Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34392e302f32342d3234203d3e20323635383331.roa
File:                     3139322e3134312e34392e302f32342d3234203d3e20323635383331.roa (raw, json)
Hash identifier:          t4pcVQqnn8sWbHs329WVtMey9Y/8EVo8bXkr2uvxF/I=
Subject key identifier:   50:55:D9:FC:66:58:98:C0:46:64:70:6D:13:F6:11:6C:C9:B1:5D:E4
Certificate issuer:       /CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
Certificate serial:       065302F3264C6088BC327A6CAB98EAD86E0FD534
Authority key identifier: 9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34392e302f32342d3234203d3e20323635383331.roa
Signing time:             Tue 05 Mar 2024 17:44:54 +0000
ROA not before:           Tue 05 Mar 2024 17:39:54 +0000
ROA not after:            Tue 04 Mar 2025 17:44:54 +0000
asID:                     265831
IP address blocks:        192.141.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:53:02:f3:26:4c:60:88:bc:32:7a:6c:ab:98:ea:d8:6e:0f:d5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D11184F5F0BEE606F314C188036FDDCF0F294F8
        Validity
            Not Before: Mar  5 17:39:54 2024 GMT
            Not After : Mar  4 17:44:54 2025 GMT
        Subject: CN=5055D9FC665898C04664706D13F6116CC9B15DE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:cd:7a:a8:37:4c:2c:25:6b:c8:29:4b:ea:
                    45:13:27:a0:4e:41:20:c4:e6:cc:45:1b:3f:f5:1d:
                    ed:e9:2f:86:a6:f8:ea:2a:90:f0:12:d4:1d:ee:60:
                    17:9f:6d:c1:a7:ac:08:34:74:12:77:cd:b7:70:b0:
                    02:8d:af:e0:00:c9:79:81:48:10:db:9b:63:47:97:
                    fb:93:f9:49:b5:f0:a7:58:a6:95:b2:cf:fe:62:63:
                    91:a6:88:b1:6b:c6:cc:4d:73:d6:b9:e5:be:6d:c3:
                    0e:62:5d:95:df:fe:c9:39:6a:f1:03:48:4c:e3:d1:
                    3b:41:ca:e7:a6:be:46:6b:6f:79:a1:95:18:63:24:
                    79:9f:ee:f7:70:83:72:d6:63:69:6d:f8:47:92:c4:
                    ba:6f:72:0a:ce:51:f6:26:72:18:bc:26:52:80:c0:
                    2c:41:c9:5f:de:f6:be:36:3f:11:2c:c2:be:a4:95:
                    f7:ac:f9:03:f0:01:48:3d:fa:46:b9:8b:99:43:9a:
                    56:1e:26:ca:eb:7b:bb:f0:24:11:21:e9:99:4c:74:
                    4c:74:b7:07:c7:d4:ab:c9:ad:42:57:28:98:e3:44:
                    4d:d7:b7:13:1a:b9:36:34:bc:71:e1:ec:47:85:b6:
                    2d:ef:2f:36:6b:95:df:8f:0b:77:71:fc:74:1a:6c:
                    50:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:55:D9:FC:66:58:98:C0:46:64:70:6D:13:F6:11:6C:C9:B1:5D:E4
            X509v3 Authority Key Identifier:
                keyid:9D:11:18:4F:5F:0B:EE:60:6F:31:4C:18:80:36:FD:DC:F0:F2:94:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D11184F5F0BEE606F314C188036FDDCF0F294F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E7AB838EB28B3465BB403B5449282533504C6A714EFA545E25A3832F6AFFEFB/0/3139322e3134312e34392e302f32342d3234203d3e20323635383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:7c:a1:2a:2b:8b:55:ac:14:d1:46:56:84:7e:d9:b3:41:6a:
         84:de:4d:5b:b2:38:b2:19:9a:f1:4c:78:55:1a:25:3f:a4:03:
         f6:96:6d:5d:3b:0f:e4:1e:94:6f:73:e8:65:88:73:f1:22:d9:
         b4:00:e0:c5:34:8d:1e:57:09:73:76:f8:40:4b:7a:b5:5b:30:
         e5:06:76:a5:6a:73:db:fc:4a:a2:a2:84:e2:78:77:e2:7f:ea:
         ee:09:53:2d:31:58:4d:ea:98:6c:f5:83:e5:b2:40:95:b6:f9:
         1b:36:19:c9:a2:61:f8:f8:be:ca:f5:5a:5a:3b:08:15:a5:51:
         c3:c9:4b:3e:6b:9d:d0:61:c5:1a:a7:cc:0d:27:b1:bb:e0:b2:
         39:2a:18:5c:d7:1a:f3:2d:83:93:25:cc:46:ae:bb:cc:51:29:
         db:bb:93:f0:7c:8f:16:f2:ba:27:d1:9f:36:e9:f1:67:eb:5b:
         31:af:a6:2f:e1:e3:d0:4b:60:4a:39:c9:63:e4:70:ab:74:f7:
         da:bd:20:2a:c8:20:97:5c:0f:1e:d7:14:07:f8:02:dc:b8:fc:
         d6:c2:f6:59:be:eb:47:27:cd:71:68:d1:b5:97:75:67:26:45:
         d5:36:1b:42:f5:4a:f1:50:6c:ff:c0:68:30:2f:a7:12:b6:ac:
         5b:ee:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org