Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3136302e302f32332d3233203d3e203230313931.roa
File:                     3134362e3135352e3136302e302f32332d3233203d3e203230313931.roa (raw, json)
Hash identifier:          iibIa4sr3GPeODCXzoDImpycZue8eDgjtAiiRtzvUZU=
Subject key identifier:   90:23:7F:B6:0B:2C:2F:82:FC:9A:3E:C8:B2:D8:73:6F:71:7C:0F:B5
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       3FC748BC71E3D617C8BAB74978A19EBBD14E54B9
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3136302e302f32332d3233203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:24 +0000
ROA not before:           Tue 05 Mar 2024 18:16:24 +0000
ROA not after:            Tue 04 Mar 2025 18:21:24 +0000
asID:                     20191
IP address blocks:        146.155.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c7:48:bc:71:e3:d6:17:c8:ba:b7:49:78:a1:9e:bb:d1:4e:54:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:24 2024 GMT
            Not After : Mar  4 18:21:24 2025 GMT
        Subject: CN=90237FB60B2C2F82FC9A3EC8B2D8736F717C0FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8a:97:fb:d4:4c:11:df:2c:64:3e:95:91:37:
                    8f:82:48:72:7e:d6:65:19:53:c6:59:4b:a7:31:5d:
                    98:36:0f:77:75:7b:e6:11:43:0f:b7:0b:16:e2:cb:
                    e7:f7:aa:23:6d:ca:c6:45:5d:3e:52:c5:c9:d0:8d:
                    cb:a9:66:7d:df:6a:fe:b7:85:56:b0:c0:94:c3:b2:
                    b5:f9:6c:70:d3:b9:4f:64:04:f3:35:05:52:00:cd:
                    ee:9a:5a:6d:95:4e:11:32:2d:9c:06:d0:ee:be:74:
                    23:65:c4:93:fa:c0:ee:78:d8:1c:62:90:c0:35:8b:
                    c7:ec:06:88:27:e6:70:43:93:91:b1:3e:24:ed:4c:
                    94:55:7e:64:8a:cd:c5:68:82:95:36:28:18:ff:41:
                    47:f6:a9:32:b6:6f:e2:04:0b:79:bd:49:b9:5f:00:
                    44:1d:e0:b2:e4:d6:6f:49:62:34:51:62:1a:98:84:
                    5a:91:e1:8e:de:38:62:99:b4:06:74:17:6c:b1:94:
                    b8:2a:fd:c5:ae:98:69:cf:40:00:16:41:e9:09:45:
                    bb:c5:33:b1:5a:c3:fc:6e:a4:76:6d:60:55:c4:62:
                    89:bc:40:af:76:bf:44:58:51:ad:b8:ea:8c:94:3e:
                    3a:14:02:76:70:7e:04:2c:ec:95:d9:68:35:7d:c5:
                    8c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:23:7F:B6:0B:2C:2F:82:FC:9A:3E:C8:B2:D8:73:6F:71:7C:0F:B5
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e3136302e302f32332d3233203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:0e:35:12:f6:32:1b:a9:d7:15:4b:a6:0d:2f:3c:5d:ac:b4:
         c2:5f:fe:22:cf:43:98:55:7f:53:e8:e6:31:ad:a6:a7:ab:3c:
