Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e382e302f32342d3234203d3e20323634383336.roa
File:                     3139322e3134312e382e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          tdw7NMGBMkkihC2+IVrRD141Zcyvzai3CQEJ9opfE2U=
Subject key identifier:   49:10:DC:18:81:13:BD:72:E8:0E:14:1E:40:C6:1C:80:15:8D:E8:EB
Certificate issuer:       /CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
Certificate serial:       50FBE2EFA4FBED211E570E4609C6DE027169784A
Authority key identifier: FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e382e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 05 Mar 2024 18:04:19 +0000
ROA not before:           Tue 05 Mar 2024 17:59:19 +0000
ROA not after:            Tue 04 Mar 2025 18:04:19 +0000
asID:                     264836
IP address blocks:        192.141.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Sep 2024 07:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fb:e2:ef:a4:fb:ed:21:1e:57:0e:46:09:c6:de:02:71:69:78:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
        Validity
            Not Before: Mar  5 17:59:19 2024 GMT
            Not After : Mar  4 18:04:19 2025 GMT
        Subject: CN=4910DC188113BD72E80E141E40C61C80158DE8EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:45:67:e1:0d:3d:2a:44:df:6d:d1:cb:88:
                    98:33:54:e7:c7:35:80:f5:81:39:1b:1b:2d:f5:80:
                    18:f6:4e:eb:2f:db:00:ba:36:14:ae:7d:5f:ce:3f:
                    d2:ec:26:4a:11:95:9d:4e:0a:70:7c:9a:7e:29:ac:
                    4c:e0:7f:83:33:8b:33:ad:1a:99:cb:ff:40:b3:06:
                    3a:77:02:d4:d5:a2:1c:d8:73:e7:7e:42:01:a7:70:
                    c1:84:12:5f:64:47:24:af:cd:c3:c9:fa:3d:66:bc:
                    4c:59:03:73:d2:f1:5d:95:ea:5c:28:2b:09:41:f0:
                    60:18:ef:75:a7:23:3a:aa:65:89:9b:d0:7a:53:7f:
                    bf:ed:a0:a2:e3:58:9c:2e:ec:78:a9:1e:54:90:bc:
                    f4:c9:29:1b:4c:ff:2b:a4:9e:1b:a8:25:d2:db:af:
                    a2:4b:e6:0f:8f:37:88:16:b4:bd:99:1a:f2:fc:cc:
                    8b:04:78:8e:6a:d5:b8:10:d2:70:b8:32:68:53:d8:
                    7a:a8:d4:39:ee:bf:52:ed:7c:63:e2:8b:95:5b:7f:
                    78:9c:9c:85:7a:7a:88:74:f0:a9:9b:0d:92:40:bb:
                    4e:20:f5:3c:4a:c4:d9:97:26:4c:98:df:59:66:98:
                    a8:14:dc:c3:3c:8b:4d:97:82:a0:8c:18:10:8b:32:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:10:DC:18:81:13:BD:72:E8:0E:14:1E:40:C6:1C:80:15:8D:E8:EB
            X509v3 Authority Key Identifier:
                keyid:FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e382e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:8b:a6:7e:c9:1b:5d:6f:a7:a3:19:cb:41:93:5c:d4:82:75:
         60:96:f7:e3:42:c7:c4:20:69:6a:88:a1:9a:57:1a:62:50:16:
         57:f2:e1:3e:e2:dc:25:c1:7e:c5:1c:1e:53:bf:b2:7e:65:d3:
         6a:ab:31:24:8b:15:41:f6:03:79:dc:62:3d:76:0d:ed:34:17:
         64:f3:7c:bb:8b:9e:5d:8f:a2:64:30:59:d4:65:88:44:98:fd:
         7d:4c:fe:0b:72:9f:21:ae:03:b2:57:52:95:02:35:72:17:ca:
         0c:18:8c:b0:ca:60:7e:88:42:42:91:44:07:a7:55:dd:bc:4d:
         62:bd:08:56:ce:0f:bb:ce:95:59:46:b2:15:1e:38:1e:eb:6f:
         c0:0d:42:a0:3a:9f:7a:8a:81:a2:14:3a:c5:28:67:82:3c:7f:
         10:dd:db:ff:86:14:c8:5d:76:0e:c8:21:23:8c:4f:35:71:a3:
         65:93:9a:76:39:8d:89:11:37:25:88:8c:41:2c:7d:92:25:ce:
         56:d5:c4:5c:3b:9b:8f:d1:29:09:c6:9c:4f:ad:5b:ad:2e:4f:
         67:5d:7c:2c:4d:c3:3f:60:c8:ac:c1:0f:0e:e4:7d:03:59:56:
         90:a8:50:e7:4c:03:9d:f8:87:99:f2:7d:e3:b7:8a:1b:6e:b6:
         cf:73:ad:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 05:03:53 2024 by rpki-client on console-ams.rpki-client.org