Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033333536.roa
File:                     3138362e302e3135322e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          LMXL9BBtyZEDXfGC+SjDlWd4kfoWpbHMLkt/K5gPL3A=
Subject key identifier:   D2:20:E5:F6:D0:E7:22:FD:F4:2E:42:0A:84:24:1C:0E:BD:1F:8F:D9
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       66A6DAF222239A2A8DFFA433D0A8A2E9660C24E9
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033333536.roa
Signing time:             Mon 28 Oct 2024 18:30:00 +0000
ROA not before:           Mon 28 Oct 2024 18:25:00 +0000
ROA not after:            Mon 27 Oct 2025 18:30:00 +0000
asID:                     3356
IP address blocks:        186.0.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a6:da:f2:22:23:9a:2a:8d:ff:a4:33:d0:a8:a2:e9:66:0c:24:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Oct 28 18:25:00 2024 GMT
            Not After : Oct 27 18:30:00 2025 GMT
        Subject: CN=D220E5F6D0E722FDF42E420A84241C0EBD1F8FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a2:7c:73:23:03:06:7d:7d:94:d2:db:6e:9f:
                    a3:a8:e9:3d:63:a3:71:d8:94:4d:f4:14:1a:d9:dd:
                    3a:3a:15:36:46:65:e0:4c:1c:11:65:1a:83:a8:f7:
                    c0:3f:cd:e7:68:3a:ed:98:ae:33:4c:3a:ea:a6:1b:
                    ed:c5:34:9f:ed:f6:34:9c:ec:c7:6f:55:f3:a4:5d:
                    ca:40:73:0d:61:2e:b0:73:ad:45:a1:a0:5f:b9:13:
                    22:7b:68:9f:b4:70:34:48:b9:f9:fe:92:73:0f:22:
                    ed:b2:f3:e0:41:17:fc:ae:60:5c:37:51:38:74:17:
                    bf:01:7a:56:03:9b:e3:e0:26:11:58:aa:79:d6:0f:
                    80:dd:e9:ab:ac:d7:ba:c4:52:d3:b2:60:18:eb:38:
                    bd:6b:31:1d:c3:7e:4c:fa:9c:73:d3:29:01:6e:38:
                    ad:b8:3f:91:09:26:53:67:e4:59:0f:fd:4d:61:eb:
                    15:71:be:e4:39:f3:e8:15:41:e5:f6:84:40:d2:6f:
                    dc:72:82:b5:45:15:04:b1:5e:f7:2e:88:d3:06:d9:
                    26:67:8a:9f:4a:a7:23:97:f0:8e:0b:34:0e:d5:80:
                    eb:d7:f2:fe:dd:be:d4:13:83:22:c0:42:96:05:2f:
                    91:e2:a5:fc:4b:01:44:d4:c3:7f:f9:4d:23:0c:89:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:20:E5:F6:D0:E7:22:FD:F4:2E:42:0A:84:24:1C:0E:BD:1F:8F:D9
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:fb:cf:6b:88:83:08:32:1f:72:97:d0:6b:32:0d:16:68:
         b9:7e:b3:ab:e8:c1:f2:14:44:f6:c5:a0:5c:6b:51:4f:ca:9c:
         0f:72:8c:cc:e0:20:2b:10:7f:1b:c6:32:74:a0:4a:9c:7c:78:
         41:c4:0c:51:6c:7a:a3:0a:dc:27:da:d5:6d:0a:eb:72:bc:c2:
         84:7d:c0:27:ae:88:ef:89:d7:85:9d:e8:b1:ef:61:f5:d5:b1:
         a3:35:68:0f:6a:46:0a:d8:ed:cd:cc:3b:92:27:c8:7f:aa:9f:
         ca:1e:25:0c:eb:9e:cd:b8:5d:3e:60:6b:bb:4c:ad:2c:4f:0a:
         52:ea:3b:3c:67:d1:09:e1:79:cc:85:27:b5:91:90:1f:d1:a0:
         af:96:65:e9:60:06:79:2c:b9:a2:9a:4f:ef:3c:41:69:a4:f8:
         4f:e8:ad:00:0c:55:10:6b:b0:73:ad:66:17:c0:34:55:8c:2e:
         2d:a5:6d:4c:03:f6:df:11:98:f7:9e:03:84:2e:d1:c3:71:c1:
         5d:db:a5:f8:f9:e9:15:24:58:d2:8c:d5:ac:1a:7c:c9:50:ec:
         49:84:5d:3b:99:2c:92:12:ce:5f:87:fb:49:1e:65:96:2f:ee:
         d7:92:b3:19:b6:9d:16:be:2e:ff:0b:5b:f7:e4:f6:05:c4:b9:
         8d:21:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org