Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e32352e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e32352e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          aYUnVK32SDp5iXdbrQMKDJ74dZ/hovgMBPVVLt9nLEU=
Subject key identifier:   F8:17:17:62:E5:0F:00:B0:31:5E:C9:7F:62:BB:DF:23:49:3D:F1:01
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       324F882830AA88C92737D8B70E705469C2D37919
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e32352e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:19 +0000
ROA not before:           Tue 05 Mar 2024 18:16:19 +0000
ROA not after:            Tue 04 Mar 2025 18:21:19 +0000
asID:                     20191
IP address blocks:        146.155.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4f:88:28:30:aa:88:c9:27:37:d8:b7:0e:70:54:69:c2:d3:79:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:19 2024 GMT
            Not After : Mar  4 18:21:19 2025 GMT
        Subject: CN=F8171762E50F00B0315EC97F62BBDF23493DF101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:0b:4c:51:52:ad:7a:a4:e3:bb:ba:1e:ba:
                    5c:fa:4d:23:96:e7:35:72:0a:f3:f5:86:d6:d0:fc:
                    0c:80:61:79:3c:37:e0:b0:10:d8:bf:eb:40:90:ef:
                    0f:ee:79:29:fb:18:9f:1a:80:53:c5:eb:67:8a:08:
                    44:2e:7c:93:dd:bc:5d:2e:3f:13:96:03:56:85:06:
                    81:82:1b:d1:35:4f:76:11:f3:fe:75:f3:a3:bb:d0:
                    2f:ea:03:fb:96:8e:71:bd:56:d1:0e:78:19:db:7b:
                    b8:16:9c:38:92:dc:df:ae:68:9d:bf:fb:f4:29:58:
                    31:05:ed:b3:8b:10:b3:8c:f1:47:d0:b3:30:8d:9f:
                    90:0d:40:3f:cd:0f:b0:af:74:22:6a:f9:dd:a1:a1:
                    3c:be:5d:95:56:ff:53:fd:6c:4d:5a:70:dd:e2:d9:
                    fd:74:d0:07:d2:76:6e:27:78:c5:d6:13:48:4d:53:
                    98:cd:53:7f:7c:bb:b6:24:7c:53:a1:08:13:c9:65:
                    48:33:ec:e0:96:a3:3b:71:3a:ec:64:9d:fd:ae:2f:
                    40:6f:d9:2f:e4:59:79:9a:b4:99:64:d1:23:87:ce:
                    fe:e6:fe:47:2f:d8:da:ba:d7:64:f7:89:41:c8:ed:
                    fd:7e:c9:c9:98:88:8b:eb:69:f8:2a:2e:60:fe:12:
                    88:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:17:17:62:E5:0F:00:B0:31:5E:C9:7F:62:BB:DF:23:49:3D:F1:01
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e32352e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:ac:29:d4:94:78:05:5c:b6:29:07:45:23:f6:29:f5:b8:fb:
         6f:9a:23:97:05:3d:2c:ba:53:1a:83:0c:ef:d0:dc:3b:67:10:
         73:35:75:fa:49:b8:d8:f7:a2:2d:dd:94:15:54:cb:5f:67:66:
         bd:4a:68:d4:5a:cd:10:97:1f:e6:94:41:25:24:cf:25:e0:61:
         57:0e:a7:14:b2:f2:29:1c:13:ea:73:04:89:21:87:b1:c9:e7:
         8a:ca:41:f9:6d:52:36:44:61:7c:47:c9:e2:51:25:0f:6b:b7:
         38:91:89:93:2b:2e:30:d8:62:e1:15:b0:ce:54:63:e8:e0:a3:
         a0:09:b2:49:8c:fe:ff:b4:3e:27:96:74:b2:16:52:14:70:2b:
         9b:56:e8:63:b5:55:f8:9c:a4:86:b0:33:1c:91:7a:82:29:98:
         c3:b7:97:f2:de:40:2c:b2:62:3c:b3:05:55:15:74:75:1e:3b:
         83:c8:9e:23:01:a5:a6:bb:05:61:1a:fa:b3:55:34:ef:cd:ad:
         5b:3d:08:b1:09:ee:e3:b3:6a:10:f4:a9:d3:94:95:b7:50:bf:
         b3:a2:c3:fb:9d:8f:b7:d1:55:80:36:84:12:b8:9a:7c:c6:14:
         10:d0:77:bc:c1:95:ec:a3:33:60:b6:45:42:ab:00:0f:06:cc:
         f6:47:34:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org