Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e302e302f31362d3234203d3e203131333430.roa
File:                     3134362e38332e302e302f31362d3234203d3e203131333430.roa (raw, json)
Hash identifier:          5DbQfT8LMi0PLDO0d7lujKmMd87NxP2j7meHvPLbTGc=
Subject key identifier:   47:C7:76:BD:9F:67:D8:0E:B3:EC:80:B1:C9:0D:54:B3:D8:92:69:7E
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       1892EF39FA60DA0850676A6814A4C638802F3AB0
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e302e302f31362d3234203d3e203131333430.roa
Signing time:             Tue 05 Mar 2024 17:58:10 +0000
ROA not before:           Tue 05 Mar 2024 17:53:10 +0000
ROA not after:            Tue 04 Mar 2025 17:58:10 +0000
asID:                     11340
IP address blocks:        146.83.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:92:ef:39:fa:60:da:08:50:67:6a:68:14:a4:c6:38:80:2f:3a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Mar  5 17:53:10 2024 GMT
            Not After : Mar  4 17:58:10 2025 GMT
        Subject: CN=47C776BD9F67D80EB3EC80B1C90D54B3D892697E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:a3:a5:72:eb:70:8b:91:c8:4a:ee:38:ee:
                    dc:a5:92:77:39:92:9f:dc:b9:08:a5:b2:b6:87:17:
                    6a:26:4a:79:a6:f6:42:c1:a3:f9:c6:22:a1:f5:df:
                    9b:55:6d:39:e5:7a:b7:8d:ed:b7:1d:cd:73:52:fa:
                    2c:cd:c9:d4:3e:fe:66:95:9d:c4:1b:0f:e8:6d:d4:
                    4d:66:ce:e3:96:15:f4:63:03:4d:7e:80:c9:71:ed:
                    33:ef:6c:f1:34:78:d4:54:80:5e:89:50:7b:32:79:
                    16:04:79:4e:ac:70:d4:78:18:a6:f2:23:90:e4:dd:
                    80:f7:86:3b:d2:8d:f4:a1:fa:f6:74:72:ab:82:3d:
                    e1:ba:79:09:24:76:3c:97:98:10:aa:f7:cd:c6:f9:
                    0c:cd:b6:4a:a6:4b:14:4a:d7:11:54:73:f7:82:d2:
                    bb:05:fe:9f:ad:92:da:6f:a1:79:e9:5b:76:97:ac:
                    f4:75:94:48:5e:f6:f2:8d:fd:97:b6:ee:70:73:72:
                    40:28:c8:89:8c:f1:90:fa:e6:c7:3b:1c:03:cb:4b:
                    f7:78:70:3d:e9:21:09:17:04:7a:f2:4a:93:3e:65:
                    0c:e9:ca:ed:c8:72:4e:14:42:3a:8e:cb:fe:98:91:
                    38:2a:98:13:e9:b0:66:36:06:41:af:0d:7d:e8:d0:
                    a4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C7:76:BD:9F:67:D8:0E:B3:EC:80:B1:C9:0D:54:B3:D8:92:69:7E
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e302e302f31362d3234203d3e203131333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a9:a6:d6:34:32:44:09:a6:10:1e:28:4b:52:3c:53:94:d5:c2:
         7e:d5:3e:a3:e1:31:9e:81:1c:66:68:0c:b8:3f:ed:43:a9:df:
         60:d3:f3:8a:f9:7f:5f:73:a2:9a:b3:56:89:1d:f2:b3:63:60:
         41:0d:dc:8c:15:8a:f7:48:90:a4:0d:75:31:67:39:3c:5f:aa:
         2b:9f:ab:d1:c0:55:96:a0:7c:02:60:9a:39:f0:aa:ce:2c:f8:
         94:87:b6:82:bf:d6:00:73:2d:31:1a:18:8d:0b:f0:09:75:15:
         01:b4:f7:68:c8:d2:98:95:f3:06:4f:77:e2:2e:0a:70:48:ea:
         37:fd:9e:14:3e:bf:af:e8:d8:63:e5:13:e8:0a:c5:16:9e:5e:
         7e:ba:54:d5:57:c2:8e:5a:6d:1e:b4:6b:e4:ec:56:ae:47:65:
         6e:12:34:4a:71:4e:64:a9:83:0b:68:aa:ab:84:32:21:d9:20:
         2f:40:bc:24:74:08:b5:f8:b8:05:25:a2:5d:f2:71:16:90:cd:
         32:6b:06:e5:3f:1a:59:67:d6:07:d1:3e:6c:27:f2:3e:c9:65:
         49:bb:6e:57:de:63:ab:bc:20:5f:ae:b2:aa:4a:59:0a:2e:f2:
         7c:fb:6c:f6:0e:8e:e9:9c:af:1c:5e:c0:12:a4:f2:fa:6c:c4:
         13:de:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org