Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e38302e302f32302d3234203d3e203235363230.roa
File:                     3139322e3232332e38302e302f32302d3234203d3e203235363230.roa (raw, json)
Hash identifier:          0H6+A34u2dRV0ANdhiynTk/nDvpt8RY2WqLTgRykGgs=
Subject key identifier:   BF:C5:51:A2:B1:EC:23:A0:F2:63:04:EB:89:D9:D0:31:94:37:54:ED
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       16B51A3B155267726929C445158C9E892AFCEB91
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e38302e302f32302d3234203d3e203235363230.roa
Signing time:             Wed 29 May 2024 18:20:00 +0000
ROA not before:           Wed 29 May 2024 18:15:00 +0000
ROA not after:            Wed 28 May 2025 18:20:00 +0000
asID:                     25620
IP address blocks:        192.223.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:1a:3b:15:52:67:72:69:29:c4:45:15:8c:9e:89:2a:fc:eb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: May 29 18:15:00 2024 GMT
            Not After : May 28 18:20:00 2025 GMT
        Subject: CN=BFC551A2B1EC23A0F26304EB89D9D031943754ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:4a:47:92:a9:53:e4:76:25:b4:78:4e:f7:
                    a0:ad:cb:27:6c:9c:2b:ef:01:ac:04:8b:ba:be:c2:
                    a0:19:99:65:dd:28:5e:f9:db:de:0c:4c:68:b7:07:
                    66:93:ef:4b:52:e4:42:2e:56:0f:71:49:41:1a:d5:
                    f8:7c:ba:a4:83:82:16:9b:ac:57:01:06:3a:01:68:
                    14:56:e1:b7:e0:4e:2d:b5:a7:4d:79:12:a6:cd:c2:
                    45:1c:17:4d:20:97:c7:17:9a:61:c3:4f:ee:ae:36:
                    db:9f:51:91:06:f7:3d:72:3d:ef:aa:2b:20:d0:3a:
                    79:0b:2f:52:e7:91:a1:fc:56:0b:7a:96:45:0a:cc:
                    f8:a1:c2:2f:42:91:55:bf:d7:84:82:83:a7:c6:f3:
                    28:d3:46:88:f0:d5:24:86:6e:fb:7d:4a:67:a3:ad:
                    03:09:77:11:f5:1c:7d:ec:6c:1c:e9:68:6a:ef:e4:
                    a1:9c:d7:9f:31:62:59:ee:56:31:35:24:de:f9:42:
                    b0:1b:96:a9:d1:6f:6e:cf:2a:7f:da:4a:5c:ab:47:
                    08:c2:2d:a7:8f:31:3a:fd:7b:4a:6b:9b:ea:dd:78:
                    dc:07:46:0a:5a:1e:52:72:b9:17:1e:85:a1:24:a2:
                    da:99:ce:79:29:e8:b1:6c:55:26:e0:ac:dd:20:6e:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:51:A2:B1:EC:23:A0:F2:63:04:EB:89:D9:D0:31:94:37:54:ED
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e38302e302f32302d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:04:d4:96:c0:a0:f9:3d:dc:6b:d9:97:6a:b7:3b:0a:ca:af:
         bb:2a:21:b2:b4:aa:f5:be:7e:6e:a2:be:4e:6b:7d:a5:26:53:
         e9:07:e6:30:90:2d:72:6a:36:89:ff:6d:f3:20:dc:18:16:57:
         06:7a:3d:58:27:06:fe:98:ac:b1:73:f1:43:0c:ab:b3:3b:1a:
         60:61:fa:4e:bf:0d:5f:6f:4d:34:4f:52:35:8d:36:5c:ef:b0:
         9a:c7:0d:3c:4f:ca:85:29:72:46:39:7d:38:72:f4:1a:2b:52:
         8a:86:9d:62:19:77:9b:df:17:10:4f:b9:16:39:3c:6f:3d:27:
         01:b0:65:06:48:d9:30:77:b8:4a:f8:72:ff:d8:e6:35:a4:aa:
         26:65:99:e9:b5:86:ac:02:af:ae:74:69:31:8c:62:02:ca:5b:
         30:86:e1:37:5d:3e:f9:b0:82:40:5d:1f:c4:6d:f7:18:18:8e:
         94:bc:12:bd:75:0b:7f:3c:00:f5:53:45:25:2d:47:5b:20:4b:
         23:be:5f:82:95:df:71:c5:f3:d1:41:8b:82:ce:2f:40:de:23:
         a2:e4:fc:48:8e:92:91:79:99:9c:d8:99:4b:ee:18:f4:9c:c1:
         20:3c:bc:a7:33:e5:ab:b3:70:bf:0d:fb:c3:bb:5e:d7:d1:46:
         d9:25:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 03:16:30 2024 by rpki-client on console-ams.rpki-client.org