Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/3138362e3231392e34382e302f32322d3234203d3e20323730303731.roa
File:                     3138362e3231392e34382e302f32322d3234203d3e20323730303731.roa (raw, json)
Hash identifier:          KgCI7AVCo03n96voy+t2d2QsnDXR2zMKgnQOhMiMSRY=
Subject key identifier:   66:23:49:1C:50:E8:EE:E4:63:8F:C5:E1:B8:73:F5:83:0D:3E:E1:30
Certificate issuer:       /CN=B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD
Certificate serial:       6E7A4D452F006362241DB60F2E69EC9248C6EA0F
Authority key identifier: B6:4A:BC:9E:C2:FC:C9:8F:57:7C:88:A6:0C:99:C3:5E:D7:96:3F:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/3138362e3231392e34382e302f32322d3234203d3e20323730303731.roa
Signing time:             Tue 05 Mar 2024 18:03:39 +0000
ROA not before:           Tue 05 Mar 2024 17:58:39 +0000
ROA not after:            Tue 04 Mar 2025 18:03:39 +0000
asID:                     270071
IP address blocks:        186.219.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7a:4d:45:2f:00:63:62:24:1d:b6:0f:2e:69:ec:92:48:c6:ea:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD
        Validity
            Not Before: Mar  5 17:58:39 2024 GMT
            Not After : Mar  4 18:03:39 2025 GMT
        Subject: CN=6623491C50E8EEE4638FC5E1B873F5830D3EE130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:ea:3e:1a:06:1b:85:54:5b:1e:7c:9a:e1:
                    9c:82:ff:e4:d4:c4:66:9a:b8:67:59:c3:2c:6e:b8:
                    7b:e5:10:d6:42:c2:a9:28:6a:93:4a:50:dc:cc:c4:
                    09:83:6e:95:03:c0:06:87:a5:1e:65:45:c8:e3:7c:
                    03:ec:07:23:56:0c:b7:e4:c4:ca:6f:0a:8d:e5:35:
                    8c:82:f2:82:62:77:02:12:cd:9c:5d:2d:31:15:5c:
                    b1:ba:c7:d1:48:4f:59:f5:48:e4:70:14:cc:19:f1:
                    42:c5:77:38:27:78:b7:2f:59:12:bc:dd:00:23:ce:
                    ea:8f:d4:31:12:30:8f:af:8d:74:db:bb:a8:2a:57:
                    7e:77:79:94:0f:20:e3:5b:f0:01:69:ea:23:52:39:
                    a8:0e:cf:44:ed:67:5a:58:03:89:cc:91:50:0a:12:
                    c1:2b:b8:b1:4d:0f:70:4e:99:52:86:6e:b2:c6:71:
                    83:db:5f:f4:a4:40:0c:71:68:cf:90:ba:eb:57:f5:
                    d7:e6:8f:c8:9d:6a:4a:16:ac:2f:41:31:25:f0:2b:
                    5c:d8:ef:a3:6c:95:4b:61:17:f9:d0:d6:ea:3c:49:
                    10:56:0a:69:a0:78:5a:65:5b:8f:c3:b8:77:c7:0d:
                    f6:61:98:f9:7c:93:b7:fd:9f:49:80:58:7b:3e:b7:
                    e6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:23:49:1C:50:E8:EE:E4:63:8F:C5:E1:B8:73:F5:83:0D:3E:E1:30
            X509v3 Authority Key Identifier:
                keyid:B6:4A:BC:9E:C2:FC:C9:8F:57:7C:88:A6:0C:99:C3:5E:D7:96:3F:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/3138362e3231392e34382e302f32322d3234203d3e20323730303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:a5:2e:18:01:c6:83:71:f7:15:89:49:9e:be:be:50:2a:6b:
         06:b8:48:45:31:5e:83:d3:57:bc:15:b3:50:70:02:e7:2a:a6:
         50:5f:f6:37:00:01:19:d4:fe:f6:c1:1f:73:bc:47:65:e5:7a:
         ec:05:78:36:5d:7c:0d:46:b2:b7:43:d3:c7:25:9b:d7:c2:ba:
         7b:8a:db:fb:1d:41:e8:fa:c5:39:11:70:a7:e6:0b:f0:50:d9:
         07:f2:67:c4:c8:0a:65:44:d8:dd:3e:a0:18:f4:a2:f1:bb:c9:
         20:1f:0a:89:d1:19:fd:3a:8e:ed:29:a1:48:9f:15:bd:93:07:
         51:88:0d:fa:1e:00:3d:01:48:32:18:3e:e9:65:00:e9:ca:42:
         4a:5c:07:e2:d6:26:c1:b8:c0:ba:8a:69:7d:e3:04:00:d9:83:
         14:e6:f1:c3:28:ef:5f:8d:1d:0a:0f:e4:73:ea:33:3f:00:e2:
         aa:7c:46:35:6c:f6:cf:12:a1:be:b8:8e:eb:ca:27:3d:2d:9d:
         d4:02:8f:46:c8:32:db:b8:65:36:e7:af:19:91:2c:59:a1:e0:
         7e:b6:73:54:d7:46:23:c0:b7:3a:4c:67:65:59:5e:34:44:b1:
         23:72:b3:be:d5:fa:73:48:5e:cb:f9:e6:76:61:b1:b2:23:17:
         8c:81:4d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:59 2024 by rpki-client on console-fra.rpki-client.org