Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/3139322e3130302e3138362e302f32332d3234203d3e20323633323335.roa
File:                     3139322e3130302e3138362e302f32332d3234203d3e20323633323335.roa (raw, json)
Hash identifier:          U5a6fxxAY0UfSxAXJD8P8ClbzgbxELnp9wq4500ZEZI=
Subject key identifier:   30:18:23:24:BF:59:CD:0C:F9:CE:07:E6:3A:D5:6F:20:69:66:2A:91
Certificate issuer:       /CN=C9A23B0E44881F29E54766EBC8C9B7E671B419C9
Certificate serial:       65286DC4381783F65D5494DE3BAC8640B9DA1D15
Authority key identifier: C9:A2:3B:0E:44:88:1F:29:E5:47:66:EB:C8:C9:B7:E6:71:B4:19:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/3139322e3130302e3138362e302f32332d3234203d3e20323633323335.roa
Signing time:             Tue 05 Mar 2024 18:11:58 +0000
ROA not before:           Tue 05 Mar 2024 18:06:58 +0000
ROA not after:            Tue 04 Mar 2025 18:11:58 +0000
asID:                     263235
IP address blocks:        192.100.186.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:28:6d:c4:38:17:83:f6:5d:54:94:de:3b:ac:86:40:b9:da:1d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A23B0E44881F29E54766EBC8C9B7E671B419C9
        Validity
            Not Before: Mar  5 18:06:58 2024 GMT
            Not After : Mar  4 18:11:58 2025 GMT
        Subject: CN=30182324BF59CD0CF9CE07E63AD56F2069662A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:5a:fd:8b:b1:cc:e5:3b:c0:82:32:64:8d:
                    64:1d:60:0b:91:17:e4:17:10:e6:78:78:7d:0c:6d:
                    d4:e2:37:63:80:c9:18:06:24:e3:ff:e1:96:c6:14:
                    9c:b9:4d:85:a3:4f:2a:26:d1:0c:0d:71:4e:35:e5:
                    88:d6:60:5e:e2:69:42:7a:74:89:35:05:49:ee:00:
                    fb:bc:49:15:6a:e5:93:56:2e:59:ca:c4:45:4b:14:
                    e5:b1:9f:79:6b:3e:ac:eb:bf:8e:b0:9f:41:04:27:
                    58:c3:79:59:37:49:52:f7:16:6f:15:8b:86:c2:36:
                    f2:8e:94:0e:74:ab:06:dd:c4:61:b1:9b:03:dd:90:
                    f8:02:0e:37:a2:be:8a:95:f3:1e:6b:56:0f:ab:a7:
                    96:f6:a3:0f:f7:f8:33:20:eb:5a:ec:f1:a9:57:80:
                    6a:10:9e:31:34:44:ef:e4:15:dc:7a:ce:df:f7:98:
                    3e:6c:31:75:86:54:2d:2e:ce:bb:5f:48:37:f3:ad:
                    bc:07:4a:bf:e7:db:b4:82:5d:6c:c1:c5:21:51:88:
                    98:04:f8:59:5b:34:a3:0c:0f:e9:a1:11:a4:56:aa:
                    52:d6:b5:c9:f9:4f:d4:b7:83:be:a0:e0:7b:de:2b:
                    c4:4d:69:08:95:a5:81:2b:5a:2a:8c:52:02:07:6a:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:18:23:24:BF:59:CD:0C:F9:CE:07:E6:3A:D5:6F:20:69:66:2A:91
            X509v3 Authority Key Identifier:
                keyid:C9:A2:3B:0E:44:88:1F:29:E5:47:66:EB:C8:C9:B7:E6:71:B4:19:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A23B0E44881F29E54766EBC8C9B7E671B419C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/481AC8B769F99864CC4BD6B532F2C057ED5ECDBAA0EE15AD8C459B223EA57447/0/3139322e3130302e3138362e302f32332d3234203d3e20323633323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:18:c8:e1:49:f9:ad:eb:a1:4c:07:6f:8a:e2:67:4b:ff:d5:
         10:61:98:f7:60:07:e4:f1:e1:b5:6e:40:17:f6:3f:cc:2f:9d:
         27:b7:f7:97:8a:54:4f:9b:3b:33:28:5e:1a:ac:2e:09:5d:76:
         27:55:f6:ed:ef:ad:ad:81:ab:1c:4b:09:80:e8:3c:35:21:cc:
         74:88:3c:64:08:60:7e:31:da:3c:6a:99:5e:f7:6b:cb:dd:df:
         a1:f6:71:f3:21:77:6d:89:ba:bc:d6:b7:f2:27:bb:b5:98:8c:
         35:51:81:7e:e4:ac:4e:7e:b6:c3:5e:59:86:d8:19:ae:81:8f:
         f4:d4:20:2a:23:a4:ee:63:4b:ad:5b:3f:f9:38:5d:c3:13:b3:
         dc:3e:76:dc:b0:b7:22:39:07:a4:1c:34:d3:c8:2e:09:1c:8d:
         78:a0:1f:16:fb:33:36:d9:95:16:6a:06:f2:70:f6:bd:9e:93:
         7a:b3:c5:8d:65:ce:d8:24:56:1c:07:3c:73:59:96:c3:1f:2c:
         95:7f:f9:03:3a:d5:ea:2c:7a:19:ea:a0:bf:26:c3:78:75:af:
         7b:dd:7f:74:de:29:85:b0:85:64:34:d9:fb:0c:20:5e:3d:54:
         87:2a:4c:c3:24:42:c3:36:8d:c8:bd:a1:8a:30:f6:45:df:6b:
         88:09:99:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:06 2024 by rpki-client on console-fra.rpki-client.org