Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35362e302f32322d3234203d3e203430363736.roa
File:                     3139322e3134302e35362e302f32322d3234203d3e203430363736.roa (raw, json)
Hash identifier:          P1Fka8RA2Cilxb3oF8JBfty0k5nrao3Uu8VCiG3Kv8M=
Subject key identifier:   D7:44:C4:38:0F:B9:15:E0:79:4E:3B:F0:83:30:99:73:8F:31:3B:2B
Certificate issuer:       /CN=8C797120238F0722DF341ADB8DF5F4192C0C7988
Certificate serial:       46E5826FD17F308B6FE17CC8279BD5009E2BFDDB
Authority key identifier: 8C:79:71:20:23:8F:07:22:DF:34:1A:DB:8D:F5:F4:19:2C:0C:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35362e302f32322d3234203d3e203430363736.roa
Signing time:             Tue 05 Mar 2024 18:20:05 +0000
ROA not before:           Tue 05 Mar 2024 18:15:05 +0000
ROA not after:            Tue 04 Mar 2025 18:20:05 +0000
asID:                     40676
IP address blocks:        192.140.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e5:82:6f:d1:7f:30:8b:6f:e1:7c:c8:27:9b:d5:00:9e:2b:fd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C797120238F0722DF341ADB8DF5F4192C0C7988
        Validity
            Not Before: Mar  5 18:15:05 2024 GMT
            Not After : Mar  4 18:20:05 2025 GMT
        Subject: CN=D744C4380FB915E0794E3BF0833099738F313B2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:04:44:0b:fc:0c:4e:18:ec:f4:a3:54:75:36:
                    ab:44:9a:bc:f1:3a:29:e4:73:c8:59:d8:c4:62:a3:
                    52:d7:fc:d6:36:8f:0a:c6:c6:22:62:dd:e3:84:ea:
                    53:29:78:71:7b:a4:1b:ac:85:38:4d:ef:ba:ad:39:
                    2d:4d:2d:f9:0a:60:64:f4:37:17:d3:5a:a5:14:e0:
                    cc:f3:bd:cf:94:62:e8:a3:12:80:1e:d4:1b:f4:a0:
                    fc:73:de:a2:1b:39:8f:6e:03:8b:d5:b9:dd:e2:6d:
                    cb:ba:cf:d4:34:c3:df:c8:57:80:f3:17:7c:f1:30:
                    b8:56:7d:92:88:2c:ab:be:1f:f7:f0:5f:70:46:7c:
                    0b:86:b9:ca:ff:57:56:4a:eb:7d:da:37:df:1c:81:
                    56:e9:79:1a:ef:cc:2e:23:77:72:69:75:55:75:99:
                    19:51:b4:03:98:85:01:8c:46:e3:ee:0d:2b:e7:07:
                    81:fe:ca:1d:a8:68:c6:a2:fa:a1:e3:f9:03:a3:a3:
                    5b:f1:9c:07:b8:8c:47:ad:ac:d5:43:9a:4b:87:e0:
                    e3:47:4f:83:03:48:41:50:c8:b7:09:4e:ef:c9:6f:
                    2c:f9:6c:d7:7b:19:75:f5:fe:8b:c6:15:58:ec:1c:
                    36:9a:01:62:5b:71:39:c5:6d:a2:05:3b:da:19:b7:
                    f4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:44:C4:38:0F:B9:15:E0:79:4E:3B:F0:83:30:99:73:8F:31:3B:2B
            X509v3 Authority Key Identifier:
                keyid:8C:79:71:20:23:8F:07:22:DF:34:1A:DB:8D:F5:F4:19:2C:0C:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35362e302f32322d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:22:ec:05:bf:f0:33:c9:2b:e6:28:41:01:81:6a:37:e6:83:
         60:e0:6d:07:d5:4f:a2:bf:6c:df:f0:a5:2a:cb:f5:90:34:8c:
         db:1a:e8:64:48:28:dc:94:6e:d2:44:a4:33:6f:52:b7:91:37:
         04:32:b5:d6:e3:1d:ac:55:cd:2c:e0:06:7e:08:f0:44:f2:84:
         33:0d:19:c6:1f:53:f9:8d:06:9d:4d:0f:b0:de:85:17:c7:69:
         2d:2d:03:94:ae:f8:97:67:e8:fe:45:2a:60:84:59:03:47:c8:
         95:79:78:f2:40:d3:5d:c6:5f:d4:e7:8a:68:eb:31:b0:a2:25:
         b4:f3:74:f0:3a:be:27:67:cc:61:e5:09:28:f7:87:16:0f:d7:
         3e:6d:fe:5c:a9:11:28:a0:75:58:07:db:9e:62:8c:bb:ca:df:
         ce:88:fa:62:12:31:34:b7:b0:82:51:19:86:d9:f5:3f:1a:26:
         7e:d7:29:ed:c1:b7:14:01:eb:9c:b1:ec:b8:a7:f3:f3:8b:19:
         34:df:da:bd:7d:a1:f7:a4:49:07:9e:a3:04:61:c5:9e:3f:9c:
         fa:2f:ff:64:65:c6:df:0e:84:cc:0a:f6:a6:c6:26:a8:a8:3e:
         71:5a:36:78:eb:bb:82:bb:ac:1f:af:65:6a:ed:f7:69:64:c2:
         c9:b8:18:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:23:58 2024 by rpki-client on console-fra.rpki-client.org