Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3234382e302f32322d3234203d3e203232333638.roa
File:                     3138362e3138332e3234382e302f32322d3234203d3e203232333638.roa (raw, json)
Hash identifier:          f/dQ6iM3q2cb/LE/ddziO/zFOfuRFoZzm3qqtYfgcus=
Subject key identifier:   DB:13:68:D7:97:ED:C9:21:32:0B:93:C7:73:B3:47:61:AB:53:A1:B5
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       1159DA23EFB26AE340E7E479D6AA24500F2B7923
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3234382e302f32322d3234203d3e203232333638.roa
Signing time:             Tue 05 Mar 2024 18:05:54 +0000
ROA not before:           Tue 05 Mar 2024 18:00:54 +0000
ROA not after:            Tue 04 Mar 2025 18:05:54 +0000
asID:                     22368
IP address blocks:        186.183.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:59:da:23:ef:b2:6a:e3:40:e7:e4:79:d6:aa:24:50:0f:2b:79:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar  5 18:00:54 2024 GMT
            Not After : Mar  4 18:05:54 2025 GMT
        Subject: CN=DB1368D797EDC921320B93C773B34761AB53A1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:12:90:e3:6d:49:aa:19:9c:07:f4:49:eb:15:
                    36:8a:bb:db:b1:dd:47:d6:a4:1b:d6:6c:a0:3f:e7:
                    da:a7:71:5a:43:6c:30:3c:04:75:99:78:33:5b:1e:
                    82:ac:2f:7b:7d:f8:90:dc:00:a6:94:5e:f2:c5:88:
                    23:9d:d0:a8:69:4a:2e:5d:b5:72:bd:94:7a:5a:e3:
                    02:0d:7f:c8:f4:71:57:62:ef:9c:87:21:6b:af:85:
                    eb:6e:86:f7:ad:6d:04:d7:9b:5f:8b:27:35:cf:74:
                    6b:fb:d5:c4:96:0a:7a:51:87:6c:e6:5b:63:2e:06:
                    03:e9:cb:32:19:07:96:ff:82:e9:54:79:04:03:07:
                    0c:ce:2b:3f:31:06:61:27:56:5a:e2:a1:f7:ab:98:
                    02:29:ed:44:6d:8e:0c:c7:24:f8:27:3c:43:a1:b1:
                    34:bd:a6:eb:6a:4b:67:57:b0:dd:a1:3c:d1:59:06:
                    7b:a2:88:40:ca:72:39:08:fe:b5:f3:36:0f:70:11:
                    d0:49:48:32:48:80:f7:d7:0f:ab:57:fa:9f:30:16:
                    a2:11:97:5b:66:b8:2a:c0:c4:fc:21:7c:f2:4c:60:
                    cb:40:2b:c3:41:68:19:b1:f4:e9:be:0a:7e:75:06:
                    c3:58:47:d2:71:ae:0a:8a:14:04:76:cf:a7:27:68:
                    47:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:13:68:D7:97:ED:C9:21:32:0B:93:C7:73:B3:47:61:AB:53:A1:B5
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3234382e302f32322d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:f7:0a:78:28:6d:46:84:01:c7:4b:50:be:b2:00:49:c8:d6:
         f0:a0:29:1e:f1:4b:e0:f7:cf:d7:11:54:8c:64:27:cc:06:99:
         75:e6:79:4e:ae:75:9a:e7:dd:72:20:7d:be:e5:41:64:24:db:
         f0:2a:11:db:b9:46:eb:98:66:d9:ea:e9:a6:ce:61:86:ef:4f:
         e4:24:5c:8d:23:97:56:45:64:08:23:4a:84:ec:71:a0:97:41:
         2f:ba:cc:d4:65:d1:f4:25:79:54:1b:c8:a2:35:7c:95:5b:f5:
         f9:b4:50:6a:3c:84:24:98:7d:89:9f:97:80:eb:16:fb:a3:f6:
         58:cb:c1:98:54:c6:fc:a6:31:0b:f7:5d:a7:df:c4:5d:f0:2e:
         1a:6e:e1:7b:e9:3b:bb:3d:52:b8:ea:71:c9:ba:7a:aa:92:47:
         b2:12:58:51:87:01:07:26:46:8c:20:bc:42:7f:5d:d3:24:d5:
         62:20:2a:65:44:f1:b8:0c:00:95:3b:43:b9:07:21:da:17:70:
         1d:35:c0:63:00:22:e3:3a:5f:60:98:69:cf:62:27:2f:65:41:
         b3:24:46:b8:8d:4c:7b:64:0d:29:74:96:0d:4a:42:64:a7:17:
         9d:2b:ea:da:5f:e5:40:74:6f:34:10:42:62:b0:0a:be:4e:00:
         49:62:f9:47
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEVnaI++yauNA5+R51qokUA8reSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNDAzMDUxODAwNTRaFw0yNTAzMDQxODA1NTRaMDMxMTAvBgNV
BAMTKERCMTM2OEQ3OTdFREM5MjEzMjBCOTNDNzczQjM0NzYxQUI1M0ExQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpEpDjbUmqGZwH9EnrFTaKu9ux
3UfWpBvWbKA/59qncVpDbDA8BHWZeDNbHoKsL3t9+JDcAKaUXvLFiCOd0KhpSi5d
tXK9lHpa4wINf8j0cVdi75yHIWuvhetuhvetbQTXm1+LJzXPdGv71cSWCnpRh2zm
W2MuBgPpyzIZB5b/gulUeQQDBwzOKz8xBmEnVlriofermAIp7URtjgzHJPgnPEOh
sTS9putqS2dXsN2hPNFZBnuiiEDKcjkI/rXzNg9wEdBJSDJIgPfXD6tX+p8wFqIR
l1tmuCrAxPwhfPJMYMtAK8NBaBmx9Om+Cn51BsNYR9JxrgqKFAR2z6cnaEdNAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU2xNo15ftySEyC5PHc7NHYatTobUwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzgzNjJlMzEzODMzMmUzMjM0Mzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMyMzMzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCurf4
MA0GCSqGSIb3DQEBCwUAA4IBAQB99wp4KG1GhAHHS1C+sgBJyNbwoCke8Uvg98/X
EVSMZCfMBpl15nlOrnWa591yIH2+5UFkJNvwKhHbuUbrmGbZ6ummzmGG70/kJFyN
I5dWRWQII0qE7HGgl0EvuszUZdH0JXlUG8iiNXyVW/X5tFBqPIQkmH2Jn5eA6xb7
o/ZYy8GYVMb8pjEL912n38Rd8C4abuF76Tu7PVK46nHJunqqkkeyElhRhwEHJkaM
ILxCf13TJNViICplRPG4DACVO0O5ByHaF3AdNcBjACLjOl9gmGnPYicvZUGzJEa4
jUx7ZA0pdJYNSkJkpxedK+raX+VAdG80EEJisAq+TgBJYvlH
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org