Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139322e3134342e3131322e302f32322d3234203d3e20323632313836.roa
File:                     3139322e3134342e3131322e302f32322d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          EDpRW+O8Ibv6k12Kl2cnOt+OCvxRhUHjG2oZh1tpcAY=
Subject key identifier:   E2:35:FB:3B:E8:29:82:87:8B:48:71:16:11:90:E3:9D:FF:7A:8B:FA
Certificate issuer:       /CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
Certificate serial:       27A08ABA9195E6BFEB264083286A693000FE9EFC
Authority key identifier: 81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139322e3134342e3131322e302f32322d3234203d3e20323632313836.roa
Signing time:             Tue 05 Mar 2024 18:11:07 +0000
ROA not before:           Tue 05 Mar 2024 18:06:07 +0000
ROA not after:            Tue 04 Mar 2025 18:11:07 +0000
asID:                     262186
IP address blocks:        192.144.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a0:8a:ba:91:95:e6:bf:eb:26:40:83:28:6a:69:30:00:fe:9e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
        Validity
            Not Before: Mar  5 18:06:07 2024 GMT
            Not After : Mar  4 18:11:07 2025 GMT
        Subject: CN=E235FB3BE82982878B4871161190E39DFF7A8BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:92:37:20:f0:ba:84:e4:1e:43:5e:75:99:
                    66:f5:4e:fe:ed:64:d4:80:76:3d:0f:fc:e2:4d:b1:
                    60:b8:82:1c:62:74:62:e6:90:d2:1d:3b:23:4d:13:
                    e9:64:89:7d:c2:31:f9:8f:d1:a8:46:06:b9:3e:a1:
                    fc:b5:b0:73:be:3c:32:de:28:ef:6b:e8:12:4b:53:
                    74:43:0c:26:ff:5d:07:e8:3c:6e:23:ea:f1:71:e2:
                    de:5f:38:b5:49:a6:52:13:36:2c:88:d7:8b:77:aa:
                    f8:11:c2:13:73:1d:dd:60:85:f9:87:b5:09:52:8b:
                    a4:45:d5:60:89:ae:54:a5:8d:74:5a:c1:da:30:e8:
                    d9:42:47:67:4f:9f:76:73:ea:1e:b4:41:e0:b9:4e:
                    73:9d:85:68:78:8b:ba:8b:d3:bc:ec:f0:2c:e4:78:
                    b8:fc:40:ec:e0:cf:1f:88:26:35:f8:b4:bf:40:ce:
                    6b:00:30:e2:ee:8e:de:d8:1b:d4:92:05:f2:b4:20:
                    c7:e3:65:79:02:4e:59:c0:79:b7:09:45:e1:61:7c:
                    77:34:3f:94:d0:f8:13:f8:2e:d7:59:f8:af:e7:21:
                    06:7f:83:56:c5:64:d6:f4:e0:e7:ba:32:fb:e0:d2:
                    1a:64:26:2b:40:88:f1:84:91:62:82:73:7a:e2:ba:
                    8c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:35:FB:3B:E8:29:82:87:8B:48:71:16:11:90:E3:9D:FF:7A:8B:FA
            X509v3 Authority Key Identifier:
                keyid:81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139322e3134342e3131322e302f32322d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:d9:02:15:1a:a8:d3:bc:c6:23:14:91:92:75:81:49:26:8a:
         2e:16:33:4c:25:65:cf:ad:3c:11:6c:0b:b9:7e:91:e0:cd:bf:
         a4:d2:d8:88:c3:79:93:e5:20:b7:37:a5:2a:7a:90:ac:21:72:
         68:28:06:bd:9f:30:e6:39:78:01:c5:b6:12:a2:7e:55:d8:6b:
         7f:a5:ee:5b:3f:e2:37:26:4a:38:08:89:1f:1a:64:63:0a:07:
         f2:68:11:cb:c4:4d:d1:3b:a9:6d:96:46:37:b9:b9:8d:91:02:
         87:45:2e:34:65:34:ba:6e:ea:f7:06:9d:c1:9c:b0:df:a5:41:
         b8:fd:d9:40:5a:b1:06:6d:09:68:06:ad:c8:a4:f1:d3:fb:2e:
         0f:bc:11:28:0e:b3:85:47:cc:dc:e3:5e:f6:bb:e1:30:c8:20:
         49:55:97:b7:af:0a:b7:dc:11:4f:37:5a:43:b9:d3:23:d8:13:
         cc:40:24:f4:87:bf:12:1e:46:ff:e6:4b:93:62:f5:d7:4e:f7:
         9b:88:0a:d9:3d:e9:1f:27:e4:6e:b9:f5:29:43:d7:90:84:27:
         6e:ca:fd:59:05:ef:a6:0b:f3:b7:d7:a6:4c:94:7f:e1:ba:e6:
         85:f7:c5:b4:c2:fc:3d:e8:6a:4e:9b:b9:e2:8e:b0:2d:04:29:
         2b:9e:f1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org