Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e39342e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e39342e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          H9IcCkeR4IRYLOpDXf3zTIwzmPUdvyl0e0ToOam0EH4=
Subject key identifier:   7A:DA:F4:5E:67:52:87:D8:73:BE:F8:F2:FC:B2:81:DD:11:77:8E:E8
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       4DDDA7563F78B28E26ED8958EB27AABD3897969A
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e39342e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:26 +0000
ROA not before:           Tue 05 Mar 2024 18:16:26 +0000
ROA not after:            Tue 04 Mar 2025 18:21:26 +0000
asID:                     20191
IP address blocks:        146.155.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:dd:a7:56:3f:78:b2:8e:26:ed:89:58:eb:27:aa:bd:38:97:96:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:26 2024 GMT
            Not After : Mar  4 18:21:26 2025 GMT
        Subject: CN=7ADAF45E675287D873BEF8F2FCB281DD11778EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:e7:3a:6d:f5:d1:b1:86:9b:7d:7a:b7:77:
                    f4:3c:2a:a8:59:a4:12:12:d5:f5:9d:f5:98:4d:6a:
                    f7:57:88:ef:aa:8f:4b:28:e8:a1:df:15:d0:da:9e:
                    42:ac:5e:28:0b:21:b8:ee:8f:97:8c:c8:ec:6d:e8:
                    1a:72:60:93:16:0a:a8:98:1a:9b:19:8a:b1:cd:f0:
                    03:32:3e:3a:70:41:a0:36:6b:22:76:d1:c6:31:03:
                    6d:07:50:3f:f7:c1:c5:bd:e4:d2:4f:9d:39:5e:30:
                    28:ff:f0:ab:55:71:88:cd:03:a0:3d:6c:19:44:96:
                    c6:92:42:48:9d:f1:50:bf:5a:3d:3c:e6:77:ff:9b:
                    9d:8a:db:8f:29:b8:12:59:c2:ab:90:0d:8f:cb:eb:
                    1c:27:ec:68:d1:e5:60:14:f0:02:a7:b1:7a:8a:55:
                    8d:a0:65:b9:db:93:7e:83:ed:da:82:50:d5:43:ff:
                    89:0c:35:ca:c4:75:5c:38:30:0b:c9:13:9b:5b:69:
                    5e:45:9a:a3:64:35:5d:4c:e7:9a:d8:ce:cb:56:a2:
                    8c:39:c3:8e:7b:29:e2:31:57:bb:7e:ff:24:9f:44:
                    fd:d1:dd:ee:79:82:22:f1:0a:66:ab:bb:87:21:a4:
                    1f:dd:21:1b:50:f4:b4:cf:29:95:42:bf:65:46:74:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DA:F4:5E:67:52:87:D8:73:BE:F8:F2:FC:B2:81:DD:11:77:8E:E8
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e39342e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:45:a0:df:41:82:35:19:8a:78:dc:01:9c:a5:49:1e:17:55:
         20:dc:9d:58:72:4d:e4:d5:b2:d2:8d:79:0a:1c:bf:05:75:64:
         6b:23:02:c7:c9:6b:6a:0c:03:9b:cf:d6:0d:19:7c:ec:94:07:
         1e:23:43:bd:88:a2:a2:c1:bf:f0:53:af:2e:33:0a:ed:22:21:
         f9:19:c8:58:10:09:72:3b:60:a8:46:37:be:85:53:50:75:98:
         cd:cd:d0:53:a4:74:4d:77:1d:3a:06:45:c5:65:06:02:a2:7c:
         04:8b:7f:c8:45:7c:4f:73:36:41:89:6e:24:db:bb:70:23:0a:
         73:86:a4:b4:61:85:62:0d:26:84:1f:4b:36:b6:ca:e6:92:38:
         fb:ba:2a:d2:27:50:61:c7:c3:b8:ac:98:b4:b7:cc:36:dc:08:
         69:91:bb:77:fe:e4:93:9e:7f:74:61:99:f8:69:4a:f8:fd:1b:
         eb:82:83:a3:00:8d:13:a9:e1:a3:1a:a0:c5:a0:d8:ae:87:fe:
         68:b3:a7:91:72:fc:ac:61:7c:11:79:64:24:31:09:27:a6:89:
         04:8e:80:48:3f:39:69:a4:c6:5f:7c:84:12:71:f0:f8:9e:06:
         df:e5:67:b5:57:0d:7e:e2:3e:a9:74:c0:d2:2c:ca:34:a3:20:
         52:32:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:25:20 2024 by rpki-client on console-fra.rpki-client.org