Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e38392e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e38392e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          RZPakLQrq5W1pd52OXduMZBbSrM+l2snEwwX6uwLatQ=
Subject key identifier:   FA:93:04:91:B0:B2:79:00:AC:63:97:6E:72:88:0B:7F:5D:0E:34:0F
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       2D7D1055440F888AA5AE56461CCADD44C723AC14
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e38392e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:27 +0000
ROA not before:           Tue 05 Mar 2024 18:16:27 +0000
ROA not after:            Tue 04 Mar 2025 18:21:27 +0000
asID:                     20191
IP address blocks:        146.155.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7d:10:55:44:0f:88:8a:a5:ae:56:46:1c:ca:dd:44:c7:23:ac:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:27 2024 GMT
            Not After : Mar  4 18:21:27 2025 GMT
        Subject: CN=FA930491B0B27900AC63976E72880B7F5D0E340F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e6:98:a7:90:25:5f:39:6c:f1:80:ab:d6:4c:
                    28:85:00:b0:1a:2a:01:0e:09:6b:3b:88:c6:48:37:
                    84:8d:85:c2:d1:75:97:bc:4f:e3:af:f5:32:7d:cb:
                    b3:92:0b:bd:3c:4d:ac:fa:a1:68:b2:ff:28:e1:71:
                    e0:c6:6f:0f:4a:ee:91:47:f8:78:8b:9d:e0:31:f6:
                    45:b0:2b:00:eb:fc:d1:1d:7b:e7:28:46:25:f7:37:
                    fa:4b:18:06:d5:cb:51:33:8d:3b:88:4c:61:1e:ad:
                    0e:eb:b2:5e:99:28:fa:da:d0:9b:16:21:83:44:a8:
                    ee:33:e9:8c:13:57:0c:94:18:26:ba:b8:3d:a1:04:
                    1e:e2:71:2f:49:70:d2:73:0a:62:18:a9:4b:29:ab:
                    64:fa:92:f6:72:dd:52:47:13:a6:80:74:6d:d0:26:
                    b2:e5:d9:a2:cf:c6:5c:e6:be:f2:d7:49:9c:f1:49:
                    c2:6d:61:e1:8c:38:30:af:22:a7:40:0a:23:be:3f:
                    45:db:5d:d8:f2:f4:53:4d:9f:62:33:87:d5:25:ce:
                    0a:86:74:3f:9f:69:e5:7e:58:be:c0:93:01:b4:cc:
                    02:94:6b:53:3e:ca:7f:71:17:a9:47:2e:b0:67:a3:
                    74:00:c4:c6:f1:25:66:76:6c:1c:bd:cc:f4:95:f8:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:93:04:91:B0:B2:79:00:AC:63:97:6E:72:88:0B:7F:5D:0E:34:0F
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e38392e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:49:df:86:35:be:92:a7:14:6d:2e:2f:f6:23:08:8e:ee:31:
         a9:d2:be:b5:e1:cf:14:71:af:f6:d2:f8:a3:95:ef:cf:55:9f:
         07:90:d3:16:02:6d:af:7e:90:4c:c0:cf:07:cd:79:d4:c9:3c:
         4d:58:c8:c7:f7:4d:8b:91:9a:30:cc:ca:82:89:44:11:fa:3c:
         84:81:af:4f:04:e5:93:13:64:c1:0a:ff:43:99:c2:f8:b5:b3:
         90:87:3b:1a:6c:93:23:68:0c:72:1a:cf:03:55:83:c4:87:91:
         42:45:2c:d9:2e:bd:03:b3:58:cc:0a:79:02:04:45:46:e6:d6:
         50:77:c0:83:22:19:9b:5a:11:f8:50:ba:bc:84:58:e6:fd:eb:
         69:0e:ec:d1:91:26:b9:09:fc:dc:4d:2b:c3:cb:0b:fe:4f:3a:
         a1:27:dc:b8:8c:19:07:90:b9:c9:e8:36:15:ad:3b:4b:a2:92:
         dc:72:da:a0:83:0b:8f:dd:df:03:a4:e1:df:db:ff:4a:70:b0:
         45:05:31:ab:3a:eb:66:03:4b:86:f6:aa:41:e1:2d:77:41:81:
         b8:32:4c:7d:1c:15:26:14:d0:74:f2:9d:15:3e:9d:bb:7b:0e:
         c9:db:62:41:81:9b:95:34:ae:71:1f:59:fb:0d:1a:ee:0f:fe:
         bb:09:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org