Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/3139322e3134312e3132382e302f32322d3232203d3e20323634373530.roa
File:                     3139322e3134312e3132382e302f32322d3232203d3e20323634373530.roa (raw, json)
Hash identifier:          QxKkHAY7hUU+3J/hHF4iTfrXpIfjcczWWmIC5WRsFY8=
Subject key identifier:   CF:3B:02:50:F4:BF:AE:2D:5C:8D:96:CF:47:14:21:1C:4B:2D:FA:0D
Certificate issuer:       /CN=374193CBA9F2789EEAD8F4332D8C61B9E274DB1C
Certificate serial:       2747A0E9CD45943EFC20E56F63DF02931213F175
Authority key identifier: 37:41:93:CB:A9:F2:78:9E:EA:D8:F4:33:2D:8C:61:B9:E2:74:DB:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/3139322e3134312e3132382e302f32322d3232203d3e20323634373530.roa
Signing time:             Tue 05 Mar 2024 17:59:28 +0000
ROA not before:           Tue 05 Mar 2024 17:54:28 +0000
ROA not after:            Tue 04 Mar 2025 17:59:28 +0000
asID:                     264750
IP address blocks:        192.141.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:47:a0:e9:cd:45:94:3e:fc:20:e5:6f:63:df:02:93:12:13:f1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374193CBA9F2789EEAD8F4332D8C61B9E274DB1C
        Validity
            Not Before: Mar  5 17:54:28 2024 GMT
            Not After : Mar  4 17:59:28 2025 GMT
        Subject: CN=CF3B0250F4BFAE2D5C8D96CF4714211C4B2DFA0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:28:dc:26:3a:de:00:5b:6b:5e:0f:81:9d:
                    71:a7:fe:14:da:48:d9:8c:00:24:5b:14:95:d9:fc:
                    39:9d:a1:03:9d:60:13:0f:e8:5e:c0:e8:c8:79:7e:
                    9e:e2:e5:c6:fb:1d:c8:9c:38:0f:c9:68:0c:58:85:
                    77:f3:f5:06:44:fb:ad:7c:dd:16:77:a5:2e:54:c5:
                    26:46:b6:05:60:32:58:91:b8:29:94:27:72:37:93:
                    28:b5:98:ed:0a:57:74:af:22:49:50:d8:dd:24:db:
                    b7:e0:ac:8f:ff:54:df:a4:24:be:a3:ab:74:66:72:
                    94:f1:93:92:01:07:61:87:12:55:46:f4:f0:91:4b:
                    96:24:86:6b:94:6d:38:5a:a1:bd:64:65:01:eb:2b:
                    8b:f8:de:b8:be:2b:ff:30:bd:c6:03:02:ec:65:37:
                    a4:ae:15:30:e0:d8:e9:08:cf:8d:4d:4a:c9:99:e0:
                    8e:3e:ea:ca:e0:7d:a1:8b:d0:9a:39:7b:bb:b7:73:
                    40:f3:64:96:12:f7:25:25:96:4a:35:bf:35:bf:ec:
                    5e:7c:5c:f0:ac:58:df:65:cc:c5:4f:cc:3f:8c:d8:
                    cb:15:a6:cf:1f:f5:57:87:65:90:7e:57:9b:37:93:
                    fb:4b:69:63:af:88:51:72:f2:74:17:b2:b3:ca:1f:
                    39:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3B:02:50:F4:BF:AE:2D:5C:8D:96:CF:47:14:21:1C:4B:2D:FA:0D
            X509v3 Authority Key Identifier:
                keyid:37:41:93:CB:A9:F2:78:9E:EA:D8:F4:33:2D:8C:61:B9:E2:74:DB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374193CBA9F2789EEAD8F4332D8C61B9E274DB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/624A8B9BFE663C452B74DB18265BB268AB482F1EAD9E0283496A00925F59583E/0/3139322e3134312e3132382e302f32322d3232203d3e20323634373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:2f:f8:5d:66:cb:e9:8f:c2:72:57:53:91:76:51:e3:63:ba:
         7a:89:bc:0e:bc:d8:c1:0b:4d:58:d7:5e:51:5c:39:36:01:3a:
         b0:db:bc:8a:6f:0a:3e:8b:4e:55:cf:32:84:24:19:5e:1f:59:
         71:61:7d:d9:c2:e4:30:0c:e1:7f:2d:93:36:a0:53:ef:62:a7:
         cf:56:2f:8e:75:53:11:f2:9b:0d:36:38:ca:4c:90:0c:31:31:
         14:fb:43:ad:05:b3:03:5c:23:dc:dd:46:14:ae:7d:92:cc:91:
         8a:38:b3:ff:df:86:19:b6:e9:7f:8d:0c:b4:5b:18:02:b9:e1:
         68:1a:50:61:d7:19:02:d1:14:8b:c6:ac:11:c5:1d:3f:dd:d7:
         15:70:7a:2f:07:c9:3d:f0:68:bb:00:f3:2e:16:1c:ff:ba:dd:
         c1:d5:db:10:a8:f8:8e:02:3e:44:49:24:45:8f:f3:8b:b5:40:
         ea:35:20:26:2d:5b:e5:cd:31:d0:12:64:61:a5:1e:3d:9b:01:
         72:96:e6:db:0e:f2:54:53:07:1f:b6:3c:52:2a:e4:cf:94:b1:
         1d:80:1b:7c:fb:b7:3d:7a:4a:67:62:78:cf:e1:b3:85:ad:28:
         ba:5e:59:04:61:06:78:ba:62:00:a8:f0:05:1b:5b:2b:d1:75:
         f9:35:1b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:06:11 2024 by rpki-client on console-ams.rpki-client.org