Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e382e302f32322d3234203d3e20323636363634.roa
File:                     3139322e3134312e382e302f32322d3234203d3e20323636363634.roa (raw, json)
Hash identifier:          +I+O4j8DcHo+u0u2SiipktagFuujz0YUlZ470vfQ2kQ=
Subject key identifier:   F5:63:6A:D9:7A:71:72:8E:93:AB:54:75:47:C8:8F:F7:FA:AC:99:B9
Certificate issuer:       /CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
Certificate serial:       365C4F0638216C37B845DD50693DF5BCB24429E4
Authority key identifier: FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e382e302f32322d3234203d3e20323636363634.roa
Signing time:             Tue 05 Mar 2024 18:04:18 +0000
ROA not before:           Tue 05 Mar 2024 17:59:18 +0000
ROA not after:            Tue 04 Mar 2025 18:04:18 +0000
asID:                     266664
IP address blocks:        192.141.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5c:4f:06:38:21:6c:37:b8:45:dd:50:69:3d:f5:bc:b2:44:29:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
        Validity
            Not Before: Mar  5 17:59:18 2024 GMT
            Not After : Mar  4 18:04:18 2025 GMT
        Subject: CN=F5636AD97A71728E93AB547547C88FF7FAAC99B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a7:fc:4d:a4:c7:d2:55:75:25:da:2f:e8:10:
                    c5:14:86:eb:f9:c1:42:86:d4:52:30:7a:35:76:47:
                    b8:e5:d3:f7:33:2b:93:2b:f2:84:90:7c:f9:5b:5a:
                    df:36:cc:5b:fe:18:9a:cf:4c:11:61:a1:cc:f5:68:
                    56:09:4f:cd:8d:4d:b4:25:e0:18:0c:a5:d6:57:0a:
                    15:91:68:20:7d:26:be:b8:cc:c7:34:39:60:2e:12:
                    d9:8b:7c:82:35:32:bb:5a:77:ec:ed:67:ef:66:1d:
                    b5:8d:ae:bf:14:a2:97:3c:f2:b9:a4:31:24:40:ef:
                    72:0b:1d:f8:e7:ca:4d:3e:7b:0c:c5:cf:82:12:cd:
                    4e:10:15:45:3d:85:3c:81:0f:d0:1a:b0:9c:3f:b1:
                    b1:50:5c:c4:c0:b7:84:91:fd:04:9e:aa:02:e4:ef:
                    a3:69:35:cc:a3:92:eb:97:8d:6a:f5:41:7d:09:b8:
                    27:5c:dd:01:37:f1:72:5e:38:3a:96:0c:49:4d:6b:
                    65:58:70:94:6a:12:13:25:b8:92:72:79:c9:3d:f2:
                    fe:18:a4:1f:74:f7:d7:cc:1b:4e:44:e6:78:7b:d1:
                    41:e7:d7:38:39:23:52:b9:05:5e:bd:4a:b9:0d:de:
                    cc:ed:f3:dc:80:e5:83:8d:ee:6b:70:aa:01:36:b3:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:63:6A:D9:7A:71:72:8E:93:AB:54:75:47:C8:8F:F7:FA:AC:99:B9
            X509v3 Authority Key Identifier:
                keyid:FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e382e302f32322d3234203d3e20323636363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:ec:b6:8e:85:44:87:47:d5:7c:5f:4e:07:39:18:f1:df:6a:
         08:70:33:d3:9e:aa:7b:00:0b:01:f8:d4:26:bf:92:14:45:b6:
         7e:d0:31:db:81:5d:45:69:15:ba:40:04:59:75:8b:8b:3e:62:
         b5:4a:37:aa:58:5d:e9:8d:29:e2:db:4f:4d:7c:1c:7a:ca:0e:
         93:3a:38:08:87:54:93:87:3e:e4:41:6c:01:09:4a:12:07:6c:
         b5:94:74:a9:2e:b8:17:4f:7a:4c:41:b0:91:38:05:d5:f1:25:
         29:f3:4b:65:d0:6f:28:53:0a:b6:e4:3e:86:6c:be:47:c2:6c:
         7b:06:07:48:02:df:cd:b8:d4:7e:51:0d:5c:fe:9d:fc:1b:e5:
         f8:47:fc:be:5a:20:ab:db:72:d0:ec:cf:b7:76:79:e2:44:ab:
         5f:9f:1b:34:5c:b5:e2:fe:b3:76:d0:32:c3:aa:02:61:c1:6a:
         6e:62:5f:b5:33:95:5c:dc:4f:13:7b:5a:d7:c5:f6:9d:06:90:
         cf:27:20:dd:5b:78:b9:59:e7:45:62:cf:01:23:f5:90:71:b1:
         de:44:60:aa:c0:4e:eb:97:98:b6:68:af:91:99:91:0a:14:2a:
         de:d0:69:60:fa:ef:a0:ec:db:5e:78:2b:24:2f:fb:72:6e:da:
         8b:34:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org