Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32302e302f32342d3234203d3e20323732313530.roa
File:                     3139322e3134312e32302e302f32342d3234203d3e20323732313530.roa (raw, json)
Hash identifier:          BlwpXc/96+D1L3jm4y4QN9wxE4l3Tox2824MFJ1UoyM=
Subject key identifier:   75:60:CC:EC:2B:B8:6F:A2:0F:84:27:06:C4:8A:32:43:DF:31:5F:F1
Certificate issuer:       /CN=7944892887A229F94947FB31A3A32FD54294016E
Certificate serial:       3916C907320CE63ABF9CDE64736B09B1D906F8D1
Authority key identifier: 79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32302e302f32342d3234203d3e20323732313530.roa
Signing time:             Tue 05 Mar 2024 18:07:59 +0000
ROA not before:           Tue 05 Mar 2024 18:02:59 +0000
ROA not after:            Tue 04 Mar 2025 18:07:59 +0000
asID:                     272150
IP address blocks:        192.141.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 16:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:16:c9:07:32:0c:e6:3a:bf:9c:de:64:73:6b:09:b1:d9:06:f8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7944892887A229F94947FB31A3A32FD54294016E
        Validity
            Not Before: Mar  5 18:02:59 2024 GMT
            Not After : Mar  4 18:07:59 2025 GMT
        Subject: CN=7560CCEC2BB86FA20F842706C48A3243DF315FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:42:9c:77:8c:eb:ce:27:91:ce:00:81:77:
                    5e:4d:6d:85:fa:ef:98:e0:bb:8b:8a:9a:60:29:2c:
                    d6:5c:27:9f:be:19:49:94:61:79:82:9c:d7:7f:c9:
                    ef:4e:8f:94:f0:5b:e4:9c:aa:cf:ce:e9:47:60:3b:
                    d2:99:87:47:35:9c:e6:07:13:a5:30:03:88:fe:af:
                    34:13:c5:ab:f4:56:21:51:dd:23:bf:20:91:61:7c:
                    71:79:3e:60:d1:c9:01:eb:4f:5e:90:b4:81:54:8e:
                    b7:3e:bc:bf:a2:02:a7:91:b6:8e:be:5c:57:29:db:
                    5e:0b:e0:dc:cf:4d:1f:b8:3a:17:6a:c7:45:43:98:
                    84:3d:ed:42:6b:da:5d:35:9a:92:e5:00:f6:ee:06:
                    b0:d4:82:43:1d:fd:b0:3e:88:ea:8d:54:fd:72:98:
                    f1:0a:ca:5b:da:55:11:75:47:4d:ff:92:d6:ec:cc:
                    ab:49:22:d3:31:c0:b8:da:89:bb:d2:c8:af:ae:86:
                    e0:bb:90:85:b6:66:06:63:b2:06:9a:fa:97:b7:8f:
                    e4:15:e8:5c:ab:02:88:19:04:17:85:d1:0f:35:55:
                    9b:16:2c:d5:4c:10:8b:bc:c3:e6:35:f2:57:37:4e:
                    2e:1f:fa:a8:ec:9e:ba:20:05:b8:66:05:56:5e:2d:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:60:CC:EC:2B:B8:6F:A2:0F:84:27:06:C4:8A:32:43:DF:31:5F:F1
            X509v3 Authority Key Identifier:
                keyid:79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32302e302f32342d3234203d3e20323732313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:f7:13:4f:62:5b:9a:3e:11:69:23:de:e6:f0:a1:f7:77:
         64:7f:ac:38:62:59:e6:14:65:a1:5f:a2:08:40:1e:68:e4:2f:
         fe:fe:3e:b6:69:df:46:46:90:8c:21:53:6e:f9:1d:ba:c4:d1:
         b1:bd:9e:4f:c2:7b:9f:de:60:09:7b:5c:4a:0a:78:8d:29:35:
         16:f6:db:75:a2:17:23:6a:bd:12:4e:2b:de:98:0c:02:ff:97:
         4b:4a:75:94:ff:2c:17:b1:20:48:76:ad:20:7d:f9:a1:bf:a6:
         31:f2:b2:96:41:af:6b:32:31:71:95:d6:04:1f:0d:c5:e8:5a:
         a9:a0:79:ca:2b:22:6f:3b:5a:7b:df:f2:fd:60:0a:bc:14:34:
         a1:3b:e4:64:4a:70:3c:4c:4b:02:e5:10:3a:50:a3:aa:c0:cf:
         2f:6f:8b:24:b2:4a:50:04:55:5b:94:64:1c:d3:75:13:68:71:
         49:2d:44:ec:c4:e6:af:c5:45:31:ca:ab:47:a8:f1:22:ca:1c:
         aa:78:83:90:1e:75:ce:cf:52:50:10:6c:8c:c8:73:95:01:9c:
         7b:7e:70:a9:c1:cf:33:72:19:06:35:86:56:7f:97:84:73:12:
         b3:d2:92:5d:52:d8:90:b7:f5:0a:cf:50:92:bb:34:ba:29:ae:
         ff:f8:c8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:27:15 2024 by rpki-client on console-ams.rpki-client.org