Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e392e302f32342d3234203d3e20323634383336.roa
File:                     3139322e3134312e392e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          ZFTPgY8zZDCc2TV9EEuAnpqlBtKIThsjtRSLKcYaiwY=
Subject key identifier:   41:82:57:F4:8C:B5:35:03:44:A9:50:F5:5D:2A:0C:D3:B9:93:C3:67
Certificate issuer:       /CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
Certificate serial:       5CF6F4AE02B6D06F23676E9EAF6A29A8A1C028FE
Authority key identifier: FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e392e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 05 Mar 2024 18:04:18 +0000
ROA not before:           Tue 05 Mar 2024 17:59:18 +0000
ROA not after:            Tue 04 Mar 2025 18:04:18 +0000
asID:                     264836
IP address blocks:        192.141.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Sep 2024 07:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f6:f4:ae:02:b6:d0:6f:23:67:6e:9e:af:6a:29:a8:a1:c0:28:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5E9CD998130E98AA017D66E79F3521D1D83EE9
        Validity
            Not Before: Mar  5 17:59:18 2024 GMT
            Not After