Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e3135312e39342e302f32342d3332203d3e203134373534.roa
File:                     3138362e3135312e39342e302f32342d3332203d3e203134373534.roa (raw, json)
Hash identifier:          fsjj0l9t1NdkMSoD/gVgo+xE2b5dLi1w2ws6+vfbPQY=
Subject key identifier:   3D:E8:AA:51:BB:3C:61:2E:30:26:D8:6E:DE:0B:B7:13:9F:A2:6B:A8
Certificate issuer:       /CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
Certificate serial:       18C82340A4C4A88D5F9F81C608BCB534D4068CF2
Authority key identifier: AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e3135312e39342e302f32342d3332203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 18:08:28 +0000
ROA not before:           Tue 05 Mar 2024 18:03:28 +0000
ROA not after:            Tue 04 Mar 2025 18:08:28 +0000
asID:                     14754
IP address blocks:        186.151.94.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 May 2024 21:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c8:23:40:a4:c4:a8:8d:5f:9f:81:c6:08:bc:b5:34:d4:06:8c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D
        Validity
            Not Before: Mar  5 18:03:28 2024 GMT
            Not After : Mar  4 18:08:28 2025 GMT
        Subject: CN=3DE8AA51BB3C612E3026D86EDE0BB7139FA26BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:26:0f:1b:3e:73:45:78:23:a2:ae:e9:ac:
                    ba:ca:87:c5:66:39:46:c0:27:36:d7:28:72:23:9e:
                    04:fc:0c:b9:98:f6:bb:95:6e:b5:f9:2b:20:c6:d7:
                    9e:2f:93:01:4b:c5:dc:97:f5:2f:c9:91:0c:7d:d3:
                    86:b1:b6:85:da:56:b4:c7:2d:a6:78:f0:20:0f:cd:
                    54:f8:a0:3c:53:c0:da:a0:db:04:8b:69:bd:23:a0:
                    26:9a:eb:88:f6:2c:70:b1:9d:d3:aa:bb:73:39:bd:
                    17:1c:33:0f:eb:48:c5:cb:4f:9d:6e:36:ee:9a:2a:
                    a3:ef:af:63:06:55:b4:8d:d3:49:73:10:e5:ed:63:
                    b3:c1:1d:54:37:68:59:bd:14:3f:45:3b:87:d7:f9:
                    9e:e5:94:98:5c:4f:43:8a:87:f9:de:2d:6e:84:ec:
                    06:ed:7a:c4:e5:a0:95:5c:49:94:02:d1:59:ab:e8:
                    8d:05:fe:2c:8c:df:fd:08:45:5b:d2:00:8f:b4:15:
                    ef:8a:20:d4:71:43:38:9a:93:c2:04:9f:7a:9f:3a:
                    b7:6c:26:c0:0e:92:17:2f:2f:af:06:10:ef:8b:e2:
                    a1:ed:16:ec:08:1c:de:6d:42:16:9e:b2:5f:e0:90:
                    5d:1f:91:03:38:97:8b:4b:2b:21:45:0d:41:f5:e2:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E8:AA:51:BB:3C:61:2E:30:26:D8:6E:DE:0B:B7:13:9F:A2:6B:A8
            X509v3 Authority Key Identifier:
                keyid:AD:31:6B:C5:0E:18:6B:C4:D6:EE:D8:B1:A7:1E:2F:7F:AA:5F:95:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD316BC50E186BC4D6EED8B1A71E2F7FAA5F953D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F40AADD9C3A2CB7ADB90AFE235A6092B23824D5EF00503F30B65187B2B22F321/0/3138362e3135312e39342e302f32342d3332203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.151.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c7:23:60:a3:83:b3:1c:17:73:cd:b1:c5:68:69:bc:f7:93:
