Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e39362e302f32342d3234203d3e203230313931.roa
File:                     3134362e3135352e39362e302f32342d3234203d3e203230313931.roa (raw, json)
Hash identifier:          ax8Sek1W6VKIk7v7iq8DvZKg7XPaSO/QZW7iPmP3CmI=
Subject key identifier:   06:66:F5:B7:4A:C6:A4:EA:D5:A8:35:C1:69:41:CA:B7:E8:80:AC:31
Certificate issuer:       /CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
Certificate serial:       2F86E4A3747C8495B448AC71E0877DFA306B7452
Authority key identifier: C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e39362e302f32342d3234203d3e203230313931.roa
Signing time:             Tue 05 Mar 2024 18:21:20 +0000
ROA not before:           Tue 05 Mar 2024 18:16:20 +0000
ROA not after:            Tue 04 Mar 2025 18:21:20 +0000
asID:                     20191
IP address blocks:        146.155.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:86:e4:a3:74:7c:84:95:b4:48:ac:71:e0:87:7d:fa:30:6b:74:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37532ABA0ACA5A1147437E17A76D3C110C193C4
        Validity
            Not Before: Mar  5 18:16:20 2024 GMT
            Not After : Mar  4 18:21:20 2025 GMT
        Subject: CN=0666F5B74AC6A4EAD5A835C16941CAB7E880AC31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:31:ef:61:65:17:33:6e:9c:82:34:3e:af:
                    1b:1e:33:02:bf:21:93:11:11:38:93:32:cf:57:79:
                    61:21:21:70:13:cf:7f:1f:44:7e:c3:01:05:8d:d8:
                    13:d2:17:94:26:29:33:82:9c:04:81:f8:47:a2:e6:
                    c4:2c:5a:f5:cd:10:51:76:fc:f9:46:b4:1a:1a:ca:
                    33:fb:23:4a:26:54:88:29:c7:d9:0b:49:fd:96:82:
                    fb:a2:ac:dc:c7:36:1c:05:e6:f5:5b:f6:23:b4:67:
                    06:63:8d:2d:48:73:3a:db:02:ad:9b:c7:60:73:21:
                    4e:07:e1:bd:6f:bc:5f:ce:0e:57:fe:01:01:0c:61:
                    18:c5:85:56:1a:58:e8:fb:59:49:52:54:28:91:93:
                    e8:49:a4:0b:e0:1b:c6:7a:49:e6:8c:a1:fb:64:fd:
                    67:44:4b:14:06:10:7b:0a:0b:76:20:0e:6e:87:06:
                    b3:26:1e:35:e0:67:5f:94:a0:3d:2b:ae:b6:b5:a2:
                    6a:a2:e2:2e:f8:73:c1:fb:7e:60:ec:95:a1:68:88:
                    3f:3c:cc:93:9f:77:2a:c6:fa:e2:1e:13:7f:8a:20:
                    9b:2c:d8:8f:12:26:f2:eb:c5:98:64:0f:87:cb:a2:
                    df:b5:95:1f:50:2c:0c:80:e9:49:14:75:22:fc:13:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:66:F5:B7:4A:C6:A4:EA:D5:A8:35:C1:69:41:CA:B7:E8:80:AC:31
            X509v3 Authority Key Identifier:
                keyid:C3:75:32:AB:A0:AC:A5:A1:14:74:37:E1:7A:76:D3:C1:10:C1:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C37532ABA0ACA5A1147437E17A76D3C110C193C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F363391096E21C791D6D63868C46EAF3A89F864E17907FBC9212042289A2B2A/0/3134362e3135352e39362e302f32342d3234203d3e203230313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.155.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:1d:03:8b:37:23:ce:8d:83:15:b0:e2:08:67:d2:b0:c4:
         9c:aa:24:8f:84:cb:98:02:a5:94:f4:0f:2d:75:09:bd:35:69:
         1b:f4:7d:a7:2b:58:1b:00:bc:9a:cb:25:93:f6:ec:51:03:c4:
         67:be:73:c8:84:cb:ca:c8:34:a8:f3:9c:52:53:98:76:07:96:
         50:17:f2:32:3b:eb:10:e9:43:c7:37:68:dd:d5:25:0b:e3:b5:
         c7:45:ad:82:3d:cf:86:68:6f:e4:f7:00:57:04:28:c8:fe:33:
         45:ce:46:a9:72:36:69:b4:94:50:c2:4a:26:ea:5c:68:e6:4e:
         ec:3b:df:e7:50:a1:31:92:ac:0d:80:08:fe:97:e2:b7:b9:d9:
         06:ee:76:40:26:0c:37:f1:3a:7d:22:21:1b:f2:bd:f0:71:33:
         c2:f7:04:d5:7a:15:2b:c5:6d:e1:2a:ab:ae:94:f5:30:d3:cc:
         c6:55:e4:1e:27:38:ae:77:55:8b:a6:83:97:42:bd:de:a2:87:
         ff:27:b9:0c:c5:c3:fd:5b:96:5f:8b:3d:f0:c5:eb:b6:f2:c7:
         79:b8:6e:2f:41:f1:db:6f:bf:22:b1:8e:ee:2d:94:7f:71:0f:
         0c:07:b9:c1:1d:69:8c:2b:00:00:77:90:08:53:36:b4:40:a3:
         03:a3:32:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:50:31 2024 by rpki-client on console-ams.rpki-client.org