Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3132332e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e3132332e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          Of6UhZ9grQ2t99pGVglbW9FctKysOlDfaWZnHiHQv9Q=
Subject key identifier:   EC:AD:D2:AD:75:AF:C1:30:CD:72:9E:3A:D1:62:60:64:39:D6:0A:BE
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       753FF9A83395D62601464CDCE93E4F850CF3DFC4
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3132332e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:21 +0000
ROA not before:           Tue 05 Mar 2024 18:16:21 +0000
ROA not after:            Tue 04 Mar 2025 18:21:21 +0000
asID:                     20191
IP address blocks:        146.155.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3f:f9:a8:33:95:d6:26:01:46:4c:dc:e9:3e:4f:85:0c:f3:df:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:21 2024 GMT
            Not After : Mar  4 18:21:21 2025 GMT
        Subject: CN=ECADD2AD75AFC130CD729E3AD162606439D60ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:0b:30:89:d4:cd:80:86:b4:81:c0:bc:b9:
                    aa:ce:f8:d7:2d:f9:7e:b1:4d:3b:61:98:ec:f5:46:
                    3c:c8:2b:b8:aa:a0:f6:ad:68:de:f2:35:b1:29:c3:
                    80:89:a2:70:c3:90:68:62:c2:33:04:42:4f:fa:3f:
                    7d:a6:eb:3e:24:3d:bb:aa:3a:d3:5d:ba:3e:0a:7e:
                    7a:a9:88:7a:89:39:0e:cb:d1:ea:4a:8b:7b:d2:44:
                    27:5d:ca:40:b9:22:8a:c7:0b:2c:7f:5e:68:d6:1c:
                    75:d6:19:2b:13:ef:5e:93:f0:d9:29:f8:e6:17:b9:
                    04:89:71:00:72:5b:49:00:d9:0e:f4:de:b6:a6:4e:
                    dc:cc:a0:bb:e2:ef:6c:33:61:7a:2b:bf:ee:b1:ee:
                    32:cb:df:bc:26:df:e0:71:03:af:22:6f:a8:ca:95:
                    c2:31:ad:97:0e:dd:0f:56:c4:72:fb:1d:fc:9c:b6:
                    d3:41:1f:39:82:05:ce:ed:82:67:60:fa:66:6e:ef:
                    df:5f:84:db:ec:29:75:25:d6:64:52:aa:53:7a:e6:
                    f3:3f:7c:a9:1f:03:b2:96:f0:84:97:73:e2:02:51:
                    af:2b:21:84:ec:5b:9b:b4:ce:eb:0c:12:da:47:5c:
                    64:99:c5:e3:9c:8d:92:a8:24:4b:2b:c2:57:f0:d2:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AD:D2:AD:75:AF:C1:30:CD:72:9E:3A:D1:62:60:64:39:D6:0A:BE
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3132332e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:89:71:b1:0e:03:89:a1:5a:74:5e:e4:99:dc:ae:e4:72:2e:
         c8:22:2d:ab:6a:2c:a0:5a:1b:c4:5d:68:6d:c6:0e:35:25:75:
         af:8f:f5:22:37:67:76:88:a1:4c:98:1b:5e:22:97:9c:e2:13:
         f9:da:47:70:6f:bf:c1:fa:c3:fe:96:d7:d6:94:b7:c6:1d:31:
         1e:df:4c:b4:15:86:90:2c:b1:30:a4:0e:d3:1c:2a:af:72:30:
         24:35:70:ec:b3:75:ed:f6:e2:b7:59:9c:4d:17:d5:9d:d9:ba:
         ee:5f:e2:a9:89:83:26:6f:ad:5c:de:49:f5:9a:1f:0d:98:3a:
         8f:f8:89:a6:76:bc:30:06:53:d4:bd:79:10:be:48:66:65:9e:
         27:85:de:eb:9a:44:76:c2:9e:9c:fd:e0:71:53:43:94:91:64:
         93:c9:16:d4:6e:ee:7c:4a:c1:d1:a3:34:f4:a9:17:57:60:de:
         dc:65:57:74:5f:14:5e:bc:c6:76:04:91:70:7f:1d:dd:dd:2e:
         fc:d3:dd:c9:e5:f5:ab:86:3d:f5:4e:e7:74:e5:d4:6d:5e:40:
         97:05:17:a2:0c:ee:90:9a:95:81:50:e2:d0:ae:a3:95:c0:7b:
         bd:3e:31:80:84:c6:f3:02:75:90:2c:4b:3d:27:dd:2c:bf:cb:
         99:d2:ea:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:31 2024 by rpki-client on console-ams.rpki-client.org