         45:df:49:fd:71:44:9b:b1:1e:ac:b6:b2:cc:6b:e0:e3:93:31:
         42:1e:a6:fb:5c:15:4e:cc:3d:7a:ef:e1:29:13:00:3a:25:bd:
         c4:65:11:e1:22:0c:7b:de:7d:99:ae:73:45:23:86:19:f9:c8:
         4e:70:0c:2d:9c:8a:dc:5f:75:54:48:cc:ed:37:66:27:c3:9d:
         66:0f:ed:25:ff:39:37:56:ab:87:65:c0:e2:82:05:1a:b7:e0:
         60:c5:01:10:c2:cf:11:ec:26:bc:af:3c:3c:d1:34:86:cf:8e:
         68:7b:00:5e:ae:f0:75:85:78:f1:8e:21:09:e3:7c:44:c9:f9:
         24:72:49:b1:1c:db:45:06:55:59:b4:d7:66:bf:c5:ab:a3:f7:
         61:bd:b5:ed:e0:c8:05:8c:fd:84:c7:1c:99:38:f8:a5:1f:c4:
         b3:55:ea:d4:74:ce:ab:3b:00:0b:74:6a:e7:7d:81:40:0e:67:
         9e:12:f7:77:2c:73:b2:8e:60:70:d5:f7:b3:20:9f:15:97:5e:
         28:46:35:8e:3c:ed:fa:a8:9e:fa:97:bd:d2:ed:59:a0:ab:e9:
         84:1b:04:e6:1e:29:66:2d:07:e7:7c:c6:5d:9e:2f:41:f6:a5:
         16:22:7b:5b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGMgjQKTEqI1fn4HGCLy1NNQGjPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQzMTZCQzUwRTE4NkJDNEQ2RUVEOEIxQTcxRTJGN0ZB
QTVGOTUzRDAeFw0yNDAzMDUxODAzMjhaFw0yNTAzMDQxODA4MjhaMDMxMTAvBgNV
BAMTKDNERThBQTUxQkIzQzYxMkUzMDI2RDg2RURFMEJCNzEzOUZBMjZCQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkDSYPGz5zRXgjoq7prLrKh8Vm
OUbAJzbXKHIjngT8DLmY9ruVbrX5KyDG154vkwFLxdyX9S/JkQx904axtoXaVrTH
LaZ48CAPzVT4oDxTwNqg2wSLab0joCaa64j2LHCxndOqu3M5vRccMw/rSMXLT51u
Nu6aKqPvr2MGVbSN00lzEOXtY7PBHVQ3aFm9FD9FO4fX+Z7llJhcT0OKh/neLW6E
7AbtesTloJVcSZQC0Vmr6I0F/iyM3/0IRVvSAI+0Fe+KINRxQziak8IEn3qfOrds
JsAOkhcvL68GEO+L4qHtFuwIHN5tQhaesl/gkF0fkQM4l4tLKyFFDUH14r3LAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPeiqUbs8YS4wJthu3gu3E5+ia6gwHwYDVR0j
BBgwFoAUrTFrxQ4Ya8TW7tixpx4vf6pflT0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNDBBQUREOUMzQTJDQjdBREI5MEFGRTIzNUE2MDkyQjIz
ODI0RDVFRjAwNTAzRjMwQjY1MTg3QjJCMjJGMzIxLzAvQUQzMTZCQzUwRTE4NkJD
NEQ2RUVEOEIxQTcxRTJGN0ZBQTVGOTUzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRDMxNkJDNTBFMTg2QkM0RDZF
RUQ4QjFBNzFFMkY3RkFBNUY5NTNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjQwQUFERDlDM0EyQ0I3QURCOTBBRkUyMzVBNjA5MkIyMzgyNEQ1RUYw
MDUwM0YzMEI2NTE4N0IyQjIyRjMyMS8wLzMxMzgzNjJlMzEzNTMxMmUzOTM0MmUz
MDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzNDM3MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALqXXjAN
BgkqhkiG9w0BAQsFAAOCAQEANscjYKODsxwXc82xxWhpvPeTRd9J/XFEm7EerLay
zGvg45MxQh6m+1wVTsw9eu/hKRMAOiW9xGUR4SIMe959ma5zRSOGGfnITnAMLZyK
3F91VEjM7TdmJ8OdZg/tJf85N1arh2XA4oIFGrfgYMUBEMLPEewmvK88PNE0hs+O
aHsAXq7wdYV48Y4hCeN8RMn5JHJJsRzbRQZVWbTXZr/Fq6P3Yb217eDIBYz9hMcc
mTj4pR/Es1Xq1HTOqzsAC3Rq532BQA5nnhL3dyxzso5gcNX3syCfFZdeKEY1jjzt
+qie+pe90u1ZoKvphBsE5h4pZi0H53zGXZ4vQfalFiJ7Ww==
-----END CERTIFICATE-----
Generated at Mon May 13 02:38:10 2024 by rpki-client on console-ams.rpki-client.org