Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e39302e302f32342d3234203d3e203236363130.roa
File:                     3134362e38332e39302e302f32342d3234203d3e203236363130.roa (raw, json)
Hash identifier:          h5ZUlOhFZ2Sn3Gif+IIj7fxTjr4h5N+Ba/C4AyPAvxY=
Subject key identifier:   33:26:8E:79:49:FF:1A:09:D5:FB:96:EC:0F:24:5B:12:77:91:03:C3
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       38DE94BF9787A12B11E9A8E227433938686C77B6
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e39302e302f32342d3234203d3e203236363130.roa
Signing time:             Tue 05 Mar 2024 17:58:09 +0000
ROA not before:           Tue 05 Mar 2024 17:53:09 +0000
ROA not after:            Tue 04 Mar 2025 17:58:09 +0000
asID:                     26610
IP address blocks:        146.83.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:de:94:bf:97:87:a1:2b:11:e9:a8:e2:27:43:39:38:68:6c:77:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Mar  5 17:53:09 2024 GMT
            Not After : Mar  4 17:58:09 2025 GMT
        Subject: CN=33268E7949FF1A09D5FB96EC0F245B12779103C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:10:79:2b:e2:39:9a:71:1c:1f:6b:8b:ea:5e:
                    f1:75:d9:da:48:d5:72:f1:ce:29:1e:c8:63:3e:a9:
                    02:bb:1c:9e:38:39:03:7d:d7:2b:5d:4e:77:15:5e:
                    12:a7:d6:83:6e:49:e0:bd:38:ce:86:71:d7:46:6b:
                    64:19:a5:71:83:a1:28:e3:72:86:a1:a6:1c:0d:a9:
                    26:2c:29:4a:9a:e7:a2:00:9c:b2:d3:e1:34:1f:2b:
                    1e:71:4d:a6:18:a8:6d:48:2a:85:fb:29:1f:2a:cd:
                    3b:72:02:e2:d5:22:4b:b3:66:03:a4:c0:06:3c:ad:
                    a5:db:db:b8:8b:47:a7:5f:f5:09:43:ce:25:fd:f7:
                    0f:c0:49:e0:96:65:b1:d5:20:1c:bf:e0:18:e4:8f:
                    f0:eb:11:6d:a0:2e:20:b3:7a:02:d6:54:12:3d:79:
                    d8:ac:cb:93:27:49:3b:bb:e0:b2:ec:c4:7f:f2:0e:
                    a8:72:e0:b2:5d:65:6c:c7:45:f2:de:6f:b0:a5:70:
                    53:bd:22:eb:35:4b:4c:84:47:d3:f9:f3:82:bc:aa:
                    0a:89:7e:9e:4b:d9:1e:37:6a:e1:33:d2:2b:81:2a:
                    14:18:d3:49:53:f0:a5:a0:14:64:cf:dc:a4:98:b0:
                    09:6e:3c:9b:19:c8:f8:56:8a:c9:76:2d:ec:e9:57:
                    25:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:26:8E:79:49:FF:1A:09:D5:FB:96:EC:0F:24:5B:12:77:91:03:C3
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e39302e302f32342d3234203d3e203236363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a7:46:24:95:6a:ae:a1:f7:f3:09:45:0d:41:ea:a7:44:32:
         19:60:dc:03:89:e5:9f:c3:41:77:c2:fa:e4:04:f9:c9:a0:19:
         97:e4:91:1b:e1:33:c0:55:c8:c8:cc:3b:28:e0:88:da:cf:31:
         c4:63:b2:60:ad:dd:48:f3:fb:31:a9:d8:02:8e:c2:40:66:09:
         de:1f:1b:ba:8c:12:f3:f2:bb:9c:8a:2a:9d:e5:26:0e:cb:b7:
         f6:3f:c5:cc:bf:89:71:34:19:7a:c5:4c:5e:c4:35:fc:47:5c:
         9d:bd:4d:a1:a9:cd:05:b9:69:31:5d:e3:6c:e2:97:61:cb:83:
         63:92:04:8d:ae:d9:03:d2:a1:7d:68:2d:29:1e:e4:ed:08:ee:
         d6:be:b8:b5:4e:4f:11:d6:6a:cb:00:a5:d5:26:f9:b2:e6:4b:
         7b:0b:31:85:7f:13:9d:99:ea:35:cd:a6:a6:e8:8a:f3:55:6d:
         2e:7c:0e:a7:88:bb:89:17:65:28:d3:29:aa:ba:06:4c:75:b6:
         db:54:cc:53:7a:68:d6:1b:12:88:36:72:20:e3:c1:e3:46:62:
         fc:26:06:a2:32:5e:00:ea:79:45:65:cd:ce:69:52:8f:cd:5f:
         fa:ea:90:10:f2:21:b7:46:a3:e4:42:e6:e9:e7:ee:d6:d3:63:
         15:62:e8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org