Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3231302e302f32342d3234203d3e20323632313637.roa
File:                     3138362e3134382e3231302e302f32342d3234203d3e20323632313637.roa (raw, json)
Hash identifier:          DzEv3mVAOLi6ca3d+uWQ3yLLXOEqBXW+ctB6pASzcnw=
Subject key identifier:   30:F6:C8:A3:F5:CA:16:69:F6:04:5C:35:73:B3:F0:3A:D8:88:73:BE
Certificate issuer:       /CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
Certificate serial:       0486DDE0193AF582E92F306680A6C56A3C5C5EAF
Authority key identifier: 2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3231302e302f32342d3234203d3e20323632313637.roa
Signing time:             Tue 05 Mar 2024 17:44:41 +0000
ROA not before:           Tue 05 Mar 2024 17:39:41 +0000
ROA not after:            Tue 04 Mar 2025 17:44:41 +0000
asID:                     262167
IP address blocks:        186.148.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:86:dd:e0:19:3a:f5:82:e9:2f:30:66:80:a6:c5:6a:3c:5c:5e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
        Validity
            Not Before: Mar  5 17:39:41 2024 GMT
            Not After : Mar  4 17:44:41 2025 GMT
        Subject: CN=30F6C8A3F5CA1669F6045C3573B3F03AD88873BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:31:26:51:4f:77:f8:ea:65:c7:18:79:c9:2b:
                    2f:e2:d1:77:af:1c:2c:26:81:d6:1e:98:35:e1:dc:
                    6f:a2:59:3b:ae:a5:cf:02:53:56:71:3d:ff:61:8a:
                    ca:cb:6e:4d:af:a2:4f:c5:d4:b5:e3:e6:83:18:42:
                    a7:eb:48:34:de:19:05:75:8c:04:4e:ae:32:2a:94:
                    b7:74:8e:50:7b:a9:cd:85:37:7d:f6:0e:e0:a6:51:
                    30:65:db:82:09:7e:82:1a:b7:1d:30:66:4c:3a:8e:
                    29:ef:00:fa:9a:0f:77:3f:f1:ee:66:8a:d9:45:2d:
                    be:42:d9:73:ca:81:3d:d7:61:80:61:12:a5:b3:a3:
                    c8:15:a7:82:e9:86:41:e7:0e:c1:97:24:d3:60:40:
                    ae:fb:0f:88:8e:c4:2a:b5:a9:74:9a:99:70:cf:63:
                    2a:71:aa:1f:ac:68:21:45:fb:04:63:7d:f2:9c:e1:
                    fc:d3:3e:54:21:af:8c:d3:57:ff:38:e4:fc:0d:f6:
                    76:a7:c5:4d:07:ea:5c:3f:57:3f:2a:0f:c9:8a:3f:
                    24:20:bc:3b:4e:75:f6:1e:14:63:c6:9b:21:58:ab:
                    ca:8d:bb:54:86:14:f0:3a:ae:2c:c4:66:f2:7e:bd:
                    4d:dd:01:ce:fd:81:a0:f1:57:d4:4b:5d:91:fe:a0:
                    99:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F6:C8:A3:F5:CA:16:69:F6:04:5C:35:73:B3:F0:3A:D8:88:73:BE
            X509v3 Authority Key Identifier:
                keyid:2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/3138362e3134382e3231302e302f32342d3234203d3e20323632313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:bc:82:7e:17:be:fe:78:bb:29:55:a6:e1:5e:80:4b:eb:44:
         d2:b0:15:bd:3d:49:c7:00:a6:74:ba:e9:29:b4:61:03:cd:e8:
         97:d6:1e:0a:8c:c7:86:9d:26:91:7e:12:3d:87:cd:36:9f:0e:
         ff:28:c7:83:3a:c8:78:dc:93:2f:12:19:be:78:35:64:36:8f:
         2b:64:c0:f7:18:bd:4f:8a:51:de:f9:56:c9:3d:15:cd:e9:9b:
         f1:6d:89:92:a7:2e:a1:b5:b1:b0:72:b5:f2:72:cf:79:29:61:
         91:35:40:5b:35:c5:c8:bf:69:f3:22:d6:73:71:60:b8:79:9b:
         b1:05:e9:4d:f3:fa:98:f5:6e:9f:4f:80:7a:69:b3:34:32:64:
         88:e2:05:3d:57:39:f7:a8:8e:c3:58:09:c0:3a:4c:25:f1:6e:
         e1:89:f5:a8:95:6b:cf:ad:25:60:2f:e5:17:3e:81:07:13:68:
         84:09:17:41:2c:03:5a:dd:4e:ed:fa:af:3b:bb:1e:00:6a:bf:
         d7:05:5e:48:05:49:6f:e2:fb:81:e6:53:bc:60:bf:7c:79:b9:
         02:68:12:9b:75:3b:45:2f:70:45:3f:af:ed:2f:5b:c2:58:17:
         0d:a2:35:f6:18:5c:8c:c7:52:43:a2:2e:f4:c4:3e:50:56:36:
         0c:12:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:49 2024 by rpki-client on console-ams.rpki-client.org