Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e302e302f31362d3234203d3e203237393437.roa
File:                     3138362e332e302e302f31362d3234203d3e203237393437.roa (raw, json)
Hash identifier:          n43qrg5N4N26MUSRoMXV82h4h5iDeXqHlEH8CwH0gKI=
Subject key identifier:   8B:54:0F:3D:A5:1E:B6:B5:B4:FC:3F:FC:E6:17:B0:A7:88:D1:FA:F6
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       78A24C3246C232AB7BDD4133EE1E8E71DC1ECAE1
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e302e302f31362d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:10:23 +0000
ROA not before:           Tue 05 Mar 2024 18:05:23 +0000
ROA not after:            Tue 04 Mar 2025 18:10:23 +0000
asID:                     27947
IP address blocks:        186.3.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a2:4c:32:46:c2:32:ab:7b:dd:41:33:ee:1e:8e:71:dc:1e:ca:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:23 2024 GMT
            Not After : Mar  4 18:10:23 2025 GMT
        Subject: CN=8B540F3DA51EB6B5B4FC3FFCE617B0A788D1FAF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:15:89:fe:7d:1a:3d:69:50:3d:95:8e:c5:
                    81:7a:21:e1:21:f8:be:bd:6e:a1:7f:72:13:7f:80:
                    02:76:8d:29:b4:28:0f:ab:b1:25:d1:62:25:3d:96:
                    a0:42:d8:0a:f1:59:d5:59:a0:30:f7:5a:52:63:2b:
                    37:5a:24:4e:ee:9e:f8:03:7a:86:eb:aa:d5:0e:4f:
                    2a:1d:99:29:d5:fa:ff:c9:d4:ad:38:0e:a9:f3:96:
                    90:32:e0:93:b1:3c:2e:f6:23:19:14:a6:0e:04:f6:
                    8f:b6:dc:03:2b:d6:47:36:4c:ca:c5:79:3e:77:ad:
                    57:49:3d:c4:58:12:60:f1:96:b1:c5:05:c6:08:1e:
                    a9:73:cc:33:50:9f:51:d8:54:75:0f:45:75:df:da:
                    17:ee:64:2a:28:ce:aa:db:af:8b:c5:20:bf:e7:1a:
                    c3:5e:cf:d1:e3:4f:72:55:ae:ff:a5:45:5d:17:68:
                    7c:7f:a3:a4:fd:29:c9:4c:c0:53:c5:75:88:32:bf:
                    74:71:7c:40:a6:8a:02:29:43:6f:dc:e9:4d:4d:47:
                    56:04:07:29:7e:ca:6f:5f:0f:5e:fb:a2:04:9b:64:
                    c0:e6:3a:80:bb:d4:16:b7:21:30:e7:46:32:87:18:
                    61:d6:d1:97:83:4e:7f:4e:26:9f:54:e4:e6:68:3f:
                    85:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:54:0F:3D:A5:1E:B6:B5:B4:FC:3F:FC:E6:17:B0:A7:88:D1:FA:F6
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138362e332e302e302f31362d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:3d:b7:49:34:ba:55:84:76:2c:d4:ac:52:d0:e5:73:55:
         05:7e:fe:fd:c7:a2:37:18:7d:4e:63:f2:48:df:01:65:2a:5a:
         d3:08:de:e9:fd:75:e7:98:15:c4:29:3a:26:ab:7f:63:12:69:
         93:36:af:e2:44:6c:cd:9b:29:23:1e:20:66:c9:96:f6:fb:1e:
         55:a2:1e:af:1a:96:97:a9:11:08:e2:c9:a5:84:3c:48:1b:89:
         88:18:d0:b3:df:b9:15:82:7b:be:fb:82:94:78:b8:2c:26:65:
         8f:3e:02:0e:c5:48:16:56:2b:77:56:86:ae:fb:2e:75:fa:b9:
         e6:f5:f4:85:76:ec:84:db:2f:e7:55:cd:dc:d8:01:fb:df:b0:
         30:24:ad:e2:1d:c2:fd:ab:9e:dc:5c:9e:ea:c3:ab:37:cb:97:
         4f:80:ec:d5:b8:d0:d8:99:27:d3:a9:cc:1d:aa:50:72:fa:72:
         ea:69:bb:52:7d:66:bb:b3:cb:54:4d:82:bd:70:ff:b0:ac:d9:
         11:5b:b1:fd:57:d2:26:92:e0:8b:07:16:d3:43:a7:02:10:1f:
         4f:d1:78:e3:3c:3e:8b:e7:4c:3b:33:cd:a3:f2:73:81:2d:b6:
         7e:74:b1:ab:9a:bc:d4:24:56:23:c1:5f:e4:c7:7d:68:e8:d8:
         dd:63:16:9b
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUeKJMMkbCMqt73UEz7h6OcdweyuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNDAzMDUxODA1MjNaFw0yNTAzMDQxODEwMjNaMDMxMTAvBgNV
BAMTKDhCNTQwRjNEQTUxRUI2QjVCNEZDM0ZGQ0U2MTdCMEE3ODhEMUZBRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDxWJ/n0aPWlQPZWOxYF6IeEh
+L69bqF/chN/gAJ2jSm0KA+rsSXRYiU9lqBC2ArxWdVZoDD3WlJjKzdaJE7unvgD
eobrqtUOTyodmSnV+v/J1K04DqnzlpAy4JOxPC72IxkUpg4E9o+23AMr1kc2TMrF
eT53rVdJPcRYEmDxlrHFBcYIHqlzzDNQn1HYVHUPRXXf2hfuZCoozqrbr4vFIL/n
GsNez9HjT3JVrv+lRV0XaHx/o6T9KclMwFPFdYgyv3RxfECmigIpQ2/c6U1NR1YE
Byl+ym9fD177ogSbZMDmOoC71Ba3ITDnRjKHGGHW0ZeDTn9OJp9U5OZoP4UdAgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQUi1QPPaUetrW0/D/85hewp4jR+vYwHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzgzNjJlMzMyZTMwMmUzMDJmMzEz
NjJkMzIzNDIwM2QzZTIwMzIzNzM5MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALoDMA0GCSqGSIb3
DQEBCwUAA4IBAQBhzD23STS6VYR2LNSsUtDlc1UFfv79x6I3GH1OY/JI3wFlKlrT
CN7p/XXnmBXEKTomq39jEmmTNq/iRGzNmykjHiBmyZb2+x5Voh6vGpaXqREI4sml
hDxIG4mIGNCz37kVgnu++4KUeLgsJmWPPgIOxUgWVit3Voau+y51+rnm9fSFduyE
2y/nVc3c2AH737AwJK3iHcL9q57cXJ7qw6s3y5dPgOzVuNDYmSfTqcwdqlBy+nLq
abtSfWa7s8tUTYK9cP+wrNkRW7H9V9ImkuCLBxbTQ6cCEB9P0XjjPD6L50w7M82j
8nOBLbZ+dLGrmrzUJFYjwV/kx31o6NjdYxab
-----END CERTIFICATE-----
Generated at Sun May 5 17:20:21 2024 by rpki-client on console-fra.rpki-client.org