Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e37352e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e37352e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          LKjMp2Wf8fpqdEOdtAq/LDJG44jsJ98aswx6Iu1XhQ0=
Subject key identifier:   28:69:9D:8B:12:81:C0:4F:DA:76:61:D4:3D:25:9C:89:81:45:F2:25
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       2D4497C6D93E27BA3F4DD76BDCE4FE2C3D433C11
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e37352e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:21 +0000
ROA not before:           Tue 05 Mar 2024 18:16:21 +0000
ROA not after:            Tue 04 Mar 2025 18:21:21 +0000
asID:                     20191
IP address blocks:        146.155.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:44:97:c6:d9:3e:27:ba:3f:4d:d7:6b:dc:e4:fe:2c:3d:43:3c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:21 2024 GMT
            Not After : Mar  4 18:21:21 2025 GMT
        Subject: CN=28699D8B1281C04FDA7661D43D259C898145F225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:13:f0:5d:91:0b:b6:c5:5c:a6:e7:c2:e3:
                    27:c8:7c:b2:a8:58:c2:15:88:55:0c:d1:46:b1:6e:
                    1c:e5:66:d5:5f:c6:2f:fe:5f:0d:51:f9:5a:36:ce:
                    7a:cd:fa:2c:c0:0a:f9:75:ef:0c:cb:c4:07:b9:0c:
                    af:0b:6f:36:37:7e:e6:03:46:54:e1:87:07:10:eb:
                    89:15:9d:26:33:1b:82:8d:88:c7:f9:e4:e6:27:40:
                    21:c7:b5:ed:f3:9e:33:70:11:eb:22:b5:c5:13:e7:
                    73:49:cd:61:77:b2:45:81:a6:80:ae:68:90:f4:cf:
                    24:84:70:23:ff:5c:80:30:90:0a:d2:bb:0e:6c:43:
                    a2:a8:0d:89:d2:c9:92:ed:1c:96:77:42:da:7d:9d:
                    3f:43:31:98:f3:5c:07:32:05:1c:68:0e:7d:3e:0d:
                    3e:d8:ea:28:d6:79:31:8f:aa:0c:70:a3:78:9c:05:
                    63:e1:80:bb:ab:75:68:bb:8a:8e:be:f6:71:e0:90:
                    44:08:47:d8:12:0b:a1:e6:59:8e:f7:e5:4d:72:d8:
                    8a:bf:bc:ba:4e:6d:ca:41:47:ca:6f:b8:ce:13:4a:
                    77:e4:38:a4:e0:0d:2d:4e:f4:f1:fb:64:56:f4:75:
                    d2:f1:17:c4:6f:27:f4:ef:8b:16:74:ab:83:87:5b:
                    cc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:69:9D:8B:12:81:C0:4F:DA:76:61:D4:3D:25:9C:89:81:45:F2:25
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e37352e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:91:74:b1:8e:1f:f5:a6:a4:45:a2:de:f5:5a:e1:d6:d9:18:
         c9:be:d2:ec:f5:94:8a:17:76:0c:be:9a:78:aa:fe:b0:50:eb:
         e7:41:9c:4c:99:b3:0b:09:cb:9d:f5:a1:90:af:7c:b2:78:74:
         a6:2a:ee:5c:c6:14:18:d0:3f:44:d7:1d:4e:c8:a5:77:28:31:
         26:d4:d0:8b:c6:7d:d0:94:6f:c7:1a:38:c4:30:f3:d6:5d:79:
         88:60:de:16:5d:49:36:83:ed:0c:89:a0:80:c6:e9:b7:3f:d8:
         ad:0f:e3:9a:37:b2:dd:1d:e4:8b:3b:8f:4f:38:bb:4e:ba:2d:
         69:b4:e4:5d:dd:24:fd:dd:af:b7:27:a7:b8:fc:66:27:dd:b1:
         f6:6a:ad:97:a5:9a:fd:56:92:1e:53:af:13:08:cb:e9:b3:1a:
         3a:2a:1c:c5:e6:61:40:3f:ac:07:f4:5e:35:da:7c:bd:2d:ce:
         96:c6:57:26:3c:43:81:8e:c1:6a:80:7b:34:4e:71:ff:0a:c7:
         2b:d6:6f:25:77:de:6f:15:f6:71:06:b8:ea:9d:2b:92:35:32:
         02:59:27:cd:24:bc:d7:f7:78:6f:8a:84:18:7f:be:d9:8a:f1:
         3b:c3:6b:49:2c:44:e7:df:b5:b3:9a:20:38:70:fa:2b:78:7b:
         80:fa:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org