Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/3139322e3134302e31362e302f32322d3232203d3e20323635373139.roa
File:                     3139322e3134302e31362e302f32322d3232203d3e20323635373139.roa (raw, json)
Hash identifier:          A9sd7W7M9s492Ha+f8Ozro+994kCToFJ8WmIcBpwM38=
Subject key identifier:   DB:CD:57:73:BB:9B:90:C0:6F:92:63:FF:16:33:77:82:60:3D:48:AB
Certificate issuer:       /CN=86B23684C23826B0D30069E095D5822718033CB5
Certificate serial:       15D7B65163FDB2F9A9CD556BF378A1B86C921B31
Authority key identifier: 86:B2:36:84:C2:38:26:B0:D3:00:69:E0:95:D5:82:27:18:03:3C:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86B23684C23826B0D30069E095D5822718033CB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/3139322e3134302e31362e302f32322d3232203d3e20323635373139.roa
Signing time:             Tue 05 Mar 2024 18:16:57 +0000
ROA not before:           Tue 05 Mar 2024 18:11:57 +0000
ROA not after:            Tue 04 Mar 2025 18:16:57 +0000
asID:                     265719
IP address blocks:        192.140.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86B23684C23826B0D30069E095D5822718033CB5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d7:b6:51:63:fd:b2:f9:a9:cd:55:6b:f3:78:a1:b8:6c:92:1b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B23684C23826B0D30069E095D5822718033CB5
        Validity
            Not Before: Mar  5 18:11:57 2024 GMT
            Not After : Mar  4 18:16:57 2025 GMT
        Subject: CN=DBCD5773BB9B90C06F9263FF16337782603D48AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:84:9f:30:06:ed:d5:50:5f:ab:90:b1:c0:
                    b4:e5:ac:b4:17:d0:9a:e3:9c:9a:8d:57:2d:b2:28:
                    25:00:81:eb:d7:29:d3:26:bc:54:98:53:74:df:67:
                    97:b4:76:fc:14:dc:4b:b8:4b:e8:2f:b8:dd:b9:c2:
                    24:35:46:e8:8c:e0:7b:93:68:fb:7b:dd:3f:1c:90:
                    a5:de:61:0e:d5:5d:a6:6d:eb:53:05:32:e5:e4:96:
                    78:8c:70:03:6e:40:01:79:44:55:7f:e0:7b:f8:ae:
                    9b:8f:5d:15:09:5f:de:40:31:39:ee:b8:5d:f2:a1:
                    68:cc:40:3c:11:82:fd:6f:f3:1e:64:f8:f5:25:4c:
                    89:3c:8f:ef:dd:df:3d:6c:69:c4:15:0d:28:f9:a1:
                    b8:5a:ad:12:1c:67:20:24:db:30:4b:3b:6a:5b:e0:
                    b1:90:cf:60:60:a6:7d:03:da:2a:c3:84:2d:c2:7b:
                    4f:4a:39:2d:39:b2:74:05:83:48:7c:f3:0a:52:32:
                    98:51:08:6b:19:ce:54:9a:65:e4:7f:20:a8:f9:be:
                    3d:d7:4f:0f:f2:53:14:30:2f:58:39:4b:8a:ca:08:
                    b1:b2:6f:fb:9c:c7:3d:33:1b:10:40:78:0d:8a:a0:
                    c6:53:f6:0f:b1:69:4e:f4:7b:28:ce:c0:48:06:7a:
                    d4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CD:57:73:BB:9B:90:C0:6F:92:63:FF:16:33:77:82:60:3D:48:AB
            X509v3 Authority Key Identifier:
                keyid:86:B2:36:84:C2:38:26:B0:D3:00:69:E0:95:D5:82:27:18:03:3C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/86B23684C23826B0D30069E095D5822718033CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86B23684C23826B0D30069E095D5822718033CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1BD3A4FA722A25F6559ACE6DEF9D7CBFFAF5643CD009E7913DBE50679A51636/0/3139322e3134302e31362e302f32322d3232203d3e20323635373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:c0:fc:96:0b:0d:54:0c:c3:ea:9b:04:6a:67:f5:ff:0a:c2:
         66:8e:fc:bd:a9:58:45:a6:a9:1f:fc:a3:25:3c:39:86:71:61:
         af:a9:2b:97:17:22:9f:3c:f7:64:b3:6a:ea:02:f0:da:27:ef:
         98:33:6d:d5:b6:54:03:df:8a:3d:15:ff:05:b7:15:70:d2:05:
         3c:ce:1f:bd:1d:55:0f:3f:dc:17:84:1f:a6:14:99:38:02:97:
         73:36:19:3e:6e:61:e3:f3:3a:fc:fa:67:15:c6:ae:a7:54:fa:
         35:e7:9d:a2:07:5e:8b:01:56:45:87:33:48:08:05:53:dc:ce:
         09:93:c7:16:ba:a5:bc:78:55:90:2b:21:81:df:7d:bb:17:40:
         af:aa:10:38:24:38:1b:2b:3b:d1:9d:d2:49:75:61:52:6e:0e:
         bf:43:cd:c2:e9:68:f4:22:f9:57:9f:8d:49:4b:39:ca:e9:d8:
         31:52:36:63:0d:07:a1:06:c1:f9:7e:e2:3d:0b:dc:81:4b:1c:
         85:b2:a7:2f:c2:05:fc:ec:18:58:77:ca:ec:d4:72:d8:ac:39:
         e5:2c:77:9c:cf:fb:14:47:e4:fa:af:cc:bc:19:d4:2f:6b:3c:
         32:d1:40:ce:90:80:0c:97:07:e7:5e:8b:01:c9:6a:9e:38:df:
         b3:c9:15:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org