Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3139322e302f31392d3234203d3e203232333638.roa
File:                     3138362e3138332e3139322e302f31392d3234203d3e203232333638.roa (raw, json)
Hash identifier:          V0tgA4FghN2L599/WNnReWfIDW4AW5uFoz5f/OWM43Q=
Subject key identifier:   50:4C:CC:74:1B:8C:5B:4A:DF:50:61:FE:30:30:D5:B7:E2:D1:78:B1
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       6D775248879D6851A4FB51696F228826A5656AD4
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3139322e302f31392d3234203d3e203232333638.roa
Signing time:             Tue 05 Mar 2024 18:05:52 +0000
ROA not before:           Tue 05 Mar 2024 18:00:52 +0000
ROA not after:            Tue 04 Mar 2025 18:05:52 +0000
asID:                     22368
IP address blocks:        186.183.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:77:52:48:87:9d:68:51:a4:fb:51:69:6f:22:88:26:a5:65:6a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar  5 18:00:52 2024 GMT
            Not After : Mar  4 18:05:52 2025 GMT
        Subject: CN=504CCC741B8C5B4ADF5061FE3030D5B7E2D178B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:f5:ed:6f:a6:e4:e2:de:6c:4d:24:16:9e:
                    fa:e2:a1:db:42:19:82:a6:54:58:b8:53:be:31:5f:
                    84:aa:fa:bc:7c:04:c2:e7:cf:17:bf:5f:22:c8:49:
                    e9:93:c1:ac:c1:1e:4d:2a:21:de:5c:73:1d:44:7b:
                    91:14:9b:01:c8:69:82:15:65:48:6c:ae:f2:64:97:
                    39:9e:21:12:bf:b2:1d:3a:34:90:8b:45:97:3a:26:
                    a9:40:a8:00:f1:26:fd:e9:d1:2e:94:83:9b:bd:07:
                    8e:f9:69:59:10:4c:0e:fa:8c:d8:58:07:14:91:4e:
                    60:13:56:7f:7d:d4:4a:39:2a:0b:05:cc:fd:78:ec:
                    22:2b:be:64:43:db:f7:2d:8e:c1:07:cc:13:81:30:
                    1f:38:87:3e:de:bb:00:12:dc:df:2f:03:9d:5a:7a:
                    3a:37:b5:73:45:58:5a:e1:af:d6:e9:19:f0:9f:eb:
                    36:6b:9d:a6:96:0d:88:75:ff:ff:5c:07:e3:c6:57:
                    78:80:37:7b:f9:91:b4:ec:ce:2f:08:16:6a:ca:28:
                    32:68:a1:c0:5f:47:cb:46:b6:fc:83:03:d4:9e:97:
                    54:44:e2:55:e4:04:92:90:e6:ae:4a:4c:da:bc:c0:
                    5f:76:80:db:86:01:84:d1:b4:53:7b:71:58:ad:f4:
                    7c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4C:CC:74:1B:8C:5B:4A:DF:50:61:FE:30:30:D5:B7:E2:D1:78:B1
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3139322e302f31392d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:f2:b5:c6:f8:ff:91:ab:8f:3c:ca:95:94:3a:95:ad:d3:33:
         9d:e3:e3:66:89:1c:f6:b6:86:18:71:0f:e7:e4:64:d7:22:87:
         ef:1d:e2:48:6e:61:a1:85:8a:33:cf:11:f4:dd:b3:5b:c8:29:
         0c:34:e9:4b:d7:7f:b1:67:74:e9:de:04:8c:24:cd:d8:a7:ea:
         18:c1:31:44:03:23:50:ca:d5:a2:79:25:53:b8:30:49:bb:17:
         04:aa:c3:2b:ee:58:e4:15:a3:d3:f5:43:f7:b5:da:b6:d1:22:
         77:41:41:d1:e8:62:f2:38:07:d8:42:3b:89:98:2b:bf:22:98:
         5d:32:4a:4b:4c:40:cf:5a:b2:f3:7a:8f:d4:c9:64:c0:fd:69:
         c4:ef:2d:28:7e:33:ce:f9:b9:89:fb:9c:0c:55:98:a8:36:89:
         89:1b:d9:9a:c5:83:9d:61:5f:46:28:64:c0:e2:12:55:f8:60:
         43:cf:74:30:14:c6:f1:62:9a:0b:99:06:2c:2c:f1:39:63:34:
         56:31:0f:c1:5a:b7:19:83:5d:44:41:33:a6:bf:28:03:53:24:
         32:77:af:e0:4b:45:29:a2:3f:de:2c:c8:9a:9b:15:89:87:f7:
         02:2e:fd:1d:48:e5:77:ba:07:e2:a6:2a:43:cb:8e:4a:8c:19:
         a1:ee:02:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 12:45:21 2024 by rpki-client on console-fra.rpki-client.org