Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3234352e302f32342d3234203d3e20323634373031.roa
File:                     3138362e302e3234352e302f32342d3234203d3e20323634373031.roa (raw, json)
Hash identifier:          n2gwASGmS2DahL/Gig2E4bA+V33CInns3053UVV8VCQ=
Subject key identifier:   85:F4:99:D0:8B:93:EF:72:14:4C:8F:3A:FD:9E:17:C0:A5:75:C7:1F
Certificate issuer:       /CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
Certificate serial:       6AE5C8B073E2E6C1AD03E461FD198C03F48893A6
Authority key identifier: EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3234352e302f32342d3234203d3e20323634373031.roa
Signing time:             Tue 05 Mar 2024 18:12:06 +0000
ROA not before:           Tue 05 Mar 2024 18:07:06 +0000
ROA not after:            Tue 04 Mar 2025 18:12:06 +0000
asID:                     264701
IP address blocks:        186.0.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 16:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e5:c8:b0:73:e2:e6:c1:ad:03:e4:61:fd:19:8c:03:f4:88:93:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F
        Validity
            Not Before: Mar  5 18:07:06 2024 GMT
            Not After : Mar  4 18:12:06 2025 GMT
        Subject: CN=85F499D08B93EF72144C8F3AFD9E17C0A575C71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d3:3a:a8:1b:f4:ed:6a:7c:74:fb:14:c1:9f:
                    6f:97:ae:b7:d1:d6:78:4b:99:41:2b:77:80:97:5e:
                    8c:5f:57:2c:8c:3e:06:e1:c0:a9:8b:0e:ac:95:42:
                    5d:c0:ed:61:84:31:db:a9:05:fe:b3:ad:26:fb:21:
                    02:8c:68:5e:69:a3:c5:79:83:eb:e6:c2:5a:24:2f:
                    8f:6a:4c:3f:98:cf:3e:ec:0e:49:41:49:ea:89:0f:
                    ab:f9:4f:4d:42:9c:a6:f6:2d:f5:f8:db:c7:58:8f:
                    70:21:d7:17:93:93:94:c2:22:ee:a0:2f:32:fe:b4:
                    21:79:f9:fd:26:1b:5b:05:7e:63:ad:6a:f2:3e:32:
                    28:f1:d0:33:f6:4b:26:b9:6e:a1:13:20:6e:a7:79:
                    a6:f1:a2:d6:d4:f8:5d:8b:6a:1c:1f:99:cb:81:46:
                    63:52:1d:4f:8d:fb:0d:83:ff:df:84:04:3c:c0:f8:
                    9e:af:63:45:05:bd:c1:d2:a7:cf:cd:93:de:3b:76:
                    92:c7:c1:a0:ab:85:b3:e5:3c:f8:42:73:5a:1d:26:
                    e2:42:52:89:ac:40:78:e1:a8:e4:f4:44:13:6e:72:
                    2f:b2:d4:e7:cb:ac:b0:fb:d1:43:60:57:4f:90:54:
                    68:b8:df:59:9d:0e:1c:90:0d:ec:11:92:8f:42:ee:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F4:99:D0:8B:93:EF:72:14:4C:8F:3A:FD:9E:17:C0:A5:75:C7:1F
            X509v3 Authority Key Identifier:
                keyid:EB:C8:DC:0D:98:CC:78:CA:76:D9:F5:56:9C:76:01:C3:6E:9F:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC8DC0D98CC78CA76D9F5569C7601C36E9F0B1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8230AC2C994F093C60B548C4C6683F034B8A6584B64B5C3736F3637DC64ED15/0/3138362e302e3234352e302f32342d3234203d3e20323634373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2a:09:f9:41:35:7d:74:7a:08:3b:16:e7:05:88:8f:89:d4:
         18:47:92:7c:83:a5:f6:de:7d:f2:d7:49:46:1c:0b:0c:6d:dd:
         81:c8:14:cd:e9:98:5c:47:7c:31:1f:9b:ba:db:c2:3f:5e:22:
         c1:1f:97:84:46:6e:c4:19:f9:eb:c7:64:3f:2c:cd:18:9f:91:
         04:fc:db:6b:9a:e8:31:cb:99:a6:9e:ac:f0:91:12:d4:85:0b:
         a2:35:30:b6:66:3c:72:7e:77:8b:5a:b4:2f:e0:e1:5d:f7:e8:
         42:16:44:d4:87:a8:6b:45:72:b9:bd:9f:12:51:44:75:51:a9:
         ec:86:82:ad:84:85:64:1a:ce:f9:6f:ba:78:73:d2:3a:a8:02:
         b7:ab:d4:c9:00:ef:81:36:27:e8:1f:af:66:c9:7d:4b:98:bd:
         ad:47:40:44:3d:be:94:a7:b2:fc:ed:ec:57:b9:23:dd:e1:e6:
         96:e4:b9:3b:12:8e:4c:ce:04:67:c3:3c:4d:61:8f:0f:4a:91:
         e0:d1:9f:b9:4e:58:25:58:b1:36:bd:f8:4a:06:f0:15:30:0a:
         97:1c:28:d9:f2:07:92:fd:45:5d:fe:00:7f:cb:79:b4:e7:9b:
         dd:c2:a0:64:3b:9e:ad:49:ae:c5:5f:da:64:73:b1:dd:dd:c5:
         ff:eb:67:f5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUauXIsHPi5sGtA+Rh/RmMA/SIk6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJDOERDMEQ5OENDNzhDQTc2RDlGNTU2OUM3NjAxQzM2
RTlGMEIxRjAeFw0yNDAzMDUxODA3MDZaFw0yNTAzMDQxODEyMDZaMDMxMTAvBgNV
BAMTKDg1RjQ5OUQwOEI5M0VGNzIxNDRDOEYzQUZEOUUxN0MwQTU3NUM3MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0zqoG/Ttanx0+xTBn2+XrrfR
1nhLmUErd4CXXoxfVyyMPgbhwKmLDqyVQl3A7WGEMdupBf6zrSb7IQKMaF5po8V5
g+vmwlokL49qTD+Yzz7sDklBSeqJD6v5T01CnKb2LfX428dYj3Ah1xeTk5TCIu6g
LzL+tCF5+f0mG1sFfmOtavI+Mijx0DP2Sya5bqETIG6neabxotbU+F2LahwfmcuB
RmNSHU+N+w2D/9+EBDzA+J6vY0UFvcHSp8/Nk947dpLHwaCrhbPlPPhCc1odJuJC
UomsQHjhqOT0RBNuci+y1OfLrLD70UNgV0+QVGi431mdDhyQDewRko9C7gVJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhfSZ0IuT73IUTI86/Z4XwKV1xx8wHwYDVR0j
BBgwFoAU68jcDZjMeMp22fVWnHYBw26fCx8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CODIzMEFDMkM5OTRGMDkzQzYwQjU0OEM0QzY2ODNGMDM0
QjhBNjU4NEI2NEI1QzM3MzZGMzYzN0RDNjRFRDE1LzAvRUJDOERDMEQ5OENDNzhD
QTc2RDlGNTU2OUM3NjAxQzM2RTlGMEIxRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQkM4REMwRDk4Q0M3OENBNzZE
OUY1NTY5Qzc2MDFDMzZFOUYwQjFGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjgyMzBBQzJDOTk0RjA5M0M2MEI1NDhDNEM2NjgzRjAzNEI4QTY1ODRC
NjRCNUMzNzM2RjM2MzdEQzY0RUQxNS8wLzMxMzgzNjJlMzAyZTMyMzQzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM3MzAzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALoA9TAN
BgkqhkiG9w0BAQsFAAOCAQEATyoJ+UE1fXR6CDsW5wWIj4nUGEeSfIOl9t598tdJ
RhwLDG3dgcgUzemYXEd8MR+butvCP14iwR+XhEZuxBn568dkPyzNGJ+RBPzba5ro
McuZpp6s8JES1IULojUwtmY8cn53i1q0L+DhXffoQhZE1Ieoa0Vyub2fElFEdVGp
7IaCrYSFZBrO+W+6eHPSOqgCt6vUyQDvgTYn6B+vZsl9S5i9rUdARD2+lKey/O3s
V7kj3eHmluS5OxKOTM4EZ8M8TWGPD0qR4NGfuU5YJVixNr34SgbwFTAKlxwo2fIH
kv1FXf4Af8t5tOeb3cKgZDuerUmuxV/aZHOx3d3F/+tn9Q==
-----END CERTIFICATE-----
Generated at Sun Jun 16 04:43:12 2024 by rpki-client on console-fra.rpki-client.org