Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3131322e302f32312d3234203d3e203235363230.roa
File:                     3139322e3232332e3131322e302f32312d3234203d3e203235363230.roa (raw, json)
Hash identifier:          mVt6sVLlW0aPbuebOPmiSSwpB7JIhnmwv04ete5MeJI=
Subject key identifier:   0D:E9:9D:56:B2:18:15:96:76:78:B5:FC:4E:91:6A:05:2C:02:23:ED
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       56FE543E8F495BDB69B2EDA10C9EB40F5CD548D1
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3131322e302f32312d3234203d3e203235363230.roa
Signing time:             Wed 29 May 2024 18:20:00 +0000
ROA not before:           Wed 29 May 2024 18:15:00 +0000
ROA not after:            Wed 28 May 2025 18:20:00 +0000
asID:                     25620
IP address blocks:        192.223.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fe:54:3e:8f:49:5b:db:69:b2:ed:a1:0c:9e:b4:0f:5c:d5:48:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: May 29 18:15:00 2024 GMT
            Not After : May 28 18:20:00 2025 GMT
        Subject: CN=0DE99D56B21815967678B5FC4E916A052C0223ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:72:19:e7:a3:70:ac:3d:d6:d0:12:5a:71:
                    4c:13:5e:ad:2b:35:b0:87:fc:07:96:3e:92:53:0e:
                    bd:03:4d:f5:ae:d2:0c:12:48:20:8b:5a:27:2a:55:
                    fc:ef:15:91:e5:ca:7e:0a:43:20:61:d9:76:61:fe:
                    2e:97:19:dd:63:ad:a3:09:7d:33:70:08:e5:f0:8d:
                    d3:1a:fb:fb:95:78:42:81:92:af:82:ed:32:45:70:
                    7d:ea:05:3f:54:fe:ff:bc:b3:13:d5:2f:88:2d:d5:
                    82:c3:7a:93:38:43:a6:d8:0a:ef:a2:d9:f7:05:cd:
                    0c:96:07:a2:ad:25:29:f8:0e:45:1b:f6:3d:62:f8:
                    74:38:75:98:68:e1:a9:00:99:c6:1f:dd:fc:0c:9b:
                    31:c0:bd:e4:82:4d:7d:bf:8a:4a:b0:f9:85:9d:aa:
                    21:10:6c:27:c5:7d:1a:06:ba:ad:a3:5d:54:da:25:
                    2c:b1:cc:d7:8c:89:9a:c0:6b:c1:2d:48:46:10:51:
                    84:67:6d:57:d1:9b:32:0d:21:15:18:24:e0:c3:53:
                    42:bf:aa:5b:df:f5:d6:9a:c3:70:68:dc:bb:09:71:
                    f6:20:9e:bd:c6:e7:81:d5:78:7b:36:af:b5:92:cb:
                    8d:21:53:0c:09:24:dc:26:60:06:b1:4b:ae:1e:14:
                    be:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E9:9D:56:B2:18:15:96:76:78:B5:FC:4E:91:6A:05:2C:02:23:ED
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e3131322e302f32312d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:76:f1:80:d1:18:59:31:6d:68:ac:05:51:33:b9:c9:4d:34:
         f9:b0:58:ab:a6:01:47:58:34:90:19:50:95:18:0c:70:5c:a9:
         16:44:2c:c3:b5:90:18:b5:af:02:ec:64:25:86:12:45:d8:20:
         af:e3:6d:40:9e:85:7a:96:41:f9:de:96:67:89:e8:31:53:bf:
         40:30:1f:e4:8d:c0:5d:40:67:d6:55:67:d9:f6:b5:76:4a:c8:
         82:10:b8:c3:ed:e3:3c:51:0f:90:34:ec:b3:56:9e:eb:1c:14:
         c2:7f:a8:2f:2e:fb:e2:a2:81:e4:84:df:f5:54:06:d1:36:2b:
         f5:dc:7b:ca:ac:57:97:57:22:33:2d:37:42:f5:70:9b:55:48:
         67:c5:f7:3e:45:1a:b2:59:2d:6b:15:00:3c:ad:53:b7:64:a8:
         d5:d8:6d:ba:ef:bc:60:25:88:cb:b9:17:15:f2:0c:e4:13:99:
         53:8e:44:1e:2b:f4:f3:1c:f2:e7:dd:2e:69:12:19:55:80:33:
         a2:aa:51:21:e2:90:f0:a8:68:b4:c7:82:38:51:ca:61:33:06:
         79:ea:47:31:6c:3e:78:a5:9b:0b:bf:25:57:86:5e:29:6e:d0:
         74:31:45:52:55:e3:f4:b2:93:84:cc:6b:90:0b:84:6b:4a:e9:
         1f:ba:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 02:22:17 2024 by rpki-client on console-fra.rpki-client.org