Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e382e302f32312d3231203d3e203233313430.roa
File:                     3134362e38332e382e302f32312d3231203d3e203233313430.roa (raw, json)
Hash identifier:          d8/iNLfvvX+TefiiqWXB5zp+KJfpsdbxAQ/yV4zvDNc=
Subject key identifier:   E3:E9:85:78:EC:3B:64:17:58:0E:AE:96:C0:41:9B:80:B3:4E:7B:60
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       1B51B81D4F8C52B0FE61362790FA69BFF274E1C7
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e382e302f32312d3231203d3e203233313430.roa
Signing time:             Tue 05 Mar 2024 17:58:10 +0000
ROA not before:           Tue 05 Mar 2024 17:53:10 +0000
ROA not after:            Tue 04 Mar 2025 17:58:10 +0000
asID:                     23140
IP address blocks:        146.83.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:51:b8:1d:4f:8c:52:b0:fe:61:36:27:90:fa:69:bf:f2:74:e1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Mar  5 17:53:10 2024 GMT
            Not After : Mar  4 17:58:10 2025 GMT
        Subject: CN=E3E98578EC3B6417580EAE96C0419B80B34E7B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:8f:81:69:9d:b1:c1:ef:a3:57:b5:69:34:
                    e6:a3:f5:db:76:88:a2:78:24:a7:30:eb:1b:bf:24:
                    79:b4:d7:a1:84:56:69:b2:71:7a:95:ee:69:cd:1e:
                    6e:de:8e:76:1a:27:a2:ec:24:e3:d7:85:a3:a2:8a:
                    ab:17:7a:88:86:2a:e1:13:e9:90:e2:3c:c8:40:35:
                    16:13:7d:82:88:aa:d8:8d:c3:3c:36:48:ce:f6:7d:
                    df:5e:fe:f0:f5:f2:7f:e6:32:88:4f:27:e8:df:c3:
                    41:25:43:b5:5b:53:fd:b5:93:a5:bb:8c:ea:3e:2d:
                    85:ad:b7:05:8d:9c:30:6e:91:0d:b8:a4:41:b4:05:
                    e1:62:85:19:dd:d2:1b:55:bc:48:be:4e:32:cb:e8:
                    a0:e1:da:fe:76:01:62:fb:38:eb:6f:f6:7a:3d:94:
                    02:13:5f:17:c3:bf:6e:50:cd:65:cc:6b:7b:49:5a:
                    c1:8b:0c:45:92:12:af:55:b0:92:ac:c4:41:7f:d7:
                    cc:df:32:2f:ae:65:54:72:bf:1e:a3:7d:e9:2a:b4:
                    da:ad:d9:f2:42:0d:d6:a5:55:39:d3:e5:8f:d7:90:
                    ce:f4:38:f0:f2:9f:cc:cd:4e:1c:e6:d2:f7:f7:7a:
                    f3:cd:73:c4:dd:dc:30:9a:94:3c:14:58:c3:c6:74:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E9:85:78:EC:3B:64:17:58:0E:AE:96:C0:41:9B:80:B3:4E:7B:60
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e382e302f32312d3231203d3e203233313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:37:e4:75:ee:6f:ce:66:86:1d:1d:ae:29:86:89:48:90:
         26:b0:20:e4:cb:04:e9:64:0e:e6:39:b4:50:55:5c:39:a9:14:
         0c:f7:f6:e8:c4:9c:82:11:62:68:9e:d3:95:6f:76:18:01:09:
         a7:c5:df:33:eb:c4:0e:4c:47:fe:fd:88:2e:60:95:53:1e:df:
         fa:57:c0:36:57:52:53:44:7c:0f:bb:de:dc:86:67:1e:be:ba:
         1a:ca:ed:f1:79:e5:3a:41:5a:42:2f:b7:19:54:12:1a:36:75:
         ed:1d:0c:11:9c:e8:10:ce:be:9a:aa:62:9c:49:60:48:32:b7:
         a1:5c:87:47:cd:88:4d:e2:32:4a:05:68:ad:4e:04:ee:77:db:
         0b:53:33:bf:8c:d4:c4:14:fa:f5:e4:e0:e0:32:49:03:ce:8a:
         07:f2:64:94:b7:b5:2b:ff:5f:f6:84:1f:87:d5:ef:7a:7c:a9:
         4f:42:de:98:e1:71:8a:98:14:c5:21:71:d9:94:46:bc:f9:58:
         48:2e:d0:61:16:0b:22:cb:17:f0:9e:a7:fe:80:b8:1b:0a:57:
         62:f4:3d:91:ef:77:b4:52:88:d0:1a:0a:3c:3b:d3:ce:51:23:
         a7:6b:e1:ca:76:56:e9:a0:39:6c:56:63:d1:37:48:8e:41:a5:
         dd:ca:91:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:47:05 2024 by rpki-client on console-ams.rpki-client.org