         3a:c3:4d:a1:14:02:55:f2:3f:ac:48:50:ac:49:01:37:b0:0f:
         42:81:d8:6d:7b:50:ee:11:26:17:0f:cb:39:e9:1a:28:10:a6:
         d5:c2:0c:f1:2d:39:55:77:20:27:18:64:af:95:8a:f3:6c:51:
         e8:23:aa:2a:9a:c6:ba:43:28:c1:98:b6:f6:98:d1:dc:44:48:
         91:a1:8a:ed:64:f3:ca:c9:9b:53:30:a1:df:c0:8a:5d:a0:0d:
         f2:04:5e:e9:fd:4c:70:87:35:ef:20:e2:2c:0c:d7:55:f4:7d:
         1d:19:b2:e1:f9:2b:17:d0:88:27:4d:64:ca:dd:9f:b1:c2:c4:
         e8:33:54:d3:c0:69:71:c7:59:0d:55:d2:f6:5c:79:2d:a7:8c:
         2c:50:74:18:60:98:25:bf:88:bf:3d:75:1c:c2:ef:5d:52:58:
         e2:1c:82:3b:53:94:b7:5c:65:57:36:d1:39:4b:c8:a0:58:64:
         f6:e7:70:12:19:c6:1e:b1:c4:6f:5c:8a:7d:bd:23:92:6b:0b:
         32:14:83:27:cc:c7:d3:83:4c:a1:39:c5:86:fb:7b:b2:18:bd:
         f5:3b:61:4c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUP8dIvHHj1hfIurdJeKGeu9FOVLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3NTMyQUJBMEFDQTVBMTE0NzQzN0UxN0E3NkQzQzEx
MEMxOTNDNDAeFw0yNDAzMDUxODE2MjRaFw0yNTAzMDQxODIxMjRaMDMxMTAvBgNV
BAMTKDkwMjM3RkI2MEIyQzJGODJGQzlBM0VDOEIyRDg3MzZGNzE3QzBGQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZipf71EwR3yxkPpWRN4+CSHJ+
1mUZU8ZZS6cxXZg2D3d1e+YRQw+3Cxbiy+f3qiNtysZFXT5SxcnQjcupZn3fav63
hVawwJTDsrX5bHDTuU9kBPM1BVIAze6aWm2VThEyLZwG0O6+dCNlxJP6wO542Bxi
kMA1i8fsBogn5nBDk5GxPiTtTJRVfmSKzcVogpU2KBj/QUf2qTK2b+IEC3m9Sblf
AEQd4LLk1m9JYjRRYhqYhFqR4Y7eOGKZtAZ0F2yxlLgq/cWumGnPQAAWQekJRbvF
M7Faw/xupHZtYFXEYom8QK92v0RYUa246oyUPjoUAnZwfgQs7JXZaDV9xYx7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkCN/tgssL4L8mj7Isthzb3F8D7UwHwYDVR0j
BBgwFoAUw3Uyq6CspaEUdDfhenbTwRDBk8QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RjM2MzM5MTA5NkUyMUM3OTFENkQ2Mzg2OEM0NkVBRjNB
ODlGODY0RTE3OTA3RkJDOTIxMjA0MjI4OUEyQjJBLzAvQzM3NTMyQUJBMEFDQTVB
MTE0NzQzN0UxN0E3NkQzQzExMEMxOTNDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMzc1MzJBQkEwQUNBNUExMTQ3
NDM3RTE3QTc2RDNDMTEwQzE5M0M0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUYzNjMzOTEwOTZFMjFDNzkxRDZENjM4NjhDNDZFQUYzQTg5Rjg2NEUx
NzkwN0ZCQzkyMTIwNDIyODlBMkIyQS8wLzMxMzQzNjJlMzEzNTM1MmUzMTM2MzAy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjMwMzEzOTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkpug
MA0GCSqGSIb3DQEBCwUAA4IBAQBEDjUS9jIbqdcVS6YNLzxdrLTCX/4iz0OYVX9T
6OYxraanqzw6w02hFAJV8j+sSFCsSQE3sA9Cgdhte1DuESYXD8s56RooEKbVwgzx
LTlVdyAnGGSvlYrzbFHoI6oqmsa6QyjBmLb2mNHcREiRoYrtZPPKyZtTMKHfwIpd
oA3yBF7p/UxwhzXvIOIsDNdV9H0dGbLh+SsX0IgnTWTK3Z+xwsToM1TTwGlxx1kN
VdL2XHktp4wsUHQYYJglv4i/PXUcwu9dUljiHII7U5S3XGVXNtE5S8igWGT253AS
GcYescRvXIp9vSOSawsyFIMnzMfTg0yhOcWG+3uyGL31O2FM
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org