Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3138362e352e3137362e302f32302d3234203d3e203237393731.roa
File:                     3138362e352e3137362e302f32302d3234203d3e203237393731.roa (raw, json)
Hash identifier:          U8JWZy5fqZb7ay8bbcrVIWnm7chQsghNfE5dgVcTJXQ=
Subject key identifier:   50:9A:6F:43:28:3C:B6:45:32:1B:BF:1A:D2:81:1B:15:71:98:59:BE
Certificate issuer:       /CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
Certificate serial:       277121197ADEFAB8D0BB403D70AFFA77A78A6D5F
Authority key identifier: 18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3138362e352e3137362e302f32302d3234203d3e203237393731.roa
Signing time:             Tue 05 Mar 2024 17:40:14 +0000
ROA not before:           Tue 05 Mar 2024 17:35:14 +0000
ROA not after:            Tue 04 Mar 2025 17:40:14 +0000
asID:                     27971
IP address blocks:        186.5.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:71:21:19:7a:de:fa:b8:d0:bb:40:3d:70:af:fa:77:a7:8a:6d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186D48B8C1F30720B512B1F62C673FCFD9EDFAEE
        Validity
            Not Before: Mar  5 17:35:14 2024 GMT
            Not After : Mar  4 17:40:14 2025 GMT
        Subject: CN=509A6F43283CB645321BBF1AD2811B15719859BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:24:64:58:4b:cc:c2:03:c3:7f:24:f0:ff:
                    10:79:ab:f8:cb:f1:08:eb:fa:8d:c2:03:e8:c8:1b:
                    a5:34:22:22:be:a0:aa:0f:ec:ef:86:b7:dd:26:d0:
                    4b:29:3c:9b:94:e2:71:0f:60:5a:a2:2a:3e:6e:da:
                    27:f9:4e:7c:bc:2e:c7:26:32:5d:01:6f:3a:75:1a:
                    5d:de:78:6b:0d:e0:55:3d:2c:e5:6e:ec:d2:84:8a:
                    fe:16:27:da:5c:41:9f:4f:fc:44:c4:a0:50:53:8f:
                    c3:d1:51:d1:fc:ec:74:fd:bf:29:b6:14:61:f5:7f:
                    64:03:d2:62:18:0c:a2:1e:39:59:d6:7d:46:0f:9f:
                    f7:40:bb:91:2a:b3:08:f8:23:ff:87:2c:f0:39:1f:
                    07:13:7b:08:66:33:36:92:2f:f0:0a:4b:0f:97:28:
                    61:ae:c9:6e:28:9a:ad:fb:be:e5:0d:ea:2d:af:9e:
                    1e:6c:c2:a4:68:21:15:a7:55:d1:de:ff:5c:93:75:
                    04:04:f1:69:8e:7a:70:e2:32:3f:1d:28:2c:76:75:
                    96:c0:15:62:3c:6d:10:7b:68:23:25:33:25:5b:fe:
                    55:3e:37:bf:6c:b5:47:b9:ea:db:11:a1:1a:c6:49:
                    df:f1:03:9e:5a:51:12:0f:f0:6d:4d:f1:d1:42:41:
                    8f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9A:6F:43:28:3C:B6:45:32:1B:BF:1A:D2:81:1B:15:71:98:59:BE
            X509v3 Authority Key Identifier:
                keyid:18:6D:48:B8:C1:F3:07:20:B5:12:B1:F6:2C:67:3F:CF:D9:ED:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/186D48B8C1F30720B512B1F62C673FCFD9EDFAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FA1B459B0D6913521B2CD0B82F081D48976186FE369C8287C6BFFEE3837B4122/0/3138362e352e3137362e302f32302d3234203d3e203237393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:c4:ca:cd:24:93:97:4d:7f:e8:31:db:a5:d7:2e:69:89:73:
