Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3230392e302f32342d3234203d3e20323632313637.roa
File:                     3138362e3134382e3230392e302f32342d3234203d3e20323632313637.roa (raw, json)
Hash identifier:          sTgUiiQsEYn4BOPzaDPvfs3kt7pqdZu6V2TDo7Nbq10=
Subject key identifier:   70:27:68:64:27:3F:E0:A4:77:D5:2B:14:31:54:E6:9D:D3:4A:A9:83
Certificate issuer:       /CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
Certificate serial:       0CC45618D437577B6B40A2CB0A0018DB3D174D8E
Authority key identifier: 2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3230392e302f32342d3234203d3e20323632313637.roa
Signing time:             Tue 05 Mar 2024 17:44:41 +0000
ROA not before:           Tue 05 Mar 2024 17:39:41 +0000
ROA not after:            Tue 04 Mar 2025 17:44:41 +0000
asID:                     262167
IP address blocks:        186.148.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c4:56:18:d4:37:57:7b:6b:40:a2:cb:0a:00:18:db:3d:17:4d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
        Validity
            Not Before: Mar  5 17:39:41 2024 GMT
            Not After : Mar  4 17:44:41 2025 GMT
        Subject: CN=70276864273FE0A477D52B143154E69DD34AA983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:31:c5:1e:d4:8b:c0:89:dc:b9:7c:98:04:bb:
                    12:d0:8f:0e:c3:49:92:e5:cb:51:fe:ee:44:30:09:
                    7d:9c:6a:ee:fe:86:5d:35:62:59:f1:ad:fa:3a:53:
                    36:51:14:8a:ab:e7:aa:23:f3:13:b1:de:35:92:cd:
                    f8:60:15:d6:d3:25:3b:af:8a:11:05:c4:26:7a:85:
                    6b:be:9b:7a:ce:79:2a:21:8f:3c:7f:b1:2a:5b:e4:
                    03:ff:b2:c1:cc:06:c9:0c:50:ec:95:3e:e3:b6:e7:
                    bb:16:3e:8c:61:37:3f:17:df:38:0c:30:f6:f2:9a:
                    bf:5d:f5:72:2c:43:02:4d:5d:61:b0:73:47:6b:fa:
                    e8:bf:aa:14:96:e9:02:32:2b:38:3d:25:06:49:7d:
                    29:72:0c:2b:a3:5a:09:37:26:2a:2a:46:67:0f:34:
                    72:a3:05:3b:88:4c:1c:7a:49:af:60:b5:fe:36:fb:
                    74:8e:ac:27:1a:83:f8:5e:57:48:11:e4:80:92:48:
                    68:f5:7b:4b:eb:b0:c7:00:f1:37:bf:62:51:a1:d1:
                    d9:da:4d:e9:2e:62:3a:89:60:67:74:d0:68:cf:86:
                    4e:26:ff:28:9f:61:44:6b:57:f2:28:ed:6d:01:9a:
                    e8:b9:86:1a:c5:0f:cc:dc:5f:40:d2:c5:1d:77:e3:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:27:68:64:27:3F:E0:A4:77:D5:2B:14:31:54:E6:9D:D3:4A:A9:83
            X509v3 Authority Key Identifier:
                keyid:2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3230392e302f32342d3234203d3e20323632313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:4e:83:60:4e:50:34:2b:27:ea:68:f1:2a:c4:46:64:ed:fc:
         d9:83:5d:c2:16:39:0d:9a:12:a1:f3:83:98:4b:fa:52:80:f2:
         24:fd:4b:1d:6d:6f:24:3c:e6:07:ec:a5:b7:5d:40:59:85:c6:
         b1:d1:ee:0c:6d:c7:f0:5d:e3:81:70:b9:c3:8e:23:d3:a3:ed:
         51:42:7c:a4:1d:1d:e3:bd:82:31:66:c0:fb:cb:31:15:bd:c4:
         dc:92:e5:58:f7:f5:a2:d3:4f:b6:7f:3e:24:3f:27:8e:61:6e:
         e1:6f:ef:8b:7b:81:f3:3f:4c:28:cc:9c:b9:52:2f:fd:41:53:
         25:5a:2e:9d:83:7e:a5:24:7b:a9:46:58:82:a5:e3:e5:c2:09:
         23:44:99:32:3f:b3:f0:ae:37:3c:e6:ae:c4:cb:56:59:33:17:
         b2:bc:00:b9:9c:d4:12:ad:d4:c4:01:74:95:ab:e9:ed:7d:c9:
         ac:4f:1a:26:f8:6c:95:b3:4f:18:55:c5:5e:26:d4:ea:76:c0:
         47:9c:28:75:ef:5b:0b:84:55:7c:ad:5d:7f:6a:ee:68:be:96:
         53:18:81:82:e3:d9:ee:f3:e8:ad:0a:2f:b0:6d:d8:e5:89:60:
         4b:d9:f1:e5:9d:dd:9a:bb:00:73:73:7e:d1:15:f7:5b:92:65:
         57:64:14:26
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUDMRWGNQ3V3trQKLLCgAY2z0XTY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUwMkVDNkQxRUVFN0FENzhGNUI4RjdDNkM4Qjc5OUE2
NkI0Q0IyMDAeFw0yNDAzMDUxNzM5NDFaFw0yNTAzMDQxNzQ0NDFaMDMxMTAvBgNV
BAMTKDcwMjc2ODY0MjczRkUwQTQ3N0Q1MkIxNDMxNTRFNjlERDM0QUE5ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGMcUe1IvAidy5fJgEuxLQjw7D
SZLly1H+7kQwCX2cau7+hl01Ylnxrfo6UzZRFIqr56oj8xOx3jWSzfhgFdbTJTuv
ihEFxCZ6hWu+m3rOeSohjzx/sSpb5AP/ssHMBskMUOyVPuO257sWPoxhNz8X3zgM
MPbymr9d9XIsQwJNXWGwc0dr+ui/qhSW6QIyKzg9JQZJfSlyDCujWgk3JioqRmcP
NHKjBTuITBx6Sa9gtf42+3SOrCcag/heV0gR5ICSSGj1e0vrsMcA8Te/YlGh0dna
TekuYjqJYGd00GjPhk4m/yifYURrV/Io7W0Bmui5hhrFD8zcX0DSxR1345D/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUcCdoZCc/4KR31SsUMVTmndNKqYMwHwYDVR0j
BBgwFoAULgLsbR7uetePW498bIt5mma0yyAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GM0JEOTQ1ODExMDY0RTY2ODdEOEFEMERFNTBFOUQ1Q0RE
MTVGRjYwMEVBRDgxRTI5RjYyNTQzOTMzNUMxMzYwLzAvMkUwMkVDNkQxRUVFN0FE
NzhGNUI4RjdDNkM4Qjc5OUE2NkI0Q0IyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTAyRUM2RDFFRUU3QUQ3OEY1
QjhGN0M2QzhCNzk5QTY2QjRDQjIwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjNCRDk0NTgxMTA2NEU2Njg3RDhBRDBERTUwRTlENUNERDE1RkY2MDBF
QUQ4MUUyOUY2MjU0MzkzMzVDMTM2MC8wLzMxMzgzNjJlMzEzNDM4MmUzMjMwMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM2Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC6
lNEwDQYJKoZIhvcNAQELBQADggEBANBOg2BOUDQrJ+po8SrERmTt/NmDXcIWOQ2a
EqHzg5hL+lKA8iT9Sx1tbyQ85gfspbddQFmFxrHR7gxtx/Bd44FwucOOI9Oj7VFC
fKQdHeO9gjFmwPvLMRW9xNyS5Vj39aLTT7Z/PiQ/J45hbuFv74t7gfM/TCjMnLlS
L/1BUyVaLp2DfqUke6lGWIKl4+XCCSNEmTI/s/CuNzzmrsTLVlkzF7K8ALmc1BKt
1MQBdJWr6e19yaxPGib4bJWzTxhVxV4m1Op2wEecKHXvWwuEVXytXX9q7mi+llMY
gYLj2e7z6K0KL7Bt2OWJYEvZ8eWd3Zq7AHNzftEV91uSZVdkFCY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org