Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7DC418CFD9DDEF3CC4206D062EAEE2046492C71EFF5C5EBEB346FBD148EB268/0/3139322e37352e342e302f32342d3234203d3e20323636383539.roa
File:                     3139322e37352e342e302f32342d3234203d3e20323636383539.roa (raw, json)
Hash identifier:          ahQJoInN3HwbeYYrelUtxp4uUOYBEpHnVm3mlOa09mo=
Subject key identifier:   92:B3:BB:C0:27:11:02:99:6E:4D:4E:06:40:45:DB:F1:29:79:2B:05
Certificate issuer:       /CN=6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6
Certificate serial:       0D3A42F20BA1C56354B32BB09D665F2117317699
Authority key identifier: 6D:03:8F:54:D0:F5:25:0B:E4:6D:0A:6B:BD:77:EA:18:13:E7:EB:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7DC418CFD9DDEF3CC4206D062EAEE2046492C71EFF5C5EBEB346FBD148EB268/0/3139322e37352e342e302f32342d3234203d3e20323636383539.roa
Signing time:             Tue 05 Mar 2024 17:59:02 +0000
ROA not before:           Tue 05 Mar 2024 17:54:02 +0000
ROA not after:            Tue 04 Mar 2025 17:59:02 +0000
asID:                     266859
IP address blocks:        192.75.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7DC418CFD9DDEF3CC4206D062EAEE2046492C71EFF5C5EBEB346FBD148EB268/0/6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7DC418CFD9DDEF3CC4206D062EAEE2046492C71EFF5C5EBEB346FBD148EB268/0/6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3a:42:f2:0b:a1:c5:63:54:b3:2b:b0:9d:66:5f:21:17:31:76:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6
        Validity
            Not Before: Mar  5 17:54:02 2024 GMT
            Not After : Mar  4 17:59:02 2025 GMT
        Subject: CN=92B3BBC0271102996E4D4E064045DBF129792B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:30:08:02:e4:1d:00:71:07:d1:87:d0:c2:
                    e0:e1:11:f7:52:55:b1:14:a5:ba:81:0d:c7:06:84:
                    0f:f9:97:1f:96:d9:06:12:4f:27:bc:65:50:22:b9:
                    d9:1b:bf:c1:a0:7c:e1:fc:fd:35:64:77:1b:9e:5c:
                    d0:1d:95:85:75:33:83:c8:e0:e6:12:a6:28:f1:1f:
                    fc:6e:2f:34:5b:99:c0:77:de:04:55:69:67:bf:1e:
                    1c:06:89:5f:27:07:a0:bd:e3:be:8e:51:7a:c6:0e:
                    f9:e5:24:5b:4c:e8:d1:f3:67:f9:9d:3b:91:c8:41:
                    71:c1:bd:53:c3:75:d6:7b:34:c5:14:1f:90:76:88:
                    ac:eb:a5:c4:48:96:dd:b4:c1:3f:41:96:e7:e8:24:
                    0e:7e:d4:09:a5:e1:03:8a:3a:b2:08:5b:01:0b:5e:
                    25:73:b7:06:f8:77:9c:dd:b7:13:c5:5d:60:e8:9f:
                    1f:f8:0f:c9:eb:50:db:b2:d2:2a:d7:bb:46:5a:be:
                    5e:a8:24:8b:14:e4:83:3e:b5:d6:dc:e8:87:66:62:
                    14:30:83:8e:ee:d7:be:f5:72:2d:39:2b:9d:1b:40:
                    06:bd:0e:f6:5b:8e:2a:09:6b:21:9c:ce:41:9f:59:
                    4b:7b:7f:df:f0:dc:06:e0:e7:92:cc:6f:06:26:a0:
                    36:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B3:BB:C0:27:11:02:99:6E:4D:4E:06:40:45:DB:F1:29:79:2B:05
            X509v3 Authority Key Identifier:
                keyid:6D:03:8F:54:D0:F5:25:0B:E4:6D:0A:6B:BD:77:EA:18:13:E7:EB:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7DC418CFD9DDEF3CC4206D062EAEE2046492C71EFF5C5EBEB346FBD148EB268/0/6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D038F54D0F5250BE46D0A6BBD77EA1813E7EBC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7DC418CFD9DDEF3CC4206D062EAEE2046492C71EFF5C5EBEB346FBD148EB268/0/3139322e37352e342e302f32342d3234203d3e20323636383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:74:38:08:cd:28:70:4c:91:5d:43:09:b9:42:3c:93:cb:d1:
         6a:f9:14:76:d3:47:a2:62:f5:ac:cc:1e:30:22:2b:f0:da:52:
         4f:66:f3:99:f7:50:7e:09:90:68:ad:c9:96:6a:7b:94:ce:0f:
         e6:3f:2a:0c:55:9c:df:b9:90:7b:75:cb:b2:a7:a7:ff:4b:68:
         66:d5:dd:3e:61:4e:3a:3e:80:36:e1:b3:12:7a:44:9f:41:fa:
         25:99:23:11:fc:cb:aa:90:70:0f:fe:93:f7:e7:54:66:a1:63:
         8b:08:a0:2d:c9:9e:c4:00:02:c5:01:c2:fe:74:e5:61:f7:8a:
         3f:89:a4:0d:47:4b:5a:c7:08:cf:15:9c:bd:e4:49:d4:f7:55:
         45:f3:11:aa:34:96:4c:de:2e:c4:3e:bc:29:35:e4:46:5c:06:
         c3:d6:94:30:65:ca:d3:4c:d9:21:51:d4:b5:cc:07:9c:dc:66:
         14:6c:b2:c8:4c:49:cb:c8:14:06:7a:55:53:8c:a7:76:88:ac:
         9d:a2:92:fe:23:24:13:85:96:56:87:61:a2:3c:e6:b0:98:a8:
         76:1a:17:64:8b:21:dd:46:3b:a6:8c:8b:61:58:2a:e0:13:54:
         a2:d7:eb:2e:a9:74:dc:4c:81:d0:9c:f2:71:2f:a8:2d:86:9c:
         dd:04:e0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org