Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033353439.roa
File:                     3138362e302e3135322e302f32322d3234203d3e2033353439.roa (raw, json)
Hash identifier:          kClGDVfmtDv49/lAsICG1WreKudyMVPFaxkYzY300Ng=
Subject key identifier:   84:5C:1F:94:17:A5:34:08:E4:58:53:B5:73:F0:07:13:18:BC:F2:FC
Certificate issuer:       /CN=86A5D10A30ED805BDE337515CB0F580086111558
Certificate serial:       32B3E2C7089E5EED51E731E6686A8D3AB0280BC0
Authority key identifier: 86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033353439.roa
Signing time:             Mon 28 Oct 2024 18:30:00 +0000
ROA not before:           Mon 28 Oct 2024 18:25:00 +0000
ROA not after:            Mon 27 Oct 2025 18:30:00 +0000
asID:                     3549
IP address blocks:        186.0.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b3:e2:c7:08:9e:5e:ed:51:e7:31:e6:68:6a:8d:3a:b0:28:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A5D10A30ED805BDE337515CB0F580086111558
        Validity
            Not Before: Oct 28 18:25:00 2024 GMT
            Not After : Oct 27 18:30:00 2025 GMT
        Subject: CN=845C1F9417A53408E45853B573F0071318BCF2FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:df:54:8d:5e:a6:1b:97:29:91:f8:15:2d:
                    74:dd:18:9e:82:3b:2a:e1:5b:cc:8e:4a:52:31:3b:
                    1f:d8:2a:44:be:9e:52:dd:a9:be:18:49:76:df:79:
                    9a:55:d6:9f:68:0d:63:fa:f6:42:93:57:73:22:5a:
                    75:ff:24:20:1b:c6:44:a9:79:39:85:9d:73:66:76:
                    7e:4f:43:80:d8:5b:fe:9a:f9:b2:55:d2:2f:13:e9:
                    44:84:c2:3f:b1:df:b2:0d:23:7e:7b:54:94:18:33:
                    81:08:56:3e:1f:0c:22:59:f9:a1:7f:3b:dc:08:f8:
                    ee:0d:af:ce:bc:02:14:c1:fb:9e:b5:69:90:ad:4d:
                    2a:8e:ad:b5:ee:3b:8f:fe:c1:08:8c:40:b0:1f:fa:
                    66:33:84:66:14:cd:a7:84:05:8a:32:ee:1e:18:c4:
                    38:90:a2:7e:59:05:0c:13:b8:68:8f:5e:dd:00:16:
                    02:bc:a7:55:09:0f:1c:d4:31:b1:88:2e:ae:7e:4e:
                    7a:15:82:93:21:b0:66:7c:29:37:f3:5d:23:8b:26:
                    59:4f:1b:c1:ad:81:9b:a9:1f:c0:f5:bf:2c:64:8a:
                    a8:bf:78:ea:05:f2:27:9a:46:c1:66:df:f5:36:03:
                    29:7f:3f:0f:50:17:0a:fe:04:6d:e4:6f:c5:31:a4:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5C:1F:94:17:A5:34:08:E4:58:53:B5:73:F0:07:13:18:BC:F2:FC
            X509v3 Authority Key Identifier:
                keyid:86:A5:D1:0A:30:ED:80:5B:DE:33:75:15:CB:0F:58:00:86:11:15:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/86A5D10A30ED805BDE337515CB0F580086111558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86A5D10A30ED805BDE337515CB0F580086111558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A46D6A85DFA6149C5F9A7CDA18CF930D382F3382E1923D503F829AC450D02/0/3138362e302e3135322e302f32322d3234203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:6b:a8:c1:84:3d:e0:bf:2d:95:ea:b4:e9:6a:09:97:a5:fb:
         cb:90:c3:83:05:dc:bd:c8:9b:6c:9e:49:48:e7:92:42:29:1e:
         ab:a9:e5:3b:f8:84:6f:75:50:31:49:db:38:4b:34:01:0f:eb:
         63:02:0a:5e:d4:87:9e:d4:cd:80:f6:65:f5:f8:5c:73:8d:cb:
         4c:b6:8f:2b:7f:a1:1e:18:fc:af:e4:1a:80:f7:1b:51:ee:ff:
         c2:47:a1:39:a8:eb:ee:65:7b:51:db:2a:aa:3b:bd:fe:05:ec:
         a1:f0:4e:bb:e3:e6:9a:be:e9:9c:9f:88:cd:5b:e3:cd:6e:3f:
         59:fe:cc:5d:d0:2d:e9:fc:6b:e6:10:42:53:24:19:27:1f:21:
         df:02:a5:37:e1:09:49:68:17:2f:d5:df:ea:45:b0:d2:1c:33:
         8e:22:35:b5:69:80:a3:2f:b2:1b:82:98:88:dc:4b:83:ed:7e:
         58:3f:5a:c9:ef:db:36:d1:6b:e1:f7:71:76:4a:90:c2:e1:17:
         74:c5:db:3b:ae:d5:3c:fe:3a:47:e5:e9:12:03:27:25:65:a8:
         c5:d7:1f:7a:1b:2e:cf:2a:f6:95:31:76:bb:99:4b:72:1b:96:
         08:ca:56:4a:39:28:3b:d4:37:44:84:ce:77:ef:d9:8a:0a:12:
         c5:6b:d9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org