         a7:6c:87:51:4b:85:56:62:bb:f9:a0:8b:e6:b2:ea:c1:68:4a:
         8c:e8:02:d6:38:62:02:02:a0:b5:3e:5e:15:e5:74:f0:32:2f:
         83:30:e2:e6:0e:e6:28:ac:c1:ef:6a:a1:22:21:a0:71:62:28:
         42:b2:f7:ca:bf:8f:96:fc:ed:da:29:88:3c:ee:11:b7:30:81:
         41:eb:0c:59:5c:9d:96:af:ce:e0:c1:3e:f2:7d:2c:3f:52:eb:
         94:27:04:73:3c:5f:e4:19:b3:1e:c3:a5:1b:88:15:67:77:a6:
         a6:37:39:43:ec:b9:c6:96:7d:44:8e:f7:83:45:33:77:a2:b9:
         f9:87:c0:7c:2d:ab:28:9a:4a:96:90:8d:62:8d:79:41:e0:29:
         ad:50:f6:57:ec:59:7b:96:fd:24:a8:06:ee:cd:2b:ac:00:9d:
         80:cc:a3:97:4e:73:89:cd:50:15:e1:8e:0c:11:55:e6:1b:db:
         75:2c:e9:bf:74:39:66:0a:3a:53:c5:e9:1d:1a:d5:89:e7:93:
         36:8e:f9:98:32:cd:2b:e6:19:ad:76:f9:79:e9:c2:92:48:2d:
         4c:e7:4f:dd:e9:cb:c3:31:38:ee:cf:3c:1a:8e:20:8b:ae:6e:
         a8:5c:ed:d6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJ3EhGXre+rjQu0A9cK/6d6eKbV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg2RDQ4QjhDMUYzMDcyMEI1MTJCMUY2MkM2NzNGQ0ZE
OUVERkFFRTAeFw0yNDAzMDUxNzM1MTRaFw0yNTAzMDQxNzQwMTRaMDMxMTAvBgNV
BAMTKDUwOUE2RjQzMjgzQ0I2NDUzMjFCQkYxQUQyODExQjE1NzE5ODU5QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDagyRkWEvMwgPDfyTw/xB5q/jL
8Qjr+o3CA+jIG6U0IiK+oKoP7O+Gt90m0EspPJuU4nEPYFqiKj5u2if5Tny8Lscm
Ml0Bbzp1Gl3eeGsN4FU9LOVu7NKEiv4WJ9pcQZ9P/ETEoFBTj8PRUdH87HT9vym2
FGH1f2QD0mIYDKIeOVnWfUYPn/dAu5Eqswj4I/+HLPA5HwcTewhmMzaSL/AKSw+X
KGGuyW4omq37vuUN6i2vnh5swqRoIRWnVdHe/1yTdQQE8WmOenDiMj8dKCx2dZbA
FWI8bRB7aCMlMyVb/lU+N79stUe56tsRoRrGSd/xA55aURIP8G1N8dFCQY/ZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUUJpvQyg8tkUyG78a0oEbFXGYWb4wHwYDVR0j
BBgwFoAUGG1IuMHzByC1ErH2LGc/z9nt+u4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQTFCNDU5QjBENjkxMzUyMUIyQ0QwQjgyRjA4MUQ0ODk3
NjE4NkZFMzY5QzgyODdDNkJGRkVFMzgzN0I0MTIyLzAvMTg2RDQ4QjhDMUYzMDcy
MEI1MTJCMUY2MkM2NzNGQ0ZEOUVERkFFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xODZENDhCOEMxRjMwNzIwQjUx
MkIxRjYyQzY3M0ZDRkQ5RURGQUVFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkExQjQ1OUIwRDY5MTM1MjFCMkNEMEI4MkYwODFENDg5NzYxODZGRTM2
OUM4Mjg3QzZCRkZFRTM4MzdCNDEyMi8wLzMxMzgzNjJlMzUyZTMxMzczNjJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzczOTM3MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS6BbAwDQYJ
KoZIhvcNAQELBQADggEBAIbEys0kk5dNf+gx26XXLmmJc6dsh1FLhVZiu/mgi+ay
6sFoSozoAtY4YgICoLU+XhXldPAyL4Mw4uYO5iiswe9qoSIhoHFiKEKy98q/j5b8
7dopiDzuEbcwgUHrDFlcnZavzuDBPvJ9LD9S65QnBHM8X+QZsx7DpRuIFWd3pqY3
OUPsucaWfUSO94NFM3eiufmHwHwtqyiaSpaQjWKNeUHgKa1Q9lfsWXuW/SSoBu7N
K6wAnYDMo5dOc4nNUBXhjgwRVeYb23Us6b90OWYKOlPF6R0a1YnnkzaO+ZgyzSvm
Ga12+XnpwpJILUznT93py8MxOO7PPBqOIIuubqhc7dY=
-----END CERTIFICATE-----
Generated at Sun May 5 05:21:04 2024 by rpki-client on console-fra.rpki-client.org