Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/428F2F2F5AE905CF4930B3B016B09A95D7F7F91D5733B8BF821F3ECBC9B2C571/0/3139322e3138382e34362e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e34362e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          xZs3CuzvvA5OtH4Hxd8sp0mOSA9d4asbeRecuMwgUSc=
Subject key identifier:   F7:B0:18:F9:AD:CA:1E:20:A3:E9:3F:84:50:F8:7A:6D:99:C2:56:F6
Certificate issuer:       /CN=1788C398CC377559137DDB0CDB593589C2A693CA
Certificate serial:       6E719CE391DF33334A5E9565BE601FE0ECDC1E19
Authority key identifier: 17:88:C3:98:CC:37:75:59:13:7D:DB:0C:DB:59:35:89:C2:A6:93:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1788C398CC377559137DDB0CDB593589C2A693CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/428F2F2F5AE905CF4930B3B016B09A95D7F7F91D5733B8BF821F3ECBC9B2C571/0/3139322e3138382e34362e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:06:33 +0000
ROA not before:           Tue 05 Mar 2024 18:01:33 +0000
ROA not after:            Tue 04 Mar 2025 18:06:33 +0000
asID:                     61468
IP address blocks:        192.188.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/428F2F2F5AE905CF4930B3B016B09A95D7F7F91D5733B8BF821F3ECBC9B2C571/0/1788C398CC377559137DDB0CDB593589C2A693CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/428F2F2F5AE905CF4930B3B016B09A95D7F7F91D5733B8BF821F3ECBC9B2C571/0/1788C398CC377559137DDB0CDB593589C2A693CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1788C398CC377559137DDB0CDB593589C2A693CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:71:9c:e3:91:df:33:33:4a:5e:95:65:be:60:1f:e0:ec:dc:1e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1788C398CC377559137DDB0CDB593589C2A693CA
        Validity
            Not Before: Mar  5 18:01:33 2024 GMT
            Not After : Mar  4 18:06:33 2025 GMT
        Subject: CN=F7B018F9ADCA1E20A3E93F8450F87A6D99C256F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:01:0a:74:95:a4:9a:8e:e2:75:08:f3:09:
                    5b:73:6a:3d:90:aa:5c:d2:06:2d:b4:df:f0:aa:68:
                    31:5c:4b:04:83:e8:8c:3f:d5:7f:ae:11:3c:f0:22:
                    9d:43:03:b4:f3:4d:16:29:53:88:d8:22:c1:d7:c9:
                    34:8c:90:a8:b2:0d:68:ac:84:5a:5d:0e:2b:b0:85:
                    a0:f5:26:5a:5e:fc:21:f0:86:13:69:f8:7e:85:99:
                    5f:2d:f6:39:f5:36:ea:57:72:56:43:fd:d5:15:9d:
                    5e:40:06:36:2f:07:41:e9:52:8f:d1:c6:c5:0f:a0:
                    af:19:d4:4d:f0:3a:64:a7:d0:b1:a6:25:13:85:65:
                    a8:a9:c8:17:35:a3:ae:d4:4e:8d:0d:93:47:c5:e2:
                    47:71:d3:db:5f:08:b1:05:3e:32:c8:68:cf:cc:95:
                    16:31:e1:b3:e0:00:7b:14:c9:b1:52:d7:75:0f:8c:
                    82:43:78:2e:b0:21:67:78:3b:d4:fb:d3:c8:57:57:
                    92:a0:96:fd:7e:8a:27:8a:73:ac:d9:92:0e:79:ce:
                    da:cf:5b:ff:c8:4d:69:4b:a0:f8:6b:6e:e4:a4:7d:
                    21:f5:b7:e3:32:61:27:77:79:ce:11:f8:91:da:2a:
                    ef:79:b5:7a:d6:e6:36:fa:2d:5b:03:2c:f9:d3:27:
                    55:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B0:18:F9:AD:CA:1E:20:A3:E9:3F:84:50:F8:7A:6D:99:C2:56:F6
            X509v3 Authority Key Identifier:
                keyid:17:88:C3:98:CC:37:75:59:13:7D:DB:0C:DB:59:35:89:C2:A6:93:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/428F2F2F5AE905CF4930B3B016B09A95D7F7F91D5733B8BF821F3ECBC9B2C571/0/1788C398CC377559137DDB0CDB593589C2A693CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1788C398CC377559137DDB0CDB593589C2A693CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/428F2F2F5AE905CF4930B3B016B09A95D7F7F91D5733B8BF821F3ECBC9B2C571/0/3139322e3138382e34362e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:de:93:0d:2f:47:cc:96:b8:fe:4c:0f:a8:85:ff:ad:17:66:
         a8:d8:6f:b8:a7:bc:97:93:fc:0a:85:36:46:07:f3:ca:90:50:
         d5:68:ad:e1:b4:ca:6b:dd:bb:1c:a4:ec:33:a0:ba:7a:ea:e4:
         74:b7:3a:58:44:e3:64:9e:c2:85:a4:3c:49:2a:55:38:e9:05:
         c3:11:3e:79:61:fb:c7:85:80:4e:fe:9d:62:8f:9d:2f:6f:cc:
         0e:f3:02:72:a7:26:37:5d:19:33:14:c7:b3:03:cf:79:49:4d:
         df:81:d6:fd:95:21:2f:81:62:55:a4:48:b8:26:df:a3:c0:a2:
         d8:83:5d:3c:ed:f6:9a:b8:95:20:52:55:10:87:16:89:22:d0:
         58:b1:e7:0e:b8:31:61:54:43:61:63:27:d4:5f:25:ee:07:87:
         07:a4:b8:e3:a2:6f:49:f2:8c:4d:62:c1:da:45:3d:51:2b:c6:
         1a:50:ca:32:9d:ce:61:e4:1e:4c:2d:48:ae:11:d6:76:46:0e:
         86:7c:fd:ff:db:27:a2:9b:5e:b2:e7:f0:26:20:6a:94:0d:91:
         32:d1:30:b7:e4:66:47:9d:75:c5:8b:8e:ef:14:0f:19:8c:2a:
         05:ba:e3:0c:fb:f8:a2:57:71:82:a2:01:4b:5c:fc:64:1f:70:
         e2:32:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org