Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3235342e302f32332d3233203d3e2033383136.roa
File:                     3138362e3138332e3235342e302f32332d3233203d3e2033383136.roa (raw, json)
Hash identifier:          ugsqDgJDpe0zgAwHrfhzh8uo4F+j3v1Njs9KmbsKwks=
Subject key identifier:   5F:D0:37:3B:97:47:66:9B:9A:8F:39:04:3E:50:E1:27:78:66:8E:88
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       0E688DA70D10B72D1CFCBA583EF5C8764D52DA47
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3235342e302f32332d3233203d3e2033383136.roa
Signing time:             Tue 05 Mar 2024 18:05:51 +0000
ROA not before:           Tue 05 Mar 2024 18:00:51 +0000
ROA not after:            Tue 04 Mar 2025 18:05:51 +0000
asID:                     3816
IP address blocks:        186.183.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:68:8d:a7:0d:10:b7:2d:1c:fc:ba:58:3e:f5:c8:76:4d:52:da:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Mar  5 18:00:51 2024 GMT
            Not After : Mar  4 18:05:51 2025 GMT
        Subject: CN=5FD0373B9747669B9A8F39043E50E12778668E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4b:4f:bf:89:a0:24:57:cd:01:0c:2a:7a:95:
                    3a:af:1d:aa:98:35:b0:0c:bb:e1:21:df:88:24:cb:
                    a8:77:43:98:5b:87:98:22:c6:88:4e:cc:48:34:ca:
                    d7:34:1a:4d:5b:f2:ea:22:f2:90:52:52:b7:bd:a1:
                    7d:6a:3a:07:1b:34:8c:25:2e:a5:d6:45:a8:5b:2e:
                    de:1b:25:2b:38:ad:eb:89:76:dc:31:aa:e4:20:12:
                    09:1c:12:28:31:ac:08:11:e8:81:e7:37:05:2b:ec:
                    56:91:18:c7:72:9f:c9:8b:ad:c2:70:ea:2f:cf:2d:
                    ce:e7:69:73:79:a9:5e:e2:86:8a:73:47:68:b4:c0:
                    33:da:9a:d5:dc:91:c6:14:11:f3:5d:c3:55:08:32:
                    c3:ad:aa:6a:f7:fd:d2:a8:fc:02:ff:57:5b:3a:29:
                    54:fd:0a:cb:c9:3d:9b:ef:eb:c6:3d:6b:c3:07:d2:
                    cf:a9:75:1d:d6:77:46:58:c7:57:79:33:af:25:bd:
                    b7:a9:39:b2:f9:e4:83:b9:f8:1d:19:53:9f:21:67:
                    cb:d1:93:0a:99:01:d0:d7:9c:37:03:67:c9:0e:da:
                    5f:c8:6d:f3:0c:b0:ab:f8:ff:c0:3a:7c:89:c7:27:
                    ee:c8:90:f8:d2:71:48:e7:ec:e7:99:57:80:58:9e:
                    75:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D0:37:3B:97:47:66:9B:9A:8F:39:04:3E:50:E1:27:78:66:8E:88
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3235342e302f32332d3233203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:46:56:9a:bf:a9:04:0d:c9:2b:ab:c5:86:39:ce:77:4b:e2:
         48:7c:4d:1f:3c:b1:1a:64:90:aa:f5:5a:f4:d8:2c:8b:b2:4b:
         7e:25:a4:18:a2:2f:30:af:92:cc:a4:9c:39:71:05:0a:60:a2:
         23:97:3b:bc:70:31:31:a8:63:ea:dc:61:8a:16:3f:15:b4:c2:
         e9:d4:f6:19:bc:b3:98:85:46:f7:2e:d3:55:9f:30:a1:62:63:
         f5:b1:1e:be:04:b8:ae:1e:a4:b9:50:4a:50:36:a6:3d:19:18:
         16:ff:6d:9b:4b:fe:89:13:2f:73:56:19:a3:f1:5e:42:5f:c8:
         a6:f4:d3:25:83:57:cb:48:d3:73:a7:a5:30:9c:46:2e:a2:fc:
         da:60:28:52:63:f0:0f:4c:1a:7d:05:28:6c:c2:ff:fe:f5:b5:
         09:d1:ac:38:5a:76:29:69:ad:72:05:4a:9b:18:a4:fa:98:93:
         c3:41:b8:00:54:32:72:15:c0:22:00:01:c7:60:1d:48:a3:31:
         1e:e9:ba:87:76:d4:06:25:41:fd:11:23:d3:65:f6:bf:dc:b2:
         3b:7c:66:76:ae:6b:0b:dd:a3:75:9a:c1:cd:10:09:46:00:a0:
         9c:53:a8:9f:36:eb:0c:fe:dc:85:a1:b4:9d:10:c6:9c:c0:66:
         ac:1d:c5:f1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDmiNpw0Qty0c/LpYPvXIdk1S2kcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNDAzMDUxODAwNTFaFw0yNTAzMDQxODA1NTFaMDMxMTAvBgNV
BAMTKDVGRDAzNzNCOTc0NzY2OUI5QThGMzkwNDNFNTBFMTI3Nzg2NjhFODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUS0+/iaAkV80BDCp6lTqvHaqY
NbAMu+Eh34gky6h3Q5hbh5gixohOzEg0ytc0Gk1b8uoi8pBSUre9oX1qOgcbNIwl
LqXWRahbLt4bJSs4reuJdtwxquQgEgkcEigxrAgR6IHnNwUr7FaRGMdyn8mLrcJw
6i/PLc7naXN5qV7ihopzR2i0wDPamtXckcYUEfNdw1UIMsOtqmr3/dKo/AL/V1s6
KVT9CsvJPZvv68Y9a8MH0s+pdR3Wd0ZYx1d5M68lvbepObL55IO5+B0ZU58hZ8vR
kwqZAdDXnDcDZ8kO2l/IbfMMsKv4/8A6fInHJ+7IkPjScUjn7OeZV4BYnnVxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUX9A3O5dHZpuajzkEPlDhJ3hmjogwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzgzNjJlMzEzODMzMmUzMjM1MzQy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMzM4MzEzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbq3/jAN
BgkqhkiG9w0BAQsFAAOCAQEAT0ZWmr+pBA3JK6vFhjnOd0viSHxNHzyxGmSQqvVa
9Ngsi7JLfiWkGKIvMK+SzKScOXEFCmCiI5c7vHAxMahj6txhihY/FbTC6dT2Gbyz
mIVG9y7TVZ8woWJj9bEevgS4rh6kuVBKUDamPRkYFv9tm0v+iRMvc1YZo/FeQl/I
pvTTJYNXy0jTc6elMJxGLqL82mAoUmPwD0wafQUobML//vW1CdGsOFp2KWmtcgVK
mxik+piTw0G4AFQychXAIgABx2AdSKMxHum6h3bUBiVB/REj02X2v9yyO3xmdq5r
C92jdZrBzRAJRgCgnFOonzbrDP7chaG0nRDGnMBmrB3F8Q==
-----END CERTIFICATE-----
Generated at Sun May 5 18:33:27 2024 by rpki-client on console-fra.rpki-client.org