Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32312e302f32342d3234203d3e20323732313530.roa
File:                     3139322e3134312e32312e302f32342d3234203d3e20323732313530.roa (raw, json)
Hash identifier:          Ubou5P1dCZGxcNACD7FdLW6SbKjbCerfw9iMeTs29co=
Subject key identifier:   3B:FA:C8:7C:A9:9C:5B:32:9C:84:1F:9D:7C:C2:3B:B0:D1:30:6D:D0
Certificate issuer:       /CN=7944892887A229F94947FB31A3A32FD54294016E
Certificate serial:       19AA882309767BFEBD785093F48AAEF5B73FF8F8
Authority key identifier: 79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32312e302f32342d3234203d3e20323732313530.roa
Signing time:             Tue 05 Mar 2024 18:08:00 +0000
ROA not before:           Tue 05 Mar 2024 18:03:00 +0000
ROA not after:            Tue 04 Mar 2025 18:08:00 +0000
asID:                     272150
IP address blocks:        192.141.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:aa:88:23:09:76:7b:fe:bd:78:50:93:f4:8a:ae:f5:b7:3f:f8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7944892887A229F94947FB31A3A32FD54294016E
        Validity
            Not Before: Mar  5 18:03:00 2024 GMT
            Not After : Mar  4 18:08:00 2025 GMT
        Subject: CN=3BFAC87CA99C5B329C841F9D7CC23BB0D1306DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f5:3a:73:a1:67:77:1c:54:f0:52:03:c6:90:
                    57:97:cf:5e:ba:08:48:d4:ed:a4:57:e1:de:0a:7a:
                    d8:00:71:bb:ae:bb:7e:d8:d0:53:7a:5d:e1:c9:3f:
                    12:cb:8c:63:bf:df:ae:2e:13:f7:d1:87:e9:78:50:
                    75:b9:41:93:64:e1:46:c3:69:32:fb:8e:e5:df:f8:
                    60:73:67:ae:39:c8:49:e6:88:d4:71:bf:9f:da:9a:
                    e6:23:31:c9:82:ac:17:a7:41:47:56:9f:ed:e0:27:
                    e5:64:a9:00:81:41:2f:fd:d5:7d:10:fe:81:a9:f8:
                    e0:79:33:03:d9:5e:ab:42:6c:d6:6f:91:1a:2e:fd:
                    8b:b8:26:73:e8:dc:57:db:2c:e4:3a:e4:41:37:10:
                    ba:1a:c6:91:c7:14:ff:7f:f1:98:b8:0d:00:cf:7c:
                    2c:90:ad:bb:f3:ed:bb:f7:5d:1e:34:fa:db:8a:e8:
                    a7:0b:15:35:73:8e:04:c7:cd:84:dc:ed:37:b3:e8:
                    bf:dd:8d:c9:c1:ad:fe:68:8b:d9:da:ad:ab:a2:41:
                    cc:6d:d7:b7:f2:05:71:31:44:e7:79:cb:0c:e3:57:
                    b5:5e:28:99:42:a2:af:ae:6c:6e:3e:65:0b:18:12:
                    dc:d2:1c:af:00:49:b9:70:1f:44:c9:33:42:3a:bf:
                    f0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FA:C8:7C:A9:9C:5B:32:9C:84:1F:9D:7C:C2:3B:B0:D1:30:6D:D0
            X509v3 Authority Key Identifier:
                keyid:79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32312e302f32342d3234203d3e20323732313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:29:56:7b:ef:50:42:53:80:ba:0b:fd:ec:25:01:49:f5:65:
         60:a2:f1:99:e8:34:fb:db:a8:df:dd:4c:00:69:93:0d:6a:45:
         91:5e:08:4f:f0:4d:12:97:ab:ea:c6:7b:b5:ec:36:39:e0:54:
         57:5f:c6:1a:ee:8a:62:05:ed:76:41:4c:81:43:95:f7:6d:98:
         28:ac:62:09:90:91:02:db:16:6f:e7:cb:bc:01:35:35:d6:cd:
         12:41:5d:a1:0a:26:29:82:63:31:60:d3:4b:a2:ab:d6:ee:2f:
         09:79:a0:b6:2f:ad:bd:4c:7c:e1:2d:14:b3:e9:d2:17:6f:9e:
         5b:68:91:1a:2d:82:62:73:a3:fe:af:59:46:66:14:34:89:d8:
         0e:53:40:c8:af:19:cf:02:f0:dd:a7:2d:79:ee:e7:8c:31:8b:
         ce:a8:74:b6:21:70:09:56:d9:ad:05:85:09:d8:69:df:e7:56:
         a4:33:e4:8f:69:aa:58:dc:ec:d4:9b:74:ee:ce:a3:09:82:e9:
         38:e0:ac:ad:00:a6:a7:a6:cb:55:56:fb:f5:ee:9c:8c:84:90:
         be:dc:af:56:31:34:b6:1a:7e:01:86:79:24:57:a8:fe:f2:30:
         69:46:ec:9c:de:cc:fb:c4:7e:c8:b0:ec:1a:da:b2:c4:b6:c4:
         a7:28:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org