Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3130392e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e3130392e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          /e+ZaNb72qL7VtbNRATvkqmDF3Qgi95yK+4kUjj6468=
Subject key identifier:   77:2F:7D:E7:AD:28:4A:8C:E3:1B:71:17:90:17:7A:0E:3C:F9:8F:EC
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       464392BDCAF493850F5E3EC78E8252286AEDC112
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3130392e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:27 +0000
ROA not before:           Tue 05 Mar 2024 18:16:27 +0000
ROA not after:            Tue 04 Mar 2025 18:21:27 +0000
asID:                     20191
IP address blocks:        146.155.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:43:92:bd:ca:f4:93:85:0f:5e:3e:c7:8e:82:52:28:6a:ed:c1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:27 2024 GMT
            Not After : Mar  4 18:21:27 2025 GMT
        Subject: CN=772F7DE7AD284A8CE31B711790177A0E3CF98FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7e:c9:54:77:c5:8b:88:40:8d:fc:cf:8b:89:
                    be:b3:8f:a4:46:c2:ee:36:9e:55:32:e6:fb:3e:e8:
                    d4:ae:9c:30:90:c8:62:47:1f:21:f2:db:98:83:b8:
                    47:99:ec:46:8c:a8:b9:cf:54:06:96:8f:05:9e:0e:
                    99:a9:5f:22:bf:2a:a3:fd:a8:9b:5e:ba:6c:bd:b6:
                    49:1f:e6:b4:d1:a3:a9:4c:bc:4a:24:6d:f1:77:2a:
                    22:d8:d8:3e:52:f2:9c:6e:c1:73:58:11:44:33:39:
                    b6:56:59:93:13:96:54:72:79:5e:51:23:9e:db:72:
                    ec:ff:68:b0:da:46:15:fd:bb:af:a1:04:51:76:2b:
                    2c:2d:e1:3f:7a:40:46:d7:0c:d0:b3:12:33:35:5a:
                    56:36:7a:8d:dd:a3:5e:29:af:41:12:56:ed:e4:22:
                    bd:2f:03:c5:d7:b7:be:97:b5:6c:5f:33:42:62:40:
                    d7:23:6c:b0:01:ba:d1:d6:0e:9d:e4:00:79:b6:33:
                    94:e2:c0:61:84:19:19:c0:d1:8e:5a:e0:fa:9d:24:
                    28:1d:a9:95:08:84:d9:35:56:e2:2e:ac:0c:f1:9a:
                    01:33:84:d5:ac:0e:68:c7:3c:97:6a:f0:74:58:90:
                    4b:e7:af:16:0e:21:ea:80:be:e9:93:cd:c4:85:28:
                    e0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2F:7D:E7:AD:28:4A:8C:E3:1B:71:17:90:17:7A:0E:3C:F9:8F:EC
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3130392e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:24:e0:7d:ca:3c:60:45:26:ef:c7:b2:05:15:20:7d:c8:43:
         d1:a1:e5:e2:2c:ad:1f:66:c0:55:68:8b:86:c7:fe:1a:3f:c7:
         6d:92:ff:3b:7f:ab:a7:f7:c3:25:77:f8:c9:2e:9b:aa:38:f9:
         0b:34:c3:68:55:23:1a:83:41:5a:80:30:38:9f:83:f5:59:57:
         e1:c0:a0:ab:b5:d6:3d:a2:0a:5c:8e:bd:e1:9f:c5:78:75:78:
         ef:23:00:84:1f:22:d4:0d:85:a4:b3:02:00:04:68:08:c2:52:
         8d:0b:90:57:e7:54:bb:4e:b1:09:1b:b1:11:5e:a4:14:05:d8:
         cd:49:1c:90:81:ea:eb:7b:8b:98:8a:9d:4e:2c:fe:7b:1c:c5:
         cf:82:f1:6e:f3:4a:08:34:38:33:a8:3c:db:72:b4:db:a9:51:
         13:79:15:3c:99:44:c0:3f:63:22:4d:f8:6c:30:65:d1:8f:b3:
         d2:eb:b7:28:2d:f5:f8:7c:75:44:72:54:f0:7b:59:f5:f4:f1:
         75:12:7a:5d:41:11:8b:27:94:3a:bb:f6:b6:1d:35:1d:b0:0d:
         a9:63:e4:bc:b3:8e:72:4f:ca:62:33:50:f4:09:4a:45:e3:62:
         fc:68:a0:b0:b9:91:bb:65:6a:2c:f8:f0:b1:ab:d3:dc:15:1f:
         4f:45:29:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:31 2024 by rpki-client on console-ams.rpki-client.org