Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32322e302f32342d3234203d3e20323732313530.roa
File:                     3139322e3134312e32322e302f32342d3234203d3e20323732313530.roa (raw, json)
Hash identifier:          qp91UF+SULlgGRYDiYrJVHo59K9SQIsBwTJY7HioEII=
Subject key identifier:   B7:28:3A:BC:8C:22:A2:4E:05:7C:6D:D9:98:70:1D:8D:A1:D7:5F:F9
Certificate issuer:       /CN=7944892887A229F94947FB31A3A32FD54294016E
Certificate serial:       547D2B2D0261F2DB3B5F7C6163F3B4A269E842AB
Authority key identifier: 79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32322e302f32342d3234203d3e20323732313530.roa
Signing time:             Tue 05 Mar 2024 18:07:59 +0000
ROA not before:           Tue 05 Mar 2024 18:02:59 +0000
ROA not after:            Tue 04 Mar 2025 18:07:59 +0000
asID:                     272150
IP address blocks:        192.141.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 16:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7d:2b:2d:02:61:f2:db:3b:5f:7c:61:63:f3:b4:a2:69:e8:42:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7944892887A229F94947FB31A3A32FD54294016E
        Validity
            Not Before: Mar  5 18:02:59 2024 GMT
            Not After : Mar  4 18:07:59 2025 GMT
        Subject: CN=B7283ABC8C22A24E057C6DD998701D8DA1D75FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:2b:74:bb:35:b6:9c:92:49:d0:e0:42:5d:
                    8f:22:0a:8a:86:2f:2d:a4:d4:e3:b3:bf:23:7f:16:
                    f1:19:61:b2:3e:9a:2a:da:4f:cf:f9:f3:6b:88:63:
                    c6:41:15:8a:a4:19:a3:df:29:6e:d7:f6:4a:60:87:
                    0e:ea:af:65:cb:5c:03:84:c3:32:92:02:db:25:04:
                    c5:a3:88:65:7e:6d:8e:46:5a:72:b8:a4:24:f1:5d:
                    3c:59:8a:6c:cc:44:4d:22:41:96:89:a9:c7:c7:a1:
                    44:74:30:98:9d:94:f4:7a:97:dc:ca:77:ef:59:bf:
                    6e:51:da:bf:c1:12:2b:f5:b1:89:b2:16:17:98:2a:
                    8a:8a:3f:fb:ea:31:26:80:44:85:3c:ad:56:a3:2f:
                    de:da:eb:34:5a:bb:1f:ad:62:34:51:08:0d:cc:ba:
                    d6:1e:84:13:1f:64:a6:74:4b:71:e9:60:37:f8:d7:
                    e5:3a:a4:35:6a:63:a5:d2:e3:89:75:00:47:d4:57:
                    bd:14:38:3c:29:38:53:db:78:ac:a2:c7:53:6b:6a:
                    00:ad:85:9e:87:47:13:5a:b1:9f:42:3a:5f:ee:8c:
                    18:47:f2:c1:4c:b3:58:a7:9a:3c:b5:ec:72:09:77:
                    86:f4:e2:2b:a3:1c:db:be:a2:e0:28:ec:bd:1b:e8:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:28:3A:BC:8C:22:A2:4E:05:7C:6D:D9:98:70:1D:8D:A1:D7:5F:F9
            X509v3 Authority Key Identifier:
                keyid:79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32322e302f32342d3234203d3e20323732313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:fe:4a:7e:5c:62:94:06:8e:6c:d7:4f:17:df:ec:f9:12:5c:
         f0:2a:55:79:06:1d:f8:ca:23:ce:e2:76:81:c1:e2:09:47:9a:
         0a:19:78:e3:39:ae:7b:1b:a9:e1:c5:b1:78:94:5e:65:b3:f7:
         77:55:25:e6:ef:b6:96:cc:49:f8:c0:a1:26:e1:6a:d0:4f:29:
         b7:e3:28:26:b7:e7:52:a0:81:d4:65:79:b1:6a:04:20:66:bd:
         24:5c:3b:1b:e9:52:d5:20:10:e9:2c:08:7e:59:7e:c8:d7:e4:
         d8:d4:87:a8:8c:a0:a5:6d:04:95:e6:05:2c:04:ee:d2:3a:54:
         c7:fc:d8:9b:02:ff:aa:34:ba:a4:0c:3b:e6:d5:a0:d8:3a:e4:
         5e:7b:0b:df:9e:9a:63:f0:67:f5:89:10:52:e2:20:e5:e7:10:
         bc:84:fc:2d:a1:08:d0:1b:4b:1d:69:11:a7:a3:fa:f7:c0:9a:
         2b:f0:18:dc:32:91:58:8a:b1:c1:9c:7b:8b:28:33:3d:b1:d5:
         5e:56:44:23:30:ef:12:2c:73:8d:fb:d9:4f:dc:8a:23:f4:e9:
         c2:6b:1d:f8:e1:a0:13:6f:c5:5a:80:e4:1a:99:2d:67:22:56:
         64:2b:69:41:a6:e5:27:95:05:37:14:98:c4:a8:4b:33:7e:a4:
         5b:9e:a1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:27:15 2024 by rpki-client on console-ams.rpki-client.org