Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3139322e3134312e3132342e302f32322d3234203d3e20323635353234.roa
File:                     3139322e3134312e3132342e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          OlueWQH9VL0ZoJxeo8TXFcP7I/t2/XMaaags9CKUBt4=
Subject key identifier:   42:8B:A5:5E:E5:9B:6D:8A:CB:0B:E3:C0:44:97:AA:E8:07:E3:80:6B
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       69FBDCC04BB6C0346ECF1C0872091208E94FF850
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3139322e3134312e3132342e302f32322d3234203d3e20323635353234.roa
Signing time:             Wed 13 Mar 2024 16:30:00 +0000
ROA not before:           Wed 13 Mar 2024 16:25:00 +0000
ROA not after:            Wed 12 Mar 2025 16:30:00 +0000
asID:                     265524
IP address blocks:        192.141.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fb:dc:c0:4b:b6:c0:34:6e:cf:1c:08:72:09:12:08:e9:4f:f8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Mar 13 16:25:00 2024 GMT
            Not After : Mar 12 16:30:00 2025 GMT
        Subject: CN=428BA55EE59B6D8ACB0BE3C04497AAE807E3806B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:ed:15:b1:c5:02:a3:4e:34:e6:a7:bf:62:
                    3d:17:ae:8d:be:09:8a:74:6c:43:7a:90:95:c2:75:
                    e4:12:f5:e5:7c:2b:40:bc:3a:68:d5:c5:94:7c:57:
                    38:cc:f8:04:2b:2b:c1:d6:ab:51:e2:5c:4d:dc:5d:
                    d3:3e:e5:85:b8:1e:e8:fc:0b:8d:ef:84:5d:dd:32:
                    b2:f6:c7:89:91:2a:17:60:03:70:fe:3b:a4:b9:aa:
                    cb:d4:52:f3:92:67:e0:07:f2:02:2f:6a:8a:4d:c7:
                    0e:b5:20:7c:f5:79:b5:34:cd:50:3e:a7:49:9d:19:
                    43:b7:e9:63:26:61:d8:5f:7c:0e:a0:39:23:09:07:
                    65:dc:8b:70:21:5d:58:b9:5c:87:f2:3c:94:09:b0:
                    3b:14:33:4c:85:61:d1:62:55:d1:d1:cf:5e:f9:2a:
                    95:02:e3:19:be:da:fd:8e:93:e2:19:f6:70:61:3b:
                    01:7a:48:89:5a:65:ba:f5:88:ae:a8:c4:2a:b7:ac:
                    c2:f7:8b:6f:20:93:84:3c:92:8c:6f:d5:2d:5e:ff:
                    9b:0e:0b:38:9d:5f:f8:4e:ed:0d:80:c2:86:05:aa:
                    88:d4:49:ba:80:01:37:77:54:fd:00:2d:2c:47:d8:
                    78:76:77:94:ed:34:ad:4a:e6:10:9a:d0:ec:95:76:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8B:A5:5E:E5:9B:6D:8A:CB:0B:E3:C0:44:97:AA:E8:07:E3:80:6B
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3139322e3134312e3132342e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:a8:b5:13:b3:d5:3c:38:97:fb:8c:ee:64:3b:c3:ba:a1:2c:
         e2:66:1d:a0:de:98:a1:cd:7f:60:11:41:8c:0b:4c:1c:4a:fd:
         62:4e:27:09:68:e5:62:46:a1:f8:8c:6f:81:79:3f:c9:34:bc:
         9d:5f:e0:fd:92:a1:05:cf:41:00:4b:0f:b5:4f:9d:3c:96:81:
         1e:d3:07:80:75:4e:aa:35:b9:18:fc:e6:89:23:b3:2d:d5:31:
         9a:3b:00:b3:a6:fb:c7:49:d4:56:3b:fb:7d:c1:03:a5:b8:45:
         91:fd:78:c9:fa:bc:21:c7:5f:c9:0c:f6:22:48:f0:d8:2b:21:
         2a:11:52:a5:9a:dd:ac:c8:80:5c:b6:fd:69:01:37:0a:2b:fb:
         37:b3:a8:55:e3:1d:67:16:f4:6f:84:5c:bc:a0:5d:23:e2:53:
         94:42:a6:a6:04:f2:e9:bc:b5:0c:0f:a7:17:9f:f1:7b:c9:21:
         d4:85:95:8c:ac:04:ee:75:0d:ba:87:47:4a:67:0e:7f:24:e2:
         10:cb:d5:4f:02:bb:e1:98:c3:f5:25:7b:59:c6:4a:18:be:ab:
         0e:f7:54:d2:ab:d5:f2:b0:48:ed:5d:70:3d:8d:02:11:6e:f5:
         d8:16:64:66:4a:21:a0:59:11:7c:9c:c0:bd:99:9d:32:f3:cb:
         1d:36:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org