Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49E55BC912B6C53AE0AF14F7118810F4D7A089E91BD0C291BE48C7D4F31A28EA/0/3137302e3135302e3134302e302f32332d3234203d3e203134323539.roa
File:                     3137302e3135302e3134302e302f32332d3234203d3e203134323539.roa (raw, json)
Hash identifier:          tEqKKTi23ox2VVxQvhoIP8b/L8u90zNnzmAjvQehqII=
Subject key identifier:   B2:11:46:28:BD:C3:77:F7:F2:77:43:A2:22:6F:A1:7E:83:7D:51:5E
Certificate issuer:       /CN=835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0
Certificate serial:       0419AEF6B4D829DF9FDDA1E97B69CC600F43F3BF
Authority key identifier: 83:5C:8A:E5:6B:D6:00:0A:EB:AD:C7:EB:0A:F3:E1:F1:38:C7:26:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49E55BC912B6C53AE0AF14F7118810F4D7A089E91BD0C291BE48C7D4F31A28EA/0/3137302e3135302e3134302e302f32332d3234203d3e203134323539.roa
Signing time:             Tue 05 Mar 2024 17:49:57 +0000
ROA not before:           Tue 05 Mar 2024 17:44:57 +0000
ROA not after:            Tue 04 Mar 2025 17:49:57 +0000
asID:                     14259
IP address blocks:        170.150.140.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/49E55BC912B6C53AE0AF14F7118810F4D7A089E91BD0C291BE48C7D4F31A28EA/0/835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/49E55BC912B6C53AE0AF14F7118810F4D7A089E91BD0C291BE48C7D4F31A28EA/0/835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 17:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:19:ae:f6:b4:d8:29:df:9f:dd:a1:e9:7b:69:cc:60:0f:43:f3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0
        Validity
            Not Before: Mar  5 17:44:57 2024 GMT
            Not After : Mar  4 17:49:57 2025 GMT
        Subject: CN=B2114628BDC377F7F27743A2226FA17E837D515E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ce:4a:c2:c8:05:ca:aa:86:d4:5c:9a:a9:4b:
                    2e:5b:65:57:e4:3b:05:89:94:52:7b:f6:84:5d:c5:
                    33:27:2d:11:94:bb:e9:d3:c3:ad:f9:a1:ae:0f:7e:
                    09:f0:07:00:50:be:b5:cf:52:e7:71:4e:88:e8:1d:
                    dd:08:48:ed:9b:a3:31:54:66:f1:91:5b:54:ef:2c:
                    92:68:d2:f2:b7:4e:f1:d0:84:b4:a3:5f:e5:f0:bc:
                    5f:8b:80:69:66:cc:85:f3:8e:59:ca:d4:ea:4e:6a:
                    f4:84:51:c6:bf:7e:51:61:3b:59:2e:ec:40:a8:22:
                    4f:8a:3a:d2:77:57:a1:a1:b9:a3:1b:3f:d5:62:04:
                    79:7f:28:26:59:5a:85:70:15:94:c6:c4:a3:e0:e4:
                    66:ba:8c:22:94:bc:a8:d9:2d:93:0d:4a:23:e1:1e:
                    f0:97:53:c3:da:4b:e4:7a:bc:91:76:a6:52:0e:f6:
                    fe:81:82:95:4a:00:c1:36:3a:0b:34:0b:45:35:59:
                    92:de:b8:1e:78:d2:fe:e2:80:41:4a:8f:c0:64:1f:
                    ba:26:40:67:c9:40:13:bf:54:da:9f:b0:5a:72:62:
                    ba:ea:4a:c3:24:ec:92:d2:b5:7e:89:23:17:5f:d0:
                    bb:ed:de:8c:c5:1d:57:b8:11:c3:43:9f:5b:aa:83:
                    6d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:11:46:28:BD:C3:77:F7:F2:77:43:A2:22:6F:A1:7E:83:7D:51:5E
            X509v3 Authority Key Identifier:
                keyid:83:5C:8A:E5:6B:D6:00:0A:EB:AD:C7:EB:0A:F3:E1:F1:38:C7:26:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49E55BC912B6C53AE0AF14F7118810F4D7A089E91BD0C291BE48C7D4F31A28EA/0/835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/835C8AE56BD6000AEBADC7EB0AF3E1F138C726A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49E55BC912B6C53AE0AF14F7118810F4D7A089E91BD0C291BE48C7D4F31A28EA/0/3137302e3135302e3134302e302f32332d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:ef:13:ab:51:b3:65:85:df:ba:8f:a2:d6:73:20:c7:fc:c2:
         d1:82:9c:d1:18:e1:5c:94:2c:fc:50:20:9a:fb:26:da:cc:9d:
         3e:83:b7:b9:26:47:05:dd:8c:38:03:32:a5:16:86:52:70:3a:
         62:c5:51:55:6c:d0:5d:18:10:f9:58:8a:1b:c0:e0:6f:62:74:
         91:b2:25:75:9f:8d:76:93:05:35:c8:cc:64:d4:05:c8:9d:7b:
         01:4d:e9:55:55:9d:42:c4:e7:b1:25:e7:eb:c3:dc:e4:d2:5c:
         f2:09:ac:02:d3:32:4a:0f:a7:97:65:a8:c6:84:e3:94:36:aa:
         43:26:e8:45:43:1b:72:d4:eb:95:cc:a8:95:f7:c8:87:75:44:
         97:5e:bb:d0:35:6a:3d:14:da:9f:1b:2b:16:7a:45:45:af:05:
         fe:b9:5b:5e:38:1b:63:a9:4a:fa:cb:9b:02:88:f8:2e:bc:0d:
         71:b6:88:7d:86:5b:84:d7:6a:52:99:d4:7c:ed:af:65:c5:b6:
         78:27:21:e3:01:f9:35:90:e4:50:ae:56:19:5a:d1:58:91:73:
         14:0e:04:3e:37:fd:5e:e5:d8:e0:ae:ea:b7:26:84:28:5b:fc:
         2a:ce:ce:f4:b1:f2:7c:24:1b:1a:ad:2d:c5:5f:bc:79:19:f4:
         2b:90:fd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:35:26 2024 by rpki-client on console-ams.rpki-client.org