Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3135302e302f32342d3234203d3e20313734.roa
File:                     3139312e3130322e3135302e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          omJbd9H2VEFEtiYoVqri+9Di1Kcg66KeiZTFwAM7czA=
Subject key identifier:   7C:77:99:6C:AD:75:13:3F:95:7E:A1:63:2C:6F:79:A5:1D:9A:AD:C0
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       077E00D22DBFDA750E9646966C962B6069F14993
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3135302e302f32342d3234203d3e20313734.roa
Signing time:             Mon 22 Jul 2024 16:45:01 +0000
ROA not before:           Mon 22 Jul 2024 16:40:01 +0000
ROA not after:            Mon 21 Jul 2025 16:45:01 +0000
asID:                     174
IP address blocks:        191.102.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7e:00:d2:2d:bf:da:75:0e:96:46:96:6c:96:2b:60:69:f1:49:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Jul 22 16:40:01 2024 GMT
            Not After : Jul 21 16:45:01 2025 GMT
        Subject: CN=7C77996CAD75133F957EA1632C6F79A51D9AADC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:eb:76:85:e9:33:60:47:9e:0e:12:c2:37:
                    c0:28:3f:6d:05:2b:04:f2:75:1c:45:17:d1:06:38:
                    47:3b:c1:d9:3a:8f:e3:e1:08:21:7f:24:40:9c:d3:
                    77:e9:9c:61:07:01:be:98:3a:62:86:d2:8f:fd:7a:
                    42:a2:5a:d2:b9:a7:52:fa:08:08:6f:53:e8:a1:5c:
                    5f:fe:cc:23:1e:0f:a1:41:52:c9:d5:51:b4:4e:02:
                    56:62:59:03:0a:8b:1d:8a:c0:b0:09:6c:01:1c:de:
                    d4:f2:64:e1:3a:b7:23:21:03:49:80:bf:49:43:8d:
                    d8:3c:b6:11:c3:b9:5f:7f:5f:da:54:3b:15:f1:d6:
                    31:39:ae:95:4f:93:17:67:a4:65:c8:cf:3b:5f:78:
                    c6:f2:04:06:91:50:99:4b:41:94:6c:fb:85:e8:9e:
                    5f:38:97:e0:4e:f3:bc:ae:3c:6e:c8:a5:8e:c7:35:
                    54:08:cc:83:e8:57:48:39:ff:8a:cc:0e:24:8b:3b:
                    67:d2:51:e9:c2:e2:31:d5:0b:58:8b:e9:d6:3a:54:
                    2e:3e:9f:d9:56:b8:16:7b:8c:66:dd:2f:17:68:30:
                    4e:a2:7f:8b:ee:20:d1:12:78:f8:77:5f:c2:60:24:
                    31:c0:66:22:67:2b:81:f1:2e:86:61:6a:f7:e2:bf:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:77:99:6C:AD:75:13:3F:95:7E:A1:63:2C:6F:79:A5:1D:9A:AD:C0
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3135302e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:21:ff:36:b2:d1:04:a2:98:3e:c7:90:7b:5d:41:04:cf:7c:
         e4:fd:5d:54:47:a5:a3:f8:9a:12:c7:43:d7:3c:c4:ff:60:a9:
         42:19:de:53:0f:ee:7a:7d:95:66:4e:9b:3a:76:b6:78:0a:da:
         89:ea:83:4f:d7:b8:47:67:d4:02:b5:f7:82:4e:61:d8:92:f3:
         ed:58:7d:9e:f9:e2:10:95:5f:2f:d1:ea:a0:58:98:6a:5f:fe:
         af:d9:73:c5:2c:76:22:ce:f7:89:79:5e:7e:ad:a8:57:f4:b6:
         6b:de:47:8e:b3:79:c6:5c:86:58:fd:81:1c:5f:a6:15:29:9c:
         e9:3c:03:b9:0d:03:37:bb:82:63:0f:0b:d9:1a:9d:d2:2a:e4:
         3e:c6:bd:27:21:ab:85:ae:ae:87:f6:70:52:ee:12:c3:2b:6a:
         66:0e:46:1f:e4:0c:ce:c0:d4:f0:07:e8:a0:d4:f3:ea:d9:16:
         12:b5:d7:47:e6:9f:9c:41:dd:cc:6e:94:76:c6:35:1f:61:d7:
         60:26:94:f9:7d:06:da:db:b8:0e:7a:73:d0:9f:6c:80:d3:59:
         87:2e:53:ab:7b:dd:9c:7a:db:7a:c0:60:18:ad:f9:a0:e2:b1:
         dc:ea:d0:28:3b:bf:5c:4f:13:73:e2:c7:ba:5a:51:89:7f:c3:
         6a:d9:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 17:17:07 2024 by rpki-client on console-fra.rpki-client.org