Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139312e39342e302e302f31382d3138203d3e203237383035.roa
File:                     3139312e39342e302e302f31382d3138203d3e203237383035.roa (raw, json)
Hash identifier:          7HMgKdlLlV9D1vXTeUwIHYpEwEHrR9XboNcukEpl99I=
Subject key identifier:   A7:93:A8:B8:3D:8F:EA:2A:9C:ED:95:AA:8A:1C:DC:79:92:D9:6F:56
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       393E97BE3906F1BBECF13F29E9F672D8F9DA7C6B
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139312e39342e302e302f31382d3138203d3e203237383035.roa
Signing time:             Tue 05 Mar 2024 18:15:41 +0000
ROA not before:           Tue 05 Mar 2024 18:10:41 +0000
ROA not after:            Tue 04 Mar 2025 18:15:41 +0000
asID:                     27805
IP address blocks:        191.94.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3e:97:be:39:06:f1:bb:ec:f1:3f:29:e9:f6:72:d8:f9:da:7c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Mar  5 18:10:41 2024 GMT
            Not After : Mar  4 18:15:41 2025 GMT
        Subject: CN=A793A8B83D8FEA2A9CED95AA8A1CDC7992D96F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d3:d3:75:2b:86:c4:98:ba:f5:31:75:9b:0f:
                    73:7c:94:b8:34:16:3b:af:2f:c0:db:a2:ac:cd:ef:
                    21:ac:72:48:2f:e6:5a:ef:df:b3:1d:3f:2e:36:87:
                    42:98:21:24:66:a2:57:76:c7:5d:4a:51:e6:dc:86:
                    27:31:8e:10:70:b8:29:53:d5:94:85:90:54:3e:ff:
                    be:18:c0:ac:72:9c:97:3f:38:b9:56:27:6b:c7:6b:
                    ba:f8:67:21:82:19:5f:51:52:f9:5b:c2:cd:fc:e7:
                    a2:6e:32:71:aa:56:85:1e:79:21:1b:9c:50:bb:3e:
                    84:72:b1:d1:fe:14:b1:d2:f9:81:3e:e5:8c:a5:08:
                    02:e3:1a:85:06:46:69:f8:2a:ca:95:44:d9:20:ea:
                    82:3b:b1:2f:09:8c:17:87:40:07:2f:2f:9c:f9:47:
                    18:14:3a:bf:b4:28:24:8a:8b:54:c9:9f:03:17:3b:
                    02:a1:3b:66:29:ac:13:68:9c:72:41:93:81:7c:7c:
                    31:9a:50:61:b6:07:3c:8c:16:7b:85:4b:d3:9a:eb:
                    b3:c9:0e:6b:92:cd:80:82:2e:e0:a4:a8:d1:bc:90:
                    fd:a9:dd:26:f4:a9:4d:84:09:30:7e:9b:3e:2f:84:
                    44:77:fc:fc:f0:3e:3a:1a:25:1b:55:71:3f:63:f7:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:93:A8:B8:3D:8F:EA:2A:9C:ED:95:AA:8A:1C:DC:79:92:D9:6F:56
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139312e39342e302e302f31382d3138203d3e203237383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.94.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:9e:e3:b0:d7:68:a4:3f:b2:b0:07:55:a6:61:d8:b0:8d:
         1a:66:c5:37:9a:56:38:fd:a5:fd:77:42:8f:de:63:04:3f:e0:
         33:29:b5:4c:3e:58:87:39:fa:c8:ec:48:43:af:fa:eb:62:2f:
         34:39:73:3c:0f:a2:f0:95:74:f9:f2:32:f2:e1:25:5a:5c:15:
         17:e9:35:e8:30:91:9d:0d:3f:b3:e9:76:63:44:45:8f:ae:28:
         16:dd:de:b7:c8:7c:86:18:83:a0:c5:1f:80:17:29:58:ea:e8:
         66:99:db:31:a9:0d:c9:50:c6:41:8a:4e:7b:98:e5:f4:49:fa:
         22:e7:8b:07:71:50:d9:c9:58:e8:19:c4:b7:cf:c6:d0:e1:e2:
         75:06:e8:85:86:1e:4a:52:4f:a2:93:a2:bc:be:a2:66:25:1d:
         19:ca:ec:ae:60:d4:23:ee:d8:d6:c5:e1:a3:c8:60:08:65:3f:
         22:4f:c2:09:b1:8e:25:33:b9:16:7b:96:2c:f2:4f:46:6b:10:
         28:72:8d:bf:ab:cd:f3:40:68:db:af:61:80:15:17:96:bd:e4:
         1b:48:67:a8:e2:d4:dd:cb:b4:13:f2:73:d5:78:01:c0:c7:80:
         90:a9:2d:24:e5:34:3c:38:6b:b7:c5:57:49:1f:2f:27:09:a2:
         16:aa:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 04:52:42 2024 by rpki-client on console-fra.rpki-client.org