Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f32302d3234203d3e203235363230.roa
File:                     3139322e3232332e36342e302f32302d3234203d3e203235363230.roa (raw, json)
Hash identifier:          yjLqfbNyRA44sUL1Ey2qaF0Temowj7Ja/L9ePfF0nNo=
Subject key identifier:   CF:94:FD:84:73:9F:6C:74:BF:D5:63:8D:B2:FB:5C:7C:12:DC:93:89
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       095DCAE234EDEA7D233FFC24CEE90B2B92965452
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f32302d3234203d3e203235363230.roa
Signing time:             Wed 29 May 2024 18:20:01 +0000
ROA not before:           Wed 29 May 2024 18:15:01 +0000
ROA not after:            Wed 28 May 2025 18:20:01 +0000
asID:                     25620
IP address blocks:        192.223.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5d:ca:e2:34:ed:ea:7d:23:3f:fc:24:ce:e9:0b:2b:92:96:54:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: May 29 18:15:01 2024 GMT
            Not After : May 28 18:20:01 2025 GMT
        Subject: CN=CF94FD84739F6C74BFD5638DB2FB5C7C12DC9389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:eb:27:33:8a:3b:ec:00:b4:d1:7d:27:1e:
                    6c:c0:94:b2:ba:12:6a:ef:65:9e:64:ae:f2:fd:64:
                    52:11:80:aa:45:f1:63:38:46:24:3e:ac:85:53:ec:
                    a8:cc:ca:02:e7:3a:b3:3a:06:9f:66:4a:b7:90:ff:
                    c0:79:df:bd:56:50:ad:e1:6c:39:67:82:08:10:4b:
                    1b:74:da:01:24:62:14:5a:1c:80:36:aa:88:5f:44:
                    51:7a:3c:2c:71:9c:60:5f:5d:b1:33:af:aa:cb:a3:
                    a6:5b:df:ec:a8:dd:30:94:bf:71:76:65:e9:85:af:
                    4f:43:19:35:b9:7e:80:3c:83:bd:1c:8d:4a:d3:58:
                    98:f2:ae:83:31:10:71:4e:be:0a:31:da:52:6d:3a:
                    8d:1f:47:b8:50:13:83:eb:c1:42:f6:c3:e9:1b:d2:
                    dc:d2:26:5c:cb:7e:29:44:ac:52:48:7a:07:ea:a1:
                    70:77:01:bb:a2:51:a4:f2:aa:2b:f7:f7:c2:d7:43:
                    00:e9:89:47:29:f4:f2:29:b2:e6:0f:38:fd:86:c8:
                    3e:17:62:a2:97:e8:7c:77:b1:af:91:4e:cb:f0:f6:
                    51:5b:d3:1e:49:41:52:35:30:db:77:af:58:61:bb:
                    0b:ba:73:24:a2:b4:83:27:0e:e4:af:15:35:87:54:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:94:FD:84:73:9F:6C:74:BF:D5:63:8D:B2:FB:5C:7C:12:DC:93:89
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e36342e302f32302d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:fe:f3:12:8e:cc:ba:c6:32:91:12:2b:c2:4d:75:0f:e1:19:
         ef:25:7c:c3:09:14:de:a5:e7:49:c1:7b:3a:20:6d:24:ef:90:
         16:18:87:b8:44:e7:8c:8a:ad:70:c8:37:da:2b:e2:e9:08:61:
         84:69:09:fc:11:34:6b:bd:db:02:5b:cc:61:32:2d:3f:10:e7:
         f8:3e:e8:58:ab:e0:cb:8d:7e:cb:0b:d5:1e:e2:03:ee:1e:2d:
         3c:03:9e:66:cc:63:bf:33:01:c5:b9:58:ed:93:78:63:82:b3:
         7e:57:94:88:4d:f1:5e:55:60:e0:f9:c7:8c:31:2e:d6:89:0d:
         3e:c7:a8:18:ea:eb:42:73:f5:34:e0:3b:9c:f2:cc:5a:99:42:
         24:c6:82:45:ae:54:5b:90:d7:e4:67:71:18:a7:84:15:67:94:
         f5:00:46:86:b5:1f:2b:9b:2b:d4:00:78:f3:e3:4f:31:ed:b3:
         b4:89:cd:fc:16:ed:23:17:43:dc:83:f7:fa:5c:29:4e:24:c1:
         1b:aa:18:11:74:32:c5:1b:39:40:2e:69:e5:4e:4f:9a:d7:c0:
         f4:85:44:ce:3b:40:34:96:13:3e:f8:ee:61:be:21:68:54:08:
         53:6a:a7:60:ab:d3:bd:05:86:fe:38:dd:f6:1d:c7:3a:7e:a3:
         29:15:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 02:22:17 2024 by rpki-client on console-fra.rpki-client.org