Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3132322e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e3132322e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          gbbeiZvoVwSHw2zrW0ufTchRn0PQeh9toAEA5EbOFCg=
Subject key identifier:   75:E4:D3:88:3E:98:E1:19:74:FE:1A:DE:40:F3:E1:B3:A3:75:64:CD
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       714E1CDD62F3EFF3F1477AC2DC0E92B37CD22BE0
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3132322e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:27 +0000
ROA not before:           Tue 05 Mar 2024 18:16:27 +0000
ROA not after:            Tue 04 Mar 2025 18:21:27 +0000
asID:                     20191
IP address blocks:        146.155.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4e:1c:dd:62:f3:ef:f3:f1:47:7a:c2:dc:0e:92:b3:7c:d2:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:27 2024 GMT
            Not After : Mar  4 18:21:27 2025 GMT
        Subject: CN=75E4D3883E98E11974FE1ADE40F3E1B3A37564CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:4e:85:db:cc:ea:1b:e8:73:ed:c9:6f:46:
                    68:3a:c1:2e:19:83:4d:bf:9d:75:90:a6:e2:d0:1b:
                    1b:98:40:3b:69:6c:e2:19:b6:2f:3c:41:d2:4f:9e:
                    2c:68:af:6e:fe:8d:cf:76:84:5e:ed:d7:d4:5e:5b:
                    ed:ba:55:c4:b3:5f:d1:96:bc:27:ac:43:10:78:68:
                    f0:8e:82:5c:e4:53:5b:55:51:92:7e:4e:bf:9f:d3:
                    43:50:a1:c0:25:43:59:81:77:9f:94:bf:7e:dc:26:
                    6f:39:00:62:ea:9e:bd:1d:86:73:f6:98:94:12:d6:
                    f5:3a:fc:7b:24:08:72:97:68:03:6d:be:f9:6b:16:
                    2c:45:3f:73:f8:63:ae:38:1b:4c:9a:01:68:6f:78:
                    4f:6f:49:d9:75:08:1f:43:47:98:b5:41:30:1d:a7:
                    4e:2d:2e:e3:dc:c9:08:6c:58:9c:3c:27:c7:ec:10:
                    99:d6:a8:7c:94:94:03:ae:06:86:96:72:27:d3:d0:
                    19:a4:5b:d7:b7:c5:c1:94:cb:4b:1f:a4:72:57:fc:
                    c8:c7:d7:15:92:5c:4d:c5:c4:ba:af:d5:3f:52:a7:
                    ed:5a:b9:b5:76:76:71:d2:79:51:e1:4a:1b:f5:73:
                    1d:55:73:4b:57:0e:95:89:42:a6:c4:1b:ff:76:2b:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E4:D3:88:3E:98:E1:19:74:FE:1A:DE:40:F3:E1:B3:A3:75:64:CD
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3132322e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a3:e7:30:9b:37:d6:45:37:e6:6c:12:61:31:8a:67:f4:f3:
         90:1e:46:7a:d7:cd:7f:ae:55:d0:76:07:49:c8:36:ff:76:2e:
         b8:5f:1b:e3:77:56:db:29:dc:98:62:0b:35:2a:51:9e:ef:41:
         e1:7b:41:3b:52:7c:9d:60:05:4d:9a:68:8b:4b:de:44:9f:7d:
         a3:a4:f4:e8:30:2e:bb:a7:c8:7c:89:1d:f2:03:99:f6:74:b2:
         01:1c:e5:cd:46:9e:c3:a7:a1:42:b0:b4:bb:de:e8:a3:02:22:
         bc:4f:c6:8a:c8:82:ae:8d:88:33:7f:83:ce:21:9b:d2:50:6c:
         67:1d:b0:4b:c9:e3:8b:a6:36:c6:f5:64:51:b8:1f:20:10:e9:
         d6:db:cf:fb:f9:d8:9d:b6:24:2f:e2:2b:4b:ec:0e:7a:ba:f6:
         7a:47:98:4b:36:d6:fe:f2:2c:62:b1:e0:35:b4:50:fb:36:19:
         3b:f9:43:b4:45:06:d6:38:03:6a:79:00:05:08:7d:3d:06:b3:
         65:cc:48:62:5d:2a:4e:27:74:8d:74:41:9d:d5:88:99:eb:23:
         1f:a3:20:aa:61:c7:84:8c:4f:89:e2:09:eb:c0:c2:c0:bf:1e:
         a6:db:c1:a1:66:67:e9:90:9f:52:e4:53:a4:41:9c:07:84:a8:
         7b:99:ad:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:25:20 2024 by rpki-client on console-fra.rpki-client.org