Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3130302e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e3130302e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          hINZ1DrCinXyUrG31K7ELCm6tYQ+IoizR8pPnXadIAk=
Subject key identifier:   46:51:DC:4A:5F:FF:CE:27:E6:61:37:87:5E:7C:02:0F:88:DA:86:49
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       458378D37F7133A6E1AD74C15AAEC0DA8CA48DCD
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3130302e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:21 +0000
ROA not before:           Tue 05 Mar 2024 18:16:21 +0000
ROA not after:            Tue 04 Mar 2025 18:21:21 +0000
asID:                     20191
IP address blocks:        146.155.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:83:78:d3:7f:71:33:a6:e1:ad:74:c1:5a:ae:c0:da:8c:a4:8d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:21 2024 GMT
            Not After : Mar  4 18:21:21 2025 GMT
        Subject: CN=4651DC4A5FFFCE27E66137875E7C020F88DA8649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:df:c0:f6:9f:12:64:2a:8d:16:4b:21:48:
                    b5:17:00:26:da:9a:7b:1c:91:7a:c1:53:1b:0c:72:
                    26:29:3a:54:21:92:11:54:e6:46:e5:6c:97:da:2e:
                    3d:a5:50:c6:70:70:0d:3b:b2:d6:09:00:6a:97:d5:
                    77:0a:79:50:96:f3:00:a0:1c:55:b1:b1:4c:84:7d:
                    e7:ed:54:d5:3e:32:2e:cc:9c:9e:6e:05:bb:af:df:
                    eb:0b:f1:7d:70:64:0b:54:1c:10:77:09:c9:0b:28:
                    c6:b6:b8:00:e7:1d:18:83:6e:15:05:3e:02:3c:90:
                    63:cd:42:c0:97:23:ba:f3:d0:a7:33:00:7d:c6:09:
                    a9:7b:ca:b8:1d:56:35:08:24:61:80:82:2f:1c:03:
                    c0:c3:fd:2a:a7:45:f9:12:d5:07:78:2b:9d:28:bc:
                    5b:33:ce:04:c0:9f:86:fb:8a:25:2e:73:5d:2d:59:
                    be:0a:95:3c:b0:e7:ad:2e:f7:90:75:07:7f:52:ca:
                    fc:fb:48:be:b7:fd:b0:49:a1:f8:b0:d0:c8:25:1e:
                    32:8a:3c:46:11:4f:82:21:99:c3:a2:0c:14:75:c2:
                    e6:de:71:44:ce:b7:2b:12:89:e1:26:a4:0e:74:ae:
                    41:01:33:f5:cb:7e:32:ad:96:5b:59:74:93:3d:95:
                    33:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:51:DC:4A:5F:FF:CE:27:E6:61:37:87:5E:7C:02:0F:88:DA:86:49
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3130302e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:82:63:08:08:cc:54:5d:48:59:e0:a2:a5:68:f2:22:63:87:
         4f:f8:c3:4e:23:a7:aa:ea:5a:eb:0c:be:7b:00:c4:e4:ed:73:
         d1:23:b8:fe:19:f9:b5:dc:30:38:a4:1f:c5:f5:46:3e:3f:43:
         5e:e8:09:de:0e:1f:f4:d7:10:7c:92:2c:9c:19:0e:d2:49:b5:
         42:d6:ac:7a:39:c2:06:76:45:71:7d:ff:11:c4:61:09:2f:5d:
         b9:9e:29:75:51:25:d8:ae:a0:bb:55:df:5e:fe:b0:c9:b7:53:
         cb:1c:b4:90:10:46:6c:91:71:78:62:53:50:bf:45:f3:e4:a4:
         6d:dd:07:55:53:00:3e:f8:8f:a3:ea:00:c4:7c:18:e4:99:4f:
         3d:f8:76:c8:18:e5:61:84:d5:9d:2c:92:33:8b:24:33:8a:3f:
         2b:23:84:60:86:04:f9:a3:57:da:ea:e2:b6:a6:9e:bf:ba:b6:
         4e:18:20:d6:18:35:0b:68:a6:79:28:19:ea:80:35:7b:8d:7d:
         a6:88:14:e2:e5:20:36:09:a5:1c:b4:6b:5c:57:1c:16:cf:91:
         b2:6c:2a:b9:7a:33:d1:28:9c:25:f4:70:72:b4:78:35:90:ec:
         be:fb:02:89:bb:2d:e4:e4:9e:c5:ea:13:66:50:43:6b:75:e3:
         75:0c:aa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:31 2024 by rpki-client on console-ams.rpki-client.org