Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3230382e302f32342d3234203d3e20323632313637.roa
File:                     3138362e3134382e3230382e302f32342d3234203d3e20323632313637.roa (raw, json)
Hash identifier:          xlDhGrUzN60urhAJn2jmKqrmOPmfj/9AYnPgkV4k7ic=
Subject key identifier:   49:8A:D9:DE:03:F6:B5:5E:EB:0F:7C:B0:D1:9D:4C:72:F4:D3:9C:16
Certificate issuer:       /CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
Certificate serial:       3A30CF9A740B8D6AFBABA444C16E7E22EC51CC5F
Authority key identifier: 2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3230382e302f32342d3234203d3e20323632313637.roa
Signing time:             Tue 05 Mar 2024 17:44:41 +0000
ROA not before:           Tue 05 Mar 2024 17:39:41 +0000
ROA not after:            Tue 04 Mar 2025 17:44:41 +0000
asID:                     262167
IP address blocks:        186.148.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:30:cf:9a:74:0b:8d:6a:fb:ab:a4:44:c1:6e:7e:22:ec:51:cc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
        Validity
            Not Before: Mar  5 17:39:41 2024 GMT
            Not After : Mar  4 17:44:41 2025 GMT
        Subject: CN=498AD9DE03F6B55EEB0F7CB0D19D4C72F4D39C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:37:a5:a4:d4:2f:0b:b0:0b:c0:5f:aa:1f:
                    c9:51:e4:4c:30:20:37:88:e6:bf:5d:0b:08:21:86:
                    f6:17:19:3e:0f:55:1c:2c:fb:b5:98:05:8c:a2:34:
                    fa:0f:07:ef:27:11:88:a0:50:d3:f1:20:d0:07:a6:
                    32:ae:39:50:e8:c2:13:e1:14:00:67:f2:c8:cf:cf:
                    3d:a9:2d:8e:9f:86:1f:78:dd:08:47:d9:2b:57:d3:
                    25:ee:08:67:d0:4a:0d:96:81:b0:4f:59:3d:a5:22:
                    87:a6:8e:fc:e2:35:14:c5:f3:e5:31:2a:c2:8c:64:
                    20:fa:7b:a0:ff:01:67:62:de:4d:32:c2:88:e3:da:
                    d3:57:a3:de:47:89:ba:8f:cb:ec:d6:79:ee:f8:a1:
                    50:2e:9e:45:9b:12:f2:d6:25:3e:61:26:35:5b:79:
                    aa:35:33:f8:44:86:b8:d4:ce:91:18:32:b3:75:3f:
                    40:0f:8b:63:fc:b6:6e:29:2b:26:4b:e5:31:af:89:
                    ab:8d:89:e3:1a:d7:8b:e7:9f:61:f9:dd:56:1a:dc:
                    1f:06:33:84:9c:a2:47:9d:df:e6:34:e2:c4:39:cd:
                    d5:ac:0d:85:4a:44:1b:15:2d:4a:f4:34:42:42:29:
                    8a:d8:49:91:22:6c:3d:4d:a9:20:ab:e2:d8:63:e1:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8A:D9:DE:03:F6:B5:5E:EB:0F:7C:B0:D1:9D:4C:72:F4:D3:9C:16
            X509v3 Authority Key Identifier:
                keyid:2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3230382e302f32342d3234203d3e20323632313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:3e:a8:40:f2:51:52:14:70:3a:8c:fc:cb:5d:37:3a:da:7b:
         01:03:ac:4f:0c:2f:49:da:a5:88:6a:02:68:9d:7f:36:11:23:
         53:19:4e:60:6e:a5:7c:cc:31:2b:99:db:aa:17:06:c0:e8:cc:
         cd:21:91:40:e7:09:38:49:05:4c:dc:8b:ba:6e:af:fb:56:57:
         0a:b9:af:46:2a:56:e8:23:17:52:75:46:93:41:6a:c0:00:6e:
         fe:dd:96:f7:eb:43:5f:92:3d:8c:84:99:a7:31:b6:47:41:08:
         35:76:b3:79:8a:22:c5:8c:4d:32:ee:a6:93:6d:80:db:55:f9:
         79:cf:d0:70:a1:b9:96:7b:80:fb:73:38:89:a3:f7:38:38:3b:
         75:4a:55:da:39:95:ab:0d:9e:57:da:8e:dc:1f:97:dc:74:b0:
         8b:af:92:4b:68:6f:a5:e6:c0:f3:ed:24:80:46:23:46:b3:f4:
         49:06:5b:10:8d:58:3d:35:d6:c0:db:92:03:68:d8:66:d8:3b:
         89:26:7d:16:49:f1:2d:57:f7:2c:b0:9d:94:b4:d6:9a:38:c9:
         42:72:fe:d6:bf:8f:30:c5:23:7e:6c:c9:1c:d5:71:97:2f:61:
         b3:8a:cc:6d:65:68:cf:c5:34:11:ac:c9:55:2d:2c:86:6e:65:
         dd:67:94:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org