Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa
File:                     3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa (raw, json)
Hash identifier:          8fvvqNp7+cbeKwqAqt8Ix0DndOn8jTw3tWcikLTL0EQ=
Subject key identifier:   B5:EC:0A:27:4D:6B:C5:E9:FF:A2:3C:FF:31:57:83:84:67:D9:52:04
Certificate issuer:       /CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
Certificate serial:       58DD3DD1544EE31E7B0CCBB2F79A25580849AA14
Authority key identifier: 5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa
Signing time:             Thu 24 Apr 2025 21:15:58 +0000
ROA not before:           Thu 24 Apr 2025 21:10:58 +0000
ROA not after:            Thu 23 Apr 2026 21:15:58 +0000
asID:                     270023
IP address blocks:        186.148.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:dd:3d:d1:54:4e:e3:1e:7b:0c:cb:b2:f7:9a:25:58:08:49:aa:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F5B1971F99DD1FD781D649403114BF5C0CDE9D3
        Validity
            Not Before: Apr 24 21:10:58 2025 GMT
            Not After : Apr 23 21:15:58 2026 GMT
        Subject: CN=B5EC0A274D6BC5E9FFA23CFF3157838467D95204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:e8:cc:4a:c2:14:fa:7d:35:4b:54:30:03:
                    cf:d0:ac:f3:f8:78:8f:ac:b4:10:ec:1c:ee:bb:df:
                    1e:d9:ef:39:55:8c:80:94:b2:ba:86:0d:19:f1:3b:
                    e4:da:df:d2:53:89:c3:ec:fe:42:2a:bd:b2:de:0a:
                    13:00:ae:c7:c5:2b:94:b0:16:c8:41:8a:21:6c:0c:
                    89:55:67:13:7a:0a:91:5b:b4:6a:dd:25:6e:49:65:
                    8e:a0:5e:f4:09:39:9b:f0:bf:1e:53:6f:96:25:9c:
                    82:99:dd:68:3b:57:2d:66:b3:fd:e0:bc:dd:76:ad:
                    a0:ba:9d:0e:9c:12:20:af:a3:4b:f1:a3:e8:be:26:
                    25:91:32:6e:67:3f:48:bc:54:c8:71:8d:4d:33:e7:
                    0c:a0:3a:10:b4:33:3d:79:5a:ea:7d:08:3a:49:3d:
                    e0:47:9d:c3:bc:3d:82:47:82:72:ef:79:12:19:b0:
                    ca:c0:2c:1b:60:77:d1:79:eb:13:30:16:ce:c8:37:
                    37:80:81:19:31:16:6d:80:6d:12:d2:22:72:3f:0a:
                    3d:88:50:a6:87:0c:a2:68:22:cf:50:f8:a0:c0:33:
                    27:9d:74:9d:8e:84:89:f2:a3:84:a0:31:29:40:85:
                    3b:00:22:23:7e:a2:7f:0b:17:f9:99:3e:8f:ea:2e:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EC:0A:27:4D:6B:C5:E9:FF:A2:3C:FF:31:57:83:84:67:D9:52:04
            X509v3 Authority Key Identifier:
                keyid:5F:5B:19:71:F9:9D:D1:FD:78:1D:64:94:03:11:4B:F5:C0:CD:E9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F5B1971F99DD1FD781D649403114BF5C0CDE9D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B10D7998608B8722D3EEF5EC2506DBF6D37F6B518401ACD29D699E267664D724/0/3138362e3134382e3139362e302f32322d3234203d3e20323730303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:a9:ef:3d:7b:3b:b9:51:da:3a:95:bd:fb:cd:f6:54:28:6d:
         6a:4a:85:5d:d6:d8:56:e5:4e:2e:c3:b0:53:9c:10:74:dc:5a:
         37:ec:49:a3:66:07:e3:59:a6:fa:5b:7d:33:28:28:06:ec:2d:
         10:26:89:cd:b2:5d:ff:bd:7d:df:d4:43:1b:25:55:a0:19:a6:
         38:c5:bf:0e:6b:10:5a:1a:c4:90:d6:8c:37:67:9a:e2:65:ae:
         6f:e4:db:ff:f7:f9:3a:54:3b:2d:ac:55:55:68:98:4e:90:fa:
         65:c6:14:62:62:cd:56:89:13:56:89:e7:ca:16:88:2a:e6:c6:
         7a:4b:d0:fa:ba:5b:9d:9c:0e:86:a1:94:f5:6e:81:58:c9:cb:
         7a:cc:65:ea:67:32:3b:ae:be:a9:6b:6d:be:5d:c1:e9:21:2c:
         8a:02:af:de:9d:cb:b7:66:a9:54:3a:4d:f3:50:44:4c:23:fa:
         47:d3:45:28:a3:c6:18:6d:43:9a:27:b2:5d:ca:e8:c6:09:b0:
         07:8a:0d:06:68:ba:c9:20:a5:20:13:78:45:4d:10:9f:bd:f1:
         4d:d1:8b:42:e6:b4:81:36:33:46:61:1e:f4:b8:50:bb:6b:c6:
         12:05:4f:43:7c:32:23:1f:b2:08:a4:1c:25:a0:be:87:d1:b4:
         07:66:dd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:50 2025 by rpki-client on console.sobornost.net