Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3233322e302f32332d3233203d3e2033383136.roa
File:                     3138362e3138332e3233322e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          ZgbjO9EhLGAW6MXFIoWlFLtURCQmvOx27EXPMZOac2A=
Subject key identifier:   D0:1B:E7:07:64:B2:7F:C1:BF:D9:EF:6C:69:96:6C:FF:84:61:DA:58
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       09C09C2F6DF759DCF52381DF9A78F419D46515E7
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3233322e302f32332d3233203d3e2033383136.roa
Signing time:             Tue 05 Mar 2024 18:06:03 +0000
ROA not before:           Tue 05 Mar 2024 18:01:03 +0000
ROA not after:            Tue 04 Mar 2025 18:06:03 +0000
asID:                     3816
IP address blocks:        186.183.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c0:9c:2f:6d:f7:59:dc:f5:23:81:df:9a:78:f4:19:d4:65:15:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar  5 18:01:03 2024 GMT
            Not After : Mar  4 18:06:03 2025 GMT
        Subject: CN=D01BE70764B27FC1BFD9EF6C69966CFF8461DA58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:b0:50:48:b0:44:65:40:e2:a9:cc:0f:a4:
                    c6:cd:6a:d1:5d:dc:d6:c6:a4:18:b1:1f:37:9d:6e:
                    6b:89:87:a6:32:de:f5:19:0a:8a:07:59:3f:61:60:
                    40:24:3b:b4:94:64:50:9c:99:8a:98:3e:f7:c6:40:
                    4f:dd:1c:7e:80:b6:d5:61:03:a9:1e:a3:a1:71:d2:
                    89:86:aa:28:6d:52:de:21:7b:5a:8c:3a:df:33:18:
                    1b:f9:20:25:e7:0b:ce:ef:97:7e:76:48:97:26:b4:
                    54:db:e9:9b:11:ac:0f:26:29:eb:ef:06:22:4e:f3:
                    c6:7e:6b:36:90:49:61:53:de:1a:79:26:6a:20:d9:
                    cf:c3:74:9c:f0:99:2e:98:5f:54:46:86:1e:e6:54:
                    e9:b3:8e:f9:db:48:2d:ca:c7:94:19:dd:c8:ca:86:
                    01:97:7d:ac:08:27:e3:15:c1:95:15:11:4d:02:5b:
                    c0:11:b5:b4:5f:9d:7e:ab:bb:9f:96:2a:c2:c3:37:
                    94:e2:1f:5f:75:1f:90:71:00:5f:63:e2:bf:fc:f5:
                    0f:33:5f:6d:17:b5:49:d4:bb:43:2e:71:19:6b:33:
                    5c:b9:b0:12:43:75:12:f2:3f:91:4f:e0:25:0a:95:
                    6c:b7:5d:86:ad:95:52:be:47:35:2c:17:dc:7c:5e:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1B:E7:07:64:B2:7F:C1:BF:D9:EF:6C:69:96:6C:FF:84:61:DA:58
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3233322e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:27:4c:c4:9f:ed:2c:38:f2:2b:81:b7:f7:3a:0b:93:cf:9b:
         38:79:ec:f3:3b:84:b1:2e:d8:3f:71:36:0b:f7:6d:ae:f0:ab:
         3f:50:22:b0:db:c2:53:f2:ef:65:13:7e:71:aa:52:36:3a:d7:
         8f:0a:f3:dd:a1:8d:7b:9c:2f:ed:d2:39:5d:e3:77:37:06:11:
         bf:fd:92:21:c6:a8:dd:7c:5c:9b:54:96:a1:af:5b:ad:cf:33:
         61:11:f6:77:c3:61:ba:80:be:e2:3f:b9:c7:a3:74:07:9f:f9:
         e0:27:69:e7:2b:9c:78:bc:78:3f:d9:db:f1:11:17:10:77:ed:
         5e:7c:f1:fc:9a:09:ca:bd:32:e6:4c:33:93:4f:52:aa:73:be:
         19:20:d2:2f:df:f2:df:5e:fc:48:44:7b:a5:76:e0:f2:be:46:
         41:68:77:8b:07:58:83:9a:12:1f:f6:ac:1d:0a:de:6d:8d:0f:
         2b:21:b8:08:93:5c:a9:e8:2e:7f:26:20:79:5e:6c:ca:1e:7a:
         bd:f6:db:33:46:46:6c:94:d5:98:f5:06:aa:dd:04:0b:9c:e1:
         dc:59:90:fa:0b:49:97:b7:24:86:6f:9f:d2:e6:b1:95:62:34:
         98:e0:bc:c0:3d:7a:0e:e3:83:d2:39:72:08:5e:c9:f3:56:25:
         70:e4:60:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:33:27 2024 by rpki-client on console-fra.rpki-client.org