Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2806D5A85DF1BC3D1CAC9E5C14169502AA1ECF1B37D3F7BCCF8EDD30346D89DF/0/3139322e3134312e3136362e302f32342d3234203d3e20323732303536.roa
File:                     3139322e3134312e3136362e302f32342d3234203d3e20323732303536.roa (raw, json)
Hash identifier:          wv2ckRG7BObkmYz3c02bcPD9VLl9vi6FHLlFmbTUx4w=
Subject key identifier:   62:7F:DE:DB:A5:C7:5A:36:10:C8:C2:54:C2:83:0D:F3:4A:C6:72:97
Certificate issuer:       /CN=7D7EDBE2447BDAE060A74E085090BF8B4C818FF6
Certificate serial:       2AD912B6D4A869B1B117C1A9904AFD5367BE8644
Authority key identifier: 7D:7E:DB:E2:44:7B:DA:E0:60:A7:4E:08:50:90:BF:8B:4C:81:8F:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D7EDBE2447BDAE060A74E085090BF8B4C818FF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2806D5A85DF1BC3D1CAC9E5C14169502AA1ECF1B37D3F7BCCF8EDD30346D89DF/0/3139322e3134312e3136362e302f32342d3234203d3e20323732303536.roa
Signing time:             Tue 05 Mar 2024 17:47:17 +0000
ROA not before:           Tue 05 Mar 2024 17:42:17 +0000
ROA not after:            Tue 04 Mar 2025 17:47:17 +0000
asID:                     272056
IP address blocks:        192.141.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2806D5A85DF1BC3D1CAC9E5C14169502AA1ECF1B37D3F7BCCF8EDD30346D89DF/0/7D7EDBE2447BDAE060A74E085090BF8B4C818FF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2806D5A85DF1BC3D1CAC9E5C14169502AA1ECF1B37D3F7BCCF8EDD30346D89DF/0/7D7EDBE2447BDAE060A74E085090BF8B4C818FF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D7EDBE2447BDAE060A74E085090BF8B4C818FF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d9:12:b6:d4:a8:69:b1:b1:17:c1:a9:90:4a:fd:53:67:be:86:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7EDBE2447BDAE060A74E085090BF8B4C818FF6
        Validity
            Not Before: Mar  5 17:42:17 2024 GMT
            Not After : Mar  4 17:47:17 2025 GMT
        Subject: CN=627FDEDBA5C75A3610C8C254C2830DF34AC67297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:7f:a5:ca:fd:fa:3f:10:c6:1e:ed:f0:55:
                    20:19:44:19:34:10:66:c0:99:14:ee:4a:98:14:65:
                    81:05:d8:5b:ac:21:90:15:33:b3:4d:08:1e:4a:ff:
                    34:78:65:40:7e:de:33:9e:63:43:9d:55:da:3b:de:
                    78:18:41:17:74:3f:db:9a:97:bc:88:85:ea:7a:3a:
                    3a:f6:51:78:92:61:f8:59:f6:7f:1f:2e:c5:55:89:
                    d2:76:38:93:24:97:5d:0e:ff:1e:b6:d7:4c:c6:fd:
                    c9:27:06:df:e3:6b:d0:56:8d:8b:1b:69:b4:c4:1b:
                    14:5b:b1:b3:33:8e:87:07:a5:e6:09:6f:90:f5:08:
                    a8:7b:fc:c6:c8:32:13:b7:cb:18:92:7d:40:86:4e:
                    ed:ad:ce:c2:4f:66:09:01:37:5a:bd:8c:1a:a5:cf:
                    98:d6:7b:8d:4b:df:8c:d6:b0:9f:ad:b0:10:e9:c6:
                    b5:e7:8e:62:52:3c:59:13:fb:70:b5:85:c1:f1:32:
                    83:43:f0:ac:c1:86:af:93:69:06:a1:b2:d1:db:8e:
                    5b:95:0a:0c:af:b4:de:e5:43:ab:1c:b7:d6:99:13:
                    d1:c9:4f:ed:df:85:d4:af:f3:54:11:e1:cb:0a:ff:
                    9f:f4:4e:43:cb:99:f2:9e:fa:70:07:6b:67:43:10:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7F:DE:DB:A5:C7:5A:36:10:C8:C2:54:C2:83:0D:F3:4A:C6:72:97
            X509v3 Authority Key Identifier:
                keyid:7D:7E:DB:E2:44:7B:DA:E0:60:A7:4E:08:50:90:BF:8B:4C:81:8F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2806D5A85DF1BC3D1CAC9E5C14169502AA1ECF1B37D3F7BCCF8EDD30346D89DF/0/7D7EDBE2447BDAE060A74E085090BF8B4C818FF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D7EDBE2447BDAE060A74E085090BF8B4C818FF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2806D5A85DF1BC3D1CAC9E5C14169502AA1ECF1B37D3F7BCCF8EDD30346D89DF/0/3139322e3134312e3136362e302f32342d3234203d3e20323732303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:31:8b:2a:66:dd:ef:56:da:c4:7c:43:15:7c:03:41:87:39:
         82:7b:e6:de:8d:01:ec:2c:4c:57:81:cc:1d:ba:ee:15:eb:18:
         60:e3:96:15:c7:16:14:33:39:c7:cf:4f:1b:03:b6:93:84:94:
         5c:a2:63:b1:50:c5:82:81:08:27:bd:35:f4:b0:8d:ae:2f:d8:
         d8:a4:73:ad:24:67:ab:01:f2:62:e7:ab:e5:b4:d7:3f:47:ae:
         8b:17:6a:e4:8d:76:28:62:04:94:10:8c:36:ac:fd:52:7a:ac:
         e6:13:6e:1a:e8:27:9a:a2:5a:65:a8:87:85:20:b7:44:38:bf:
         14:84:24:fd:20:d6:4b:da:e3:21:7d:b1:be:4f:17:f4:46:2b:
         3c:c4:94:09:a1:cf:e7:89:48:1b:d0:8f:2d:87:66:60:1a:94:
         0b:2a:e3:34:33:c4:fd:be:2b:46:a9:ed:31:aa:fe:88:dd:d6:
         47:b0:9d:7d:1c:e9:86:fd:57:ae:51:74:f5:eb:8c:8a:c9:e4:
         7e:e3:74:5a:20:82:c3:d2:26:96:7a:a8:44:24:08:64:86:3a:
         61:fc:e6:4e:22:63:7d:99:94:81:cc:98:c4:ef:cf:76:9f:88:
         28:90:e7:f4:75:ca:69:bb:5e:bd:6e:86:21:ed:b0:4d:28:05:
         d3:9f:0a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org