Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3135302e3232362e302f32342d3234203d3e203238313138.roa
File:                     3138362e3135302e3232362e302f32342d3234203d3e203238313138.roa (raw, json)
Hash identifier:          MuKlp0w6w+UWwVQY5m44YGthfqvf29UHhLgIDOZ7GLo=
Subject key identifier:   27:D5:46:FB:FF:93:B9:B6:4C:D8:E1:A6:D2:5B:65:A3:48:B7:68:4B
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       2EE64DF24D1EC722CD8165A88C9751FCF99358B0
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3135302e3232362e302f32342d3234203d3e203238313138.roa
Signing time:             Tue 05 Mar 2024 18:09:15 +0000
ROA not before:           Tue 05 Mar 2024 18:04:15 +0000
ROA not after:            Tue 04 Mar 2025 18:09:15 +0000
asID:                     28118
IP address blocks:        186.150.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e6:4d:f2:4d:1e:c7:22:cd:81:65:a8:8c:97:51:fc:f9:93:58:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:15 2024 GMT
            Not After : Mar  4 18:09:15 2025 GMT
        Subject: CN=27D546FBFF93B9B64CD8E1A6D25B65A348B7684B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:a9:ff:b7:8d:7f:a5:a1:ef:6f:9c:71:10:
                    ba:7f:59:05:ae:8d:50:a1:e6:83:70:0d:5b:84:fb:
                    8a:39:37:2c:40:61:d0:1e:49:a6:bf:87:8b:45:69:
                    c6:19:c5:c2:6a:d3:ed:92:a6:4e:1a:0a:ea:6b:c2:
                    26:a0:f8:1b:f0:d7:2f:d1:07:db:89:c1:92:3f:48:
                    f9:c9:da:7a:ea:3f:dc:7b:74:8d:02:aa:59:47:5f:
                    d9:7a:15:4d:66:25:e0:ec:03:c5:cd:de:e5:31:15:
                    8c:35:c4:6d:e5:71:97:b9:11:5f:69:99:5f:37:5e:
                    3d:06:5d:aa:0e:2e:40:18:70:34:f4:1a:a2:30:a1:
                    9a:df:d5:97:9c:ba:6d:50:9a:cc:ef:33:d6:e6:b9:
                    af:f8:ac:b0:25:c8:8f:ed:2c:b7:0a:34:be:b9:e9:
                    19:40:ef:d5:30:d2:57:e2:2c:aa:1a:97:6d:0a:93:
                    51:d6:49:aa:11:ca:67:ce:a9:b5:8d:5f:4b:d3:bd:
                    f7:67:1c:a4:19:d0:98:c8:6d:ba:21:24:d3:af:91:
                    74:e0:f1:0f:26:de:c2:24:66:bf:bf:e7:58:fb:cc:
                    52:98:27:95:bb:86:a1:4b:85:89:d5:84:75:ad:89:
                    b0:7e:3a:dd:95:fe:d6:f5:61:8d:59:28:ce:fd:d5:
                    04:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D5:46:FB:FF:93:B9:B6:4C:D8:E1:A6:D2:5B:65:A3:48:B7:68:4B
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3135302e3232362e302f32342d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.150.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:66:35:2a:ce:c5:7f:09:63:30:ee:af:1a:b7:e9:a5:a8:d5:
         21:57:f5:a9:0b:a3:27:c2:51:f4:15:f5:bb:5b:0d:eb:d1:06:
         57:0d:d2:ab:e6:fa:27:8d:20:bb:a2:b8:ce:bf:d2:6b:f3:af:
         d6:11:f2:29:cb:0e:9e:67:b8:7f:ef:b7:ef:bd:27:d6:b6:77:
         5c:95:fa:07:7d:03:47:37:0d:7a:2d:a8:e2:a3:f2:37:f2:07:
         72:33:e7:b5:86:b4:f4:b3:23:68:e1:c1:0a:14:ac:ed:5b:02:
         e9:f5:a0:5f:fb:23:f7:49:79:9f:06:85:33:36:1d:e7:ab:89:
         e0:a5:14:ac:b6:88:9b:ea:54:51:80:2f:78:5a:c4:2e:a4:c2:
         59:08:65:67:6c:a0:d9:24:87:ce:75:71:7d:98:6b:a7:aa:07:
         c5:aa:a0:19:19:ef:1c:2b:d3:2c:93:1f:6c:71:fb:cd:34:01:
         6f:d9:82:3a:03:e3:06:6f:12:75:ec:cc:ea:95:c4:af:19:b2:
         58:9d:48:fb:cd:3b:7b:98:48:e8:50:7e:8e:be:e6:cb:6d:b2:
         66:60:cb:e4:4b:6a:ba:8a:7d:d9:50:18:a8:3a:cb:c1:b8:41:
         ee:f6:8f:5d:af:19:86:37:d9:dc:51:f5:ff:83:d5:37:56:d7:
         27:4d:2c:86
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULuZN8k0exyLNgWWojJdR/PmTWLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2MTJFNUNCNzFERDQ3QzAyMTlGNDA0N0Y0NEFGNDMy
NjBBRTY5QjAeFw0yNDAzMDUxODA0MTVaFw0yNTAzMDQxODA5MTVaMDMxMTAvBgNV
BAMTKDI3RDU0NkZCRkY5M0I5QjY0Q0Q4RTFBNkQyNUI2NUEzNDhCNzY4NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrKn/t41/paHvb5xxELp/WQWu
jVCh5oNwDVuE+4o5NyxAYdAeSaa/h4tFacYZxcJq0+2Spk4aCuprwiag+Bvw1y/R
B9uJwZI/SPnJ2nrqP9x7dI0CqllHX9l6FU1mJeDsA8XN3uUxFYw1xG3lcZe5EV9p
mV83Xj0GXaoOLkAYcDT0GqIwoZrf1Zecum1QmszvM9bmua/4rLAlyI/tLLcKNL65
6RlA79Uw0lfiLKoal20Kk1HWSaoRymfOqbWNX0vTvfdnHKQZ0JjIbbohJNOvkXTg
8Q8m3sIkZr+/51j7zFKYJ5W7hqFLhYnVhHWtibB+Ot2V/tb1YY1ZKM791QTvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUJ9VG+/+TubZM2OGm0ltlo0i3aEswHwYDVR0j
BBgwFoAUCWEuXLcd1HwCGfQEf0SvQyYK5pswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMEU3QTkxMzZGMURBRDI2NEUwNEI2NzM2QkZBRkE3MjNC
QkYzNEQ2MTVCRjcxMkU5ODkxNkYxREVEQzg2MDM1LzAvMDk2MTJFNUNCNzFERDQ3
QzAyMTlGNDA0N0Y0NEFGNDMyNjBBRTY5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTYxMkU1Q0I3MURENDdDMDIx
OUY0MDQ3RjQ0QUY0MzI2MEFFNjlCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzBFN0E5MTM2RjFEQUQyNjRFMDRCNjczNkJGQUZBNzIzQkJGMzRENjE1
QkY3MTJFOTg5MTZGMURFREM4NjAzNS8wLzMxMzgzNjJlMzEzNTMwMmUzMjMyMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzEzMTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAupbi
MA0GCSqGSIb3DQEBCwUAA4IBAQCEZjUqzsV/CWMw7q8at+mlqNUhV/WpC6MnwlH0
FfW7Ww3r0QZXDdKr5vonjSC7orjOv9Jr86/WEfIpyw6eZ7h/77fvvSfWtndclfoH
fQNHNw16Lajio/I38gdyM+e1hrT0syNo4cEKFKztWwLp9aBf+yP3SXmfBoUzNh3n
q4ngpRSstoib6lRRgC94WsQupMJZCGVnbKDZJIfOdXF9mGunqgfFqqAZGe8cK9Ms
kx9scfvNNAFv2YI6A+MGbxJ17MzqlcSvGbJYnUj7zTt7mEjoUH6OvubLbbJmYMvk
S2q6in3ZUBioOsvBuEHu9o9drxmGN9ncUfX/g9U3VtcnTSyG
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:18 2024 by rpki-client on console-ams.rpki-client.org