Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3230302e302f32312d3234203d3e2033383136.roa
File:                     3138362e3138332e3230302e302f32312d3234203d3e2033383136.roa (raw, json)
Hash identifier:          RkWXHAxLZdfd7qO3Tu9S6mAd74ViOiwDlsNx0LwzlPc=
Subject key identifier:   47:4B:E0:27:78:29:37:57:6D:14:59:33:2F:2E:47:95:37:EB:3A:DB
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       2E8C3B6FD54D1B68125F1BF5FF5F304759BA3EF5
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3230302e302f32312d3234203d3e2033383136.roa
Signing time:             Thu 27 Jun 2024 17:55:00 +0000
ROA not before:           Thu 27 Jun 2024 17:50:00 +0000
ROA not after:            Thu 26 Jun 2025 17:55:00 +0000
asID:                     3816
IP address blocks:        186.183.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8c:3b:6f:d5:4d:1b:68:12:5f:1b:f5:ff:5f:30:47:59:ba:3e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Jun 27 17:50:00 2024 GMT
            Not After : Jun 26 17:55:00 2025 GMT
        Subject: CN=474BE027782937576D1459332F2E479537EB3ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d9:3a:18:25:47:f8:37:a0:3d:02:e8:7b:34:
                    b4:3a:fc:6a:7b:30:79:99:6d:19:a3:03:58:aa:3b:
                    01:1a:ab:68:1c:89:4a:cf:31:82:ed:4c:18:0b:df:
                    83:c1:40:eb:64:54:eb:11:d6:43:c0:97:3c:aa:18:
                    02:4e:e3:52:77:e1:ee:16:88:36:20:8d:9d:0d:c0:
                    4f:8a:4c:eb:92:15:aa:b7:10:3b:5f:e5:ee:07:3f:
                    cd:07:f7:1d:a9:26:b9:45:b5:4e:3b:3c:7d:f2:5a:
                    7b:bc:dc:4e:b2:bd:e9:31:92:92:97:34:05:bb:71:
                    bb:0b:9b:b7:2d:6c:10:1b:9d:ab:00:0f:f0:0b:38:
                    fb:25:30:fd:59:4d:4c:e7:c0:67:2c:8c:f8:82:44:
                    a5:fd:47:26:81:9e:8b:0f:ef:65:d0:9f:d7:bc:fb:
                    8c:8a:33:f8:c9:ea:63:52:a6:44:0b:98:70:1d:e0:
                    0c:0c:5a:ce:1f:41:b9:29:77:ed:ab:6c:e2:8d:72:
                    67:7b:67:8a:e2:7c:21:30:a8:6b:c7:fe:94:a6:a4:
                    e8:80:65:2d:52:22:81:72:8e:e4:23:ad:7b:36:d1:
                    87:e3:02:db:36:e3:22:10:4b:09:99:fc:26:58:3a:
                    2f:f4:cb:52:93:51:7a:b9:6c:d6:97:b7:59:65:09:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4B:E0:27:78:29:37:57:6D:14:59:33:2F:2E:47:95:37:EB:3A:DB
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3230302e302f32312d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:dc:d9:d4:a6:c1:3d:6e:c5:03:f1:1c:a8:88:9a:42:d4:14:
         7b:51:5a:75:a2:11:50:45:c4:e8:2e:f7:d0:3a:f8:10:6d:e0:
         1e:31:c3:96:79:76:65:ca:9a:7d:88:1d:87:11:28:42:af:48:
         d2:a9:76:ed:f7:52:a2:35:69:0d:0c:f4:af:65:f6:a4:7d:cd:
         f3:2c:98:01:b8:e4:67:4d:5f:8b:3f:b3:d1:51:05:cb:c9:46:
         75:d3:db:ec:0a:6c:a4:ce:fa:c3:f1:f6:7c:07:57:e6:e0:ed:
         cb:18:06:ec:b5:84:0d:9c:cb:93:01:80:fd:da:c3:5a:eb:30:
         53:05:43:58:e1:1e:00:0f:8f:b8:08:d6:f0:37:68:58:27:02:
         86:cb:47:1a:de:30:b6:d6:5e:44:ea:5c:65:55:99:22:64:24:
         6c:ed:b8:3a:72:9d:ef:d9:90:7c:7e:63:1d:a1:8f:a2:55:f0:
         ca:b4:53:fd:c4:bd:ca:55:53:78:3b:56:c6:e5:66:28:27:1b:
         ce:16:24:2b:f3:c7:4c:81:ab:ba:96:2f:b2:7d:29:d2:83:91:
         04:be:cb:bd:af:e6:b3:f2:f4:fe:b4:54:cb:ba:83:c5:5a:e3:
         08:17:0c:1a:32:5c:0a:c7:81:aa:a9:1a:b6:15:42:f8:57:47:
         98:1c:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org