD:D7:AE:E1
            X509v3 Authority Key Identifier:
                keyid:61:BC:0D:F9:DC:0E:B3:28:D3:B5:AA:53:02:43:08:EF:67:31:BC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61BC0DF9DC0EB328D3B5AA53024308EF6731BC88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/962BF872D2B1D94AEC1DF5A2CAE8B011B11426454C2622D42BD424E213F9CF46/0/3138362e39362e3139352e302f32342d3234203d3e203532343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:23:c5:1a:b3:61:bf:2b:43:da:b0:d6:e2:ba:8b:fc:af:f5:
         4e:7c:bd:df:83:c3:62:9e:28:20:86:da:5e:58:91:47:54:e6:
         54:df:c9:34:7f:08:45:9f:89:35:eb:31:a5:85:f2:93:17:20:
         b0:47:a7:e8:5c:d8:43:bd:67:85:91:27:f5:d3:f5:3a:14:d2:
         5e:d5:f6:62:2f:50:e7:83:a1:b4:3a:d8:b8:90:b2:68:8a:16:
         ca:d6:13:95:0d:c5:fb:4e:52:54:3f:f6:9f:53:30:9f:9f:91:
         b7:91:db:5f:50:cc:b1:31:e0:71:26:72:ba:40:ec:87:eb:21:
         7f:ff:ed:65:97:f9:3e:87:17:f3:dd:26:db:a4:f3:93:8d:9e:
         87:67:4a:9b:73:7e:50:bb:38:e6:38:86:f1:5b:6f:2c:e3:e2:
         61:6e:b6:a7:cd:dc:b0:81:77:f6:24:15:b6:f6:1b:72:8d:92:
         a3:d2:ba:2c:d8:72:b3:94:63:2f:d9:bf:b1:6f:af:c4:8e:00:
         bd:c3:3b:2c:4a:f8:75:ca:b3:13:b0:30:01:3f:1d:4e:3e:7e:
         35:2a:1b:2d:79:96:81:2d:71:74:ab:90:f2:e2:07:2a:59:3e:
         ef:9e:72:e4:1f:b6:fd:3d:ae:2a:8e:9a:7d:c8:cd:5f:26:32:
         fd:b8:5f:b9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJtLCHzWjr6tvX5Z0QWTqWcMpCbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFCQzBERjlEQzBFQjMyOEQzQjVBQTUzMDI0MzA4RUY2
NzMxQkM4ODAeFw0yNDAzMDUxODExNDZaFw0yNTAzMDQxODE2NDZaMDMxMTAvBgNV
BAMTKDU5N0ZDQUFGREUzQkZENThCQ0FCRUE1M0E3RjYzMEY3QkREN0FFRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzAFssebyuGsluabdpxai4906
Oe5EA1KVILFX57tNLqa7Wh3zNwKS2Q7a7oklLUCVt6S3i6X3kljCDtGH+juNxm88
aT/E2eME1i3FXxksB8rQC1lo85gu/uKzLtI5+z33IJb0Wh7R/1xHYyYr+Rg491sF
n3+RBTKHTJR0g2vd7jke6SpuUhnh5hbqiIAojlhcd9iO5qDPxliTfXcdbv2wBHz+
BUNHcTU0yNr1QLtSn0KIRzAMxrUXjL9fj+bz5fNVlg3zlzxFgjqCygDYs8PXn2WO
JIa/cEy1wXAizgbeXc3U5HFZWdIgTtsPUucYTzOcksUf/J4K8QVjMI46/pJFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUWX/Kr947/Vi8q+pTp/Yw973XruEwHwYDVR0j
BBgwFoAUYbwN+dwOsyjTtapTAkMI72cxvIgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NjJCRjg3MkQyQjFEOTRBRUMxREY1QTJDQUU4QjAxMUIx
MTQyNjQ1NEMyNjIyRDQyQkQ0MjRFMjEzRjlDRjQ2LzAvNjFCQzBERjlEQzBFQjMy
OEQzQjVBQTUzMDI0MzA4RUY2NzMxQkM4OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MUJDMERGOURDMEVCMzI4RDNC
NUFBNTMwMjQzMDhFRjY3MzFCQzg4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTYyQkY4NzJEMkIxRDk0QUVDMURGNUEyQ0FFOEIwMTFCMTE0MjY0NTRD
MjYyMkQ0MkJENDI0RTIxM0Y5Q0Y0Ni8wLzMxMzgzNjJlMzkzNjJlMzEzOTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzkzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALpgwzAN
BgkqhkiG9w0BAQsFAAOCAQEAcCPFGrNhvytD2rDW4rqL/K/1Tny934PDYp4oIIba
XliRR1TmVN/JNH8IRZ+JNesxpYXykxcgsEen6FzYQ71nhZEn9dP1OhTSXtX2Yi9Q
54OhtDrYuJCyaIoWytYTlQ3F+05SVD/2n1Mwn5+Rt5HbX1DMsTHgcSZyukDsh+sh
f//tZZf5PocX890m26Tzk42eh2dKm3N+ULs45jiG8VtvLOPiYW62p83csIF39iQV
tvYbco2So9K6LNhys5RjL9m/sW+vxI4AvcM7LEr4dcqzE7AwAT8dTj5+NSobLXmW
gS1xdKuQ8uIHKlk+755y5B+2/T2uKo6afcjNXyYy/bhfuQ==
-----END CERTIFICATE-----
Generated at Sun May 5 00:11:09 2024 by rpki-client on console-fra.rpki-client.org