Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33362e302f32322d3234203d3e20323635373837.roa
File:                     3139322e3134312e33362e302f32322d3234203d3e20323635373837.roa (raw, json)
Hash identifier:          tF4o5yGaFLugjDn62fjIUwpKPAXmVd8uzdyzsjyveRg=
Subject key identifier:   DE:08:2D:6C:C0:41:99:0B:F1:BE:C3:11:B5:9E:51:84:9D:08:A6:2E
Certificate issuer:       /CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
Certificate serial:       1C47B44D8A9A6D3854A1C066634DA29758A8A71A
Authority key identifier: 7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33362e302f32322d3234203d3e20323635373837.roa
Signing time:             Mon 06 May 2024 15:55:00 +0000
ROA not before:           Mon 06 May 2024 15:50:00 +0000
ROA not after:            Mon 05 May 2025 15:55:00 +0000
asID:                     265787
IP address blocks:        192.141.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:47:b4:4d:8a:9a:6d:38:54:a1:c0:66:63:4d:a2:97:58:a8:a7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
        Validity
            Not Before: May  6 15:50:00 2024 GMT
            Not After : May  5 15:55:00 2025 GMT
        Subject: CN=DE082D6CC041990BF1BEC311B59E51849D08A62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:b0:5c:7d:c4:0b:29:09:f2:bd:04:94:12:
                    94:98:0d:1e:e4:b4:4e:98:d5:06:31:41:2b:35:f8:
                    79:f2:07:b6:ae:5c:77:1a:4c:95:d3:4a:4f:50:69:
                    8c:df:6b:46:09:8a:80:9a:c9:0a:77:c6:c5:a7:49:
                    5f:8d:59:af:69:ab:00:80:68:fe:75:c4:e3:93:ae:
                    cc:41:98:5e:79:f3:d3:a2:35:48:b7:69:95:3b:34:
                    6d:ec:7b:be:95:37:ea:05:5a:b9:ef:2a:f1:36:a7:
                    cf:04:3d:19:ac:ae:69:1e:ed:08:d1:bf:98:31:64:
                    c8:d7:dd:5c:c7:18:73:dc:cd:38:a9:ad:bd:e6:96:
                    02:77:81:42:59:7a:2f:1b:f8:18:da:ed:33:0e:42:
                    fe:b8:cd:ac:f1:c1:15:35:e7:87:75:d2:24:4d:e9:
                    bb:35:83:77:af:e6:96:2e:ec:0f:ff:1b:18:b3:19:
                    b5:04:42:ee:79:1a:93:0d:1f:9c:a3:d6:ce:2c:57:
                    d9:2f:98:a7:4a:d2:d0:38:84:17:5e:75:a6:5c:38:
                    6a:ea:5c:c5:86:71:24:cf:32:87:83:c0:de:57:09:
                    d1:f5:1f:10:09:ca:06:93:a8:f7:08:b7:02:15:47:
                    4e:ef:46:eb:b1:3c:32:20:cc:57:97:52:61:ce:c7:
                    83:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:08:2D:6C:C0:41:99:0B:F1:BE:C3:11:B5:9E:51:84:9D:08:A6:2E
            X509v3 Authority Key Identifier:
                keyid:7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33362e302f32322d3234203d3e20323635373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:ce:c7:8b:0c:5a:ad:c0:3a:9a:9f:1e:f2:b1:52:bd:53:73:
         7a:0e:8e:72:c0:39:7f:bf:5a:8b:7e:31:38:0e:b5:84:6d:03:
         15:a3:ec:94:bf:df:cf:3f:fe:be:4d:4d:f9:e6:36:64:96:85:
         6f:8a:f3:bf:fb:5b:18:0a:61:5e:d7:52:92:9e:72:2c:5e:3a:
         e6:90:18:01:fb:41:c1:d7:84:69:a5:6a:88:0f:76:8f:c2:42:
         0d:b2:5a:ad:a5:c4:87:17:a1:fa:8d:bb:6d:43:1f:44:d7:22:
         58:a4:f6:aa:79:c6:cd:bd:c2:cf:43:c6:c9:ef:52:c0:ca:67:
         9e:70:78:ef:9d:da:3a:44:dc:1e:6d:7b:9f:22:54:8a:3c:04:
         4f:cf:98:60:1c:d9:d9:ff:fa:ab:cd:8e:e8:ed:aa:2c:5b:59:
         3f:27:5f:42:12:9e:72:4a:f0:dd:64:c7:c9:48:85:a0:50:7b:
         03:90:89:4d:ea:09:75:00:95:ac:51:d6:23:24:10:f4:b2:cc:
         4f:9e:e0:82:5f:f7:f2:44:fe:b2:e2:94:b0:8d:61:db:eb:07:
         55:26:f5:71:f9:f1:47:0a:6a:b7:cb:03:0f:25:9f:cd:9a:f2:
         fd:08:88:44:98:4b:1b:f5:6c:3a:db:6d:12:1f:c9:4b:46:bb:
         4c:7b:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:06 2024 by rpki-client on console-ams.rpki-client.org