Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2806D5A85DF1BC3D1CAC9E5C14169502AA1ECF1B37D3F7BCCF8EDD30346D89DF/0/3139322e3134312e3136372e302f32342d3234203d3e20323732303536.roa
File:                     3139322e3134312e3136372e302f32342d3234203d3e20323732303536.roa (raw, json)
Hash identifier:          TpvPpo68spxbWZsJaPfMu+yFXiICfgCaq6JmJDo694w=
Subject key identifier:   02:E8:86:29:08:33:70:B9:49:C7:B2:A8:54:29:F5:4E:D2:16:14:16
Certificate issuer:       /CN=7D7EDBE2447BDAE060A74E085090BF8B4C818FF6
Certificate serial:       087A613BFE75C29B00262DB2DFDB3737048BC5E2
Authority key identifier: 7D:7E:DB:E2:44:7B:DA:E0:60:A7:4E:08:50:90:BF:8B:4C:81:8F:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D7EDBE2447BDAE060A74E085090BF8B4C818FF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2806D5A85DF1BC3D1CAC9E5C14169502AA1ECF1B37D3F7BCCF8EDD30346D89DF/0/3139322e3134312e3136372e302f32342d3234203d3e20323732303536.roa
Signing time:             Tue 05 Mar 2024 17:47:16 +0000
ROA not before:           Tue 05 Mar 2024 17:42:16 +0000
ROA not after:            Tue 04 Mar 2025 17:47:16 +0000
asID:                     272056
IP address blocks:        192.141.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2806D5A85DF1BC3D1CAC9E5C14169502AA1ECF1B37D3F7BCCF8EDD30346D89DF/0/7D7EDBE2447BDAE060A74E085090BF8B4C818FF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2806D5A85DF1BC3D1CAC9E5C14169502AA1ECF1B37D3F7BCCF8EDD30346D89DF/0/7D7EDBE2447BDAE060A74E085090BF8B4C818FF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D7EDBE2447BDAE060A74E085090BF8B4C818FF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7a:61:3b:fe:75:c2:9b:00:26:2d:b2:df:db:37:37:04:8b:c5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7EDBE2447BDAE060A74E085090BF8B4C818FF6
        Validity
            Not Before: Mar  5 17:42:16 2024 GMT
            Not After : Mar  4 17:47:16 2025 GMT
        Subject: CN=02E88629083370B949C7B2A85429F54ED2161416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:70:36:c7:75:9b:32:d6:e3:33:7c:14:88:
                    1d:66:5c:4c:6e:2a:b4:7e:b4:79:a4:09:4b:1b:7f:
                    47:fa:88:eb:67:c7:3b:94:d3:9a:50:a9:b8:12:0f:
                    d1:63:70:b1:31:f4:80:03:ff:40:df:f7:e9:e0:5b:
                    e4:d1:2b:54:1f:50:20:26:d6:41:e0:76:84:49:a2:
                    54:ec:8b:cb:34:65:a9:a2:e7:ec:7c:e2:50:74:c2:
                    c7:1a:80:a3:7f:15:35:69:e8:31:63:a6:80:b9:ce:
                    1e:12:9e:e0:75:8e:b4:38:8c:74:50:bd:67:44:7f:
                    75:53:f7:32:97:ca:a8:b5:81:5c:0c:dc:5a:99:e6:
                    fc:34:54:99:8a:a5:d9:d4:dd:fc:d5:3f:32:7f:95:
                    03:9f:57:77:a3:9f:87:54:d2:13:c8:34:90:8c:6b:
                    2a:d9:b6:49:99:6e:90:cb:1a:68:ad:20:56:8b:31:
                    a0:dd:a0:62:a6:5d:de:cf:81:18:cc:4b:67:6d:44:
                    25:60:52:cb:19:b1:cd:29:4a:76:7b:02:ce:56:48:
                    82:ff:38:50:52:4e:df:e9:2c:33:15:c5:f5:32:f6:
                    5c:a5:d4:65:e1:0c:a1:ec:44:02:1b:4f:2e:a0:f0:
                    4b:79:25:91:2b:77:dd:bd:84:04:e1:b5:53:3a:7c:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E8:86:29:08:33:70:B9:49:C7:B2:A8:54:29:F5:4E:D2:16:14:16
            X509v3 Authority Key Identifier:
                keyid:7D:7E:DB:E2:44:7B:DA:E0:60:A7:4E:08:50:90:BF:8B:4C:81:8F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2806D5A85DF1BC3D1CAC9E5C14169502AA1ECF1B37D3F7BCCF8EDD30346D89DF/0/7D7EDBE2447BDAE060A74E085090BF8B4C818FF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D7EDBE2447BDAE060A74E085090BF8B4C818FF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2806D5A85DF1BC3D1CAC9E5C14169502AA1ECF1B37D3F7BCCF8EDD30346D89DF/0/3139322e3134312e3136372e302f32342d3234203d3e20323732303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:50:f9:66:68:9b:37:a0:4c:e8:e2:fb:5a:d5:7d:7e:d5:40:
         6d:41:79:90:71:29:43:e3:2d:ae:46:58:68:fa:b8:1a:a3:d2:
         4b:9e:21:66:82:46:61:b6:ce:0d:fc:a5:2c:be:bf:97:1f:11:
         72:c0:74:88:02:3e:17:3b:34:fb:ab:dc:20:de:bd:23:ed:94:
         84:08:a5:a7:2e:73:cd:a9:13:96:a4:d2:1c:ef:32:fa:28:5e:
         29:66:89:87:7a:af:c1:a1:99:df:f8:a4:28:7d:62:a8:d8:8e:
         32:8e:e9:78:f4:3e:38:a9:ac:e1:c0:85:7f:8e:c6:33:aa:8b:
         69:af:ab:ba:c2:2b:3f:7a:fd:20:95:42:1c:30:b9:e7:ff:04:
         3f:56:4f:f3:20:e2:98:02:46:79:a4:03:29:0a:37:bf:7b:63:
         12:a3:20:19:ea:90:f2:46:35:65:75:a6:49:56:61:d0:50:57:
         8f:b7:86:41:ef:f6:ad:ed:ee:f0:bb:4a:e9:31:5f:d9:fd:a2:
         95:65:93:bf:b4:ba:99:af:fb:2b:4e:77:bc:1b:da:85:ce:1b:
         ab:13:d8:02:02:10:5a:40:af:5f:0e:1a:d2:dc:cb:70:ea:a8:
         39:94:c7:6a:87:01:2a:af:bc:e7:9f:87:bb:cb:00:91:c9:cd:
         30:93:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:48 2024 by rpki-client on console-fra.rpki-client.org