Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32322d3234203d3e203634313233.roa
File:                     3138362e3134382e3232342e302f32322d3234203d3e203634313233.roa (raw, json)
Hash identifier:          3ilO5Iz23rF2jGLhH9yevsWfVqfDndTZckiQfHiUbik=
Subject key identifier:   76:21:9F:8A:C6:9F:CE:DB:A2:23:59:EC:0C:77:4D:BA:B1:59:24:0B
Certificate issuer:       /CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
Certificate serial:       0D49E29BAEAB12773F4099D23C82D6E3210BADAC
Authority key identifier: 73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32322d3234203d3e203634313233.roa
Signing time:             Tue 05 Mar 2024 17:42:19 +0000
ROA not before:           Tue 05 Mar 2024 17:37:19 +0000
ROA not after:            Tue 04 Mar 2025 17:42:19 +0000
asID:                     64123
IP address blocks:        186.148.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:49:e2:9b:ae:ab:12:77:3f:40:99:d2:3c:82:d6:e3:21:0b:ad:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
        Validity
            Not Before: Mar  5 17:37:19 2024 GMT
            Not After : Mar  4 17:42:19 2025 GMT
        Subject: CN=76219F8AC69FCEDBA22359EC0C774DBAB159240B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:0f:70:76:a9:32:42:2d:36:cc:52:1d:71:
                    c7:f4:89:23:81:da:06:48:75:61:d9:6d:42:7c:4a:
                    19:c1:96:65:ae:dd:1e:cf:92:d8:d7:b5:99:eb:19:
                    b1:49:ff:57:31:e0:ad:1a:af:7c:c4:c2:91:4d:b8:
                    0d:5e:f7:9b:01:40:0c:c5:79:5a:1a:cf:54:48:99:
                    de:7e:9d:c6:1e:c3:5f:cd:75:be:f8:a9:11:d0:f5:
                    4d:fc:65:de:e2:c6:ab:a3:25:ce:19:3a:58:97:1d:
                    4d:4c:c2:27:59:1d:4d:f3:b4:4d:44:09:5a:cf:ea:
                    0c:7e:6e:0b:81:f3:d5:61:3b:64:60:5b:db:d1:4a:
                    8c:b4:a2:04:53:d3:c7:7d:8d:2a:d1:62:db:75:d3:
                    47:88:e3:10:f5:ed:cc:25:8c:09:7b:c5:18:51:ef:
                    e1:cc:11:56:c9:32:e2:36:79:ae:95:fc:6d:2f:c6:
                    5e:88:b0:51:4a:70:37:f2:86:c3:36:36:e8:ed:73:
                    29:4d:16:4a:66:b9:9a:ae:31:5f:a3:0a:37:24:e5:
                    99:47:29:11:19:79:bc:f6:ae:29:fe:f6:d0:e8:95:
                    93:6c:48:78:72:e9:0f:40:2f:e8:ed:4d:26:d9:9f:
                    c3:01:67:e1:a0:1a:ec:19:4e:fe:d0:3c:08:77:a6:
                    9e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:21:9F:8A:C6:9F:CE:DB:A2:23:59:EC:0C:77:4D:BA:B1:59:24:0B
            X509v3 Authority Key Identifier:
                keyid:73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32322d3234203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:df:0d:19:fb:74:60:ce:7d:20:45:3a:bf:5a:01:d2:dd:57:
         14:6a:4d:72:75:83:70:22:53:cc:f9:37:f4:8a:e4:67:3c:bb:
         87:84:19:70:2c:15:e6:7a:f8:0c:f2:09:81:a1:0c:88:27:37:
         41:30:24:8d:85:01:0d:2a:d7:b4:f4:6a:fd:19:3a:86:a3:fc:
         7c:13:5c:0f:73:84:86:23:ec:dc:3f:bc:a0:c5:55:ad:cc:66:
         40:53:d9:5c:c7:e1:93:7e:74:5a:8b:de:c3:16:a3:3a:66:54:
         43:f4:e9:c7:ba:ed:53:47:db:82:72:f2:70:03:b3:75:d9:fa:
         d5:d9:a4:e6:6b:e9:d7:f1:8f:15:b8:cf:91:d1:bd:b8:07:1a:
         dc:70:78:a7:bc:0d:78:16:8f:2e:b6:72:41:dd:ff:5f:49:c1:
         04:99:24:46:bf:8d:bb:15:d3:28:2f:96:d0:fd:88:c0:4f:db:
         48:99:42:a1:57:cc:5b:f1:1b:ad:ac:09:4b:cc:16:bb:73:3c:
         c0:37:0e:6c:a3:55:bf:ea:6a:c8:a2:45:26:48:be:b9:76:1d:
         26:96:18:4e:7f:94:cd:9b:6c:98:8e:c5:cd:76:d0:a4:51:d8:
         f4:81:2b:19:b0:4a:2c:16:c7:7c:f3:0e:c2:05:69:a1:01:aa:
         ba:7b:70:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org