Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32332e302f32342d3234203d3e20323732313530.roa
File:                     3139322e3134312e32332e302f32342d3234203d3e20323732313530.roa (raw, json)
Hash identifier:          LDfud5M87FresB85aJD+C+6awpw2GYJYOOaHlle/XUk=
Subject key identifier:   18:70:91:E2:5A:60:C9:C4:AB:78:3F:D2:B4:00:42:2A:17:89:21:9D
Certificate issuer:       /CN=7944892887A229F94947FB31A3A32FD54294016E
Certificate serial:       5E55BE9E5D557F7FE45B7BFDE1CF417BDE1BFB47
Authority key identifier: 79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32332e302f32342d3234203d3e20323732313530.roa
Signing time:             Tue 05 Mar 2024 18:07:59 +0000
ROA not before:           Tue 05 Mar 2024 18:02:59 +0000
ROA not after:            Tue 04 Mar 2025 18:07:59 +0000
asID:                     272150
IP address blocks:        192.141.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:55:be:9e:5d:55:7f:7f:e4:5b:7b:fd:e1:cf:41:7b:de:1b:fb:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7944892887A229F94947FB31A3A32FD54294016E
        Validity
            Not Before: Mar  5 18:02:59 2024 GMT
            Not After : Mar  4 18:07:59 2025 GMT
        Subject: CN=187091E25A60C9C4AB783FD2B400422A1789219D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:14:2f:bd:55:39:8a:a3:ba:51:4b:aa:eb:
                    43:a7:13:0f:12:57:4d:09:d9:33:e6:da:20:d2:e2:
                    5f:98:d1:4f:0d:80:34:65:5b:75:5b:59:a8:58:8b:
                    38:a7:af:ca:47:9a:fe:48:36:da:73:00:42:49:60:
                    dd:ed:83:0d:8f:26:16:95:e5:8d:77:bc:1f:41:f9:
                    2f:e6:6d:01:bb:c3:e0:1f:e2:48:c8:87:24:c6:48:
                    4a:22:47:93:c7:13:09:1b:06:a5:9a:ae:92:a4:60:
                    69:06:bd:f1:d5:28:58:02:e6:ab:1d:79:67:ab:d4:
                    19:0a:57:59:62:bc:ba:76:3f:42:0c:b9:68:e5:fc:
                    78:cb:51:82:78:83:b1:fe:46:a2:28:10:9b:45:ee:
                    7a:68:ce:50:82:d5:12:12:35:0e:1e:25:d7:ee:be:
                    32:1f:7a:72:53:67:49:af:ed:dd:dd:1e:ec:48:3a:
                    2d:27:c5:4e:bd:71:17:a9:ce:fd:69:ff:5d:1f:90:
                    90:0b:f6:99:51:21:20:22:df:e6:79:6c:e4:83:84:
                    f4:2d:df:26:eb:32:b4:df:c7:fe:a9:52:5d:ec:3d:
                    4d:f4:4f:13:a3:3e:55:83:66:fc:48:a1:bd:d9:6f:
                    ce:6c:98:5e:16:05:40:b3:f2:1d:8d:37:2f:a0:2e:
                    17:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:70:91:E2:5A:60:C9:C4:AB:78:3F:D2:B4:00:42:2A:17:89:21:9D
            X509v3 Authority Key Identifier:
                keyid:79:44:89:28:87:A2:29:F9:49:47:FB:31:A3:A3:2F:D5:42:94:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/7944892887A229F94947FB31A3A32FD54294016E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7944892887A229F94947FB31A3A32FD54294016E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187169D7E7B8393F02C76125BFC31F7997EC347E57DCE87CC4B9822C8FA21438/0/3139322e3134312e32332e302f32342d3234203d3e20323732313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:5f:1b:be:a9:fd:63:b3:a7:91:86:18:e8:6f:41:2f:c9:78:
         78:e9:74:78:5a:9b:93:77:d0:61:20:fc:68:da:d6:ef:ca:96:
         40:c4:00:0b:b3:71:b7:eb:c2:40:1b:3f:00:18:9f:28:9d:9b:
         d4:1d:e6:44:f1:8d:56:9a:7b:0c:05:bf:eb:3a:07:3e:88:f8:
         f9:58:cc:ba:19:0e:41:5f:49:69:3f:78:c4:e1:9e:eb:56:94:
         0c:e9:22:d3:86:52:2c:d0:5a:c5:eb:0b:6e:0c:7e:fc:f7:ba:
         c3:fc:aa:15:f8:84:9c:59:25:2b:9d:7b:94:4e:eb:97:e3:50:
         d5:b5:9e:6e:80:53:15:6f:e4:a8:b3:52:7b:e7:be:67:dc:f7:
         dc:37:fe:39:62:3b:6e:ca:4e:03:88:ad:a4:34:d2:b2:13:e3:
         da:3c:b6:65:16:f8:1c:2c:3d:77:3e:92:86:a9:2b:7c:39:cc:
         22:59:24:4a:b3:b4:3b:98:03:37:89:a0:bd:02:0f:85:c4:42:
         cf:8b:eb:0e:be:b3:d5:45:d0:27:f5:ed:06:2c:90:16:19:d3:
         0b:73:db:d6:e8:c4:2e:3e:a2:ca:19:c2:f0:a5:ea:d5:5a:78:
         44:ee:f6:ed:56:6c:ae:d7:4a:13:76:2e:ef:93:e1:32:43:4e:
         33:90:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org