Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/3139322e3134302e36302e302f32322d3234203d3e20323635373037.roa
File:                     3139322e3134302e36302e302f32322d3234203d3e20323635373037.roa (raw, json)
Hash identifier:          LD7rmyMegbaaWFFWc6K+v/tw7NbCqiPI0UEm055vwAM=
Subject key identifier:   8A:3D:18:B8:B4:16:91:8D:4D:7A:4A:53:F8:06:53:AF:B5:87:1A:FA
Certificate issuer:       /CN=0C9F7C8120191058D60FE1C254277BCAFC0A1960
Certificate serial:       376F1CC7E3AD6EB2AA8FAA430ECD2DDE3BA6895F
Authority key identifier: 0C:9F:7C:81:20:19:10:58:D6:0F:E1:C2:54:27:7B:CA:FC:0A:19:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/3139322e3134302e36302e302f32322d3234203d3e20323635373037.roa
Signing time:             Tue 05 Mar 2024 18:20:51 +0000
ROA not before:           Tue 05 Mar 2024 18:15:51 +0000
ROA not after:            Tue 04 Mar 2025 18:20:51 +0000
asID:                     265707
IP address blocks:        192.140.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6f:1c:c7:e3:ad:6e:b2:aa:8f:aa:43:0e:cd:2d:de:3b:a6:89:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C9F7C8120191058D60FE1C254277BCAFC0A1960
        Validity
            Not Before: Mar  5 18:15:51 2024 GMT
            Not After : Mar  4 18:20:51 2025 GMT
        Subject: CN=8A3D18B8B416918D4D7A4A53F80653AFB5871AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:8b:11:ef:61:64:83:d5:84:4b:b1:2d:10:
                    0a:fc:ee:47:16:f7:6e:54:ff:87:43:b0:f2:8f:82:
                    a7:3c:9c:89:4a:f3:f0:93:e9:23:99:4e:2d:0e:53:
                    d6:f1:49:f6:3f:49:0c:e3:3c:51:2c:4e:36:95:be:
                    c2:26:82:0d:d2:6e:18:8d:77:53:92:19:7c:81:4c:
                    dd:74:c4:14:7f:94:e5:96:a9:30:37:b0:10:b4:84:
                    42:f4:d1:21:ac:6a:70:7e:63:8a:c4:93:9b:34:70:
                    02:8e:f6:fa:ac:56:3a:72:2c:06:5b:3b:bc:71:93:
                    0c:e5:13:fe:8e:16:39:7f:7c:1d:b0:a9:82:75:93:
                    44:b9:f7:94:fc:74:cc:0e:44:68:0e:0d:cb:69:68:
                    2f:5a:15:88:73:1b:84:3f:6e:b0:4c:32:d3:03:19:
                    9c:c1:17:e5:ab:c8:28:81:6f:d7:89:b7:77:8a:a7:
                    d2:b0:c2:20:dd:ea:94:86:7a:08:cf:3a:1b:10:9a:
                    23:3c:97:bc:05:84:45:af:01:d2:c8:80:98:97:23:
                    5a:58:e2:6b:ae:f5:fc:27:45:5e:93:a0:03:37:0e:
                    e8:40:7d:22:1c:74:de:16:2a:0f:30:e1:c2:47:86:
                    3e:3c:7d:ff:c7:ce:5c:2f:76:7b:c3:75:6d:60:ed:
                    15:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3D:18:B8:B4:16:91:8D:4D:7A:4A:53:F8:06:53:AF:B5:87:1A:FA
            X509v3 Authority Key Identifier:
                keyid:0C:9F:7C:81:20:19:10:58:D6:0F:E1:C2:54:27:7B:CA:FC:0A:19:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C9F7C8120191058D60FE1C254277BCAFC0A1960.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27E6BAAAD13FF57F50DC2357C3494755A12030E29E5FBD77CF67884F2E1E7FD2/0/3139322e3134302e36302e302f32322d3234203d3e20323635373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:d2:95:a6:31:37:3e:f1:55:4f:5b:86:6a:fe:f6:c6:18:da:
         7e:b1:63:13:b6:18:6b:42:e0:e0:e1:ff:0b:24:f7:eb:d3:86:
         20:02:82:c5:79:74:a1:0d:ca:50:b1:84:3b:b4:0c:ae:2f:36:
         3d:6a:ef:91:b0:36:e9:fa:95:bd:36:43:c4:d7:25:23:13:e1:
         2d:9f:7f:c4:0a:4a:f7:b4:f3:71:90:3e:9a:de:9f:7f:de:5e:
         0d:50:fc:4f:5e:25:9c:28:59:fd:78:a2:66:55:3a:4b:46:63:
         db:1a:52:f2:8b:1b:f5:7a:0b:2f:87:94:0d:6b:14:77:94:41:
         15:d8:7e:0f:e0:aa:bd:95:ef:5b:b3:64:39:f1:a6:33:f1:06:
         02:9b:29:47:70:7d:8d:fb:43:44:58:9b:1b:6b:6a:08:51:8a:
         44:02:21:ae:14:17:b1:4f:f2:5b:06:08:cf:ec:08:65:a9:9a:
         12:78:0b:c4:94:ec:4d:3a:42:56:fe:76:d2:19:79:cf:b3:77:
         b7:ac:20:96:97:23:33:7e:16:fd:3c:e6:1a:df:e6:16:fc:7a:
         f5:47:f5:fd:03:48:23:94:c7:68:c2:d8:6d:26:e6:c0:b0:32:
         1a:f7:61:b2:8c:03:fb:db:ff:5d:a4:ac:96:c3:21:d1:82:46:
         83:1a:d8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:18 2024 by rpki-client on console-fra.rpki-client.org