Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3234302e302f32312d3231203d3e203230323939.roa
File:                     3138362e33322e3234302e302f32312d3231203d3e203230323939.roa (raw, json)
Hash identifier:          mt5l5dpQVe/iRqiWe5E3iKLeiDydXDNF6SJWgF1UnTY=
Subject key identifier:   C1:6B:4C:22:ED:97:A3:01:36:60:A6:50:BD:3D:3F:25:5D:85:F9:4E
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       3861AAB7B5396923BA0DA4B77AAB106ED4B9A2DB
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3234302e302f32312d3231203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:19:38 +0000
ROA not before:           Tue 05 Mar 2024 18:14:38 +0000
ROA not after:            Tue 04 Mar 2025 18:19:38 +0000
asID:                     20299
IP address blocks:        186.32.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:61:aa:b7:b5:39:69:23:ba:0d:a4:b7:7a:ab:10:6e:d4:b9:a2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Mar  5 18:14:38 2024 GMT
            Not After : Mar  4 18:19:38 2025 GMT
        Subject: CN=C16B4C22ED97A3013660A650BD3D3F255D85F94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0b:4d:89:84:72:3b:6a:88:bf:91:a1:38:c5:
                    7b:60:d0:77:e7:81:75:a9:f5:5d:cf:0b:09:b4:92:
                    36:66:ea:21:e7:51:39:4d:9a:64:02:94:0a:6e:98:
                    ea:f3:7e:a7:e8:35:6b:76:9e:d7:20:4c:83:f4:bb:
                    65:77:5b:7e:2d:6c:62:3a:e8:ee:52:5e:0a:16:3e:
                    da:22:0b:2c:bc:00:e8:ac:c9:3b:eb:05:04:4a:52:
                    7e:8f:51:74:02:ae:8c:dc:d2:bd:e5:d0:16:83:c0:
                    14:d1:5d:fc:2c:27:67:01:10:2b:94:75:ff:28:92:
                    a0:78:01:5f:e6:cc:0d:11:20:a5:5c:71:8e:ed:b2:
                    52:8c:1f:f7:bf:ba:f4:f1:4b:c7:60:d7:21:90:a8:
                    22:5b:c9:4b:17:6d:40:16:03:fd:cc:06:4d:c9:f1:
                    71:35:ad:7d:d5:3f:89:81:5d:b0:a5:d1:59:d8:ac:
                    56:3d:6b:66:30:63:74:94:81:dd:9b:d6:0b:32:7b:
                    ed:c9:c3:b2:3b:74:50:54:51:34:97:c4:88:58:00:
                    d9:d0:b6:58:fa:32:03:5a:cd:bd:ea:c5:e0:3f:f6:
                    e1:4a:2d:15:7a:e7:e7:a5:a5:4b:78:43:e0:07:4a:
                    92:e6:fb:7f:71:f3:e5:64:78:24:40:80:cf:f1:f5:
                    b0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6B:4C:22:ED:97:A3:01:36:60:A6:50:BD:3D:3F:25:5D:85:F9:4E
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3234302e302f32312d3231203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:98:27:8a:2b:be:5a:81:ec:a2:37:d5:a3:44:70:fe:76:b8:
         fb:b3:ae:69:72:3b:43:ce:31:8c:0a:33:62:ad:b9:cb:5b:be:
         7d:2d:a2:18:7e:e4:df:4c:8b:f6:0d:f1:b4:a0:fc:84:26:ab:
         c7:5a:cf:62:82:11:37:d0:99:54:73:02:50:2e:a9:97:70:b5:
         17:c7:a5:b0:82:32:ee:c2:28:eb:6a:8a:42:3b:ee:d7:49:dc:
         d8:e9:a2:ef:e3:b9:96:f0:89:bc:62:fd:69:41:74:82:f4:8a:
         a4:ff:6d:7b:72:6d:b3:a4:02:70:76:e6:74:45:02:da:24:ac:
         5d:cd:ca:ae:8c:1b:f3:b9:6f:cf:e1:af:a0:45:e5:3f:7a:d4:
         37:08:38:71:f5:41:85:a3:c8:14:ab:c1:9b:bb:a5:19:e6:26:
         09:c6:4d:5d:51:5c:d5:d0:cf:a7:38:5c:10:6f:18:19:39:9d:
         71:db:02:59:f8:be:9f:55:ae:a6:14:b9:2c:0f:d4:d9:27:c3:
         4e:ce:68:20:2f:97:05:96:d8:89:35:d8:0e:92:fa:23:22:27:
         5c:51:07:5a:f3:6c:7c:16:8e:45:54:fb:82:81:7c:11:1c:04:
         35:c4:9f:d1:4a:69:26:38:f2:03:7d:20:0f:1b:31:d7:7f:fe:
         09:0f:39:c9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOGGqt7U5aSO6DaS3eqsQbtS5otswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVFNTA4OEY2RDgxMEQ5RjMwNUQyM0E0QzU5M0E1RThG
MzBGNTI5RjAeFw0yNDAzMDUxODE0MzhaFw0yNTAzMDQxODE5MzhaMDMxMTAvBgNV
BAMTKEMxNkI0QzIyRUQ5N0EzMDEzNjYwQTY1MEJEM0QzRjI1NUQ4NUY5NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQC02JhHI7aoi/kaE4xXtg0Hfn
gXWp9V3PCwm0kjZm6iHnUTlNmmQClApumOrzfqfoNWt2ntcgTIP0u2V3W34tbGI6
6O5SXgoWPtoiCyy8AOisyTvrBQRKUn6PUXQCrozc0r3l0BaDwBTRXfwsJ2cBECuU
df8okqB4AV/mzA0RIKVccY7tslKMH/e/uvTxS8dg1yGQqCJbyUsXbUAWA/3MBk3J
8XE1rX3VP4mBXbCl0VnYrFY9a2YwY3SUgd2b1gsye+3Jw7I7dFBUUTSXxIhYANnQ
tlj6MgNazb3qxeA/9uFKLRV65+elpUt4Q+AHSpLm+39x8+VkeCRAgM/x9bARAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUwWtMIu2XowE2YKZQvT0/JV2F+U4wHwYDVR0j
BBgwFoAU5eUIj22BDZ8wXSOkxZOl6PMPUp8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZFMThBMkFDQTNDNzFCOUYxRjZCOUYxQkJGNUEzODU0
M0E1MjdGQTZDNzQ3NTMzQ0VDRjExRTY0RTBENkIzLzAvRTVFNTA4OEY2RDgxMEQ5
RjMwNUQyM0E0QzU5M0E1RThGMzBGNTI5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUU1MDg4RjZEODEwRDlGMzA1
RDIzQTRDNTkzQTVFOEYzMEY1MjlGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGRTE4QTJBQ0EzQzcxQjlGMUY2QjlGMUJCRjVBMzg1NDNBNTI3RkE2
Qzc0NzUzM0NFQ0YxMUU2NEUwRDZCMy8wLzMxMzgzNjJlMzMzMjJlMzIzNDMwMmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzMDMyMzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7og8DAN
BgkqhkiG9w0BAQsFAAOCAQEAqZgniiu+WoHsojfVo0Rw/na4+7OuaXI7Q84xjAoz
Yq25y1u+fS2iGH7k30yL9g3xtKD8hCarx1rPYoIRN9CZVHMCUC6pl3C1F8elsIIy
7sIo62qKQjvu10nc2Omi7+O5lvCJvGL9aUF0gvSKpP9te3Jts6QCcHbmdEUC2iSs
Xc3Krowb87lvz+GvoEXlP3rUNwg4cfVBhaPIFKvBm7ulGeYmCcZNXVFc1dDPpzhc
EG8YGTmdcdsCWfi+n1WuphS5LA/U2SfDTs5oIC+XBZbYiTXYDpL6IyInXFEHWvNs
fBaORVT7goF8ERwENcSf0UppJjjyA30gDxsx13/+CQ85yQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:31:25 2024 by rpki-client on console-fra.rpki-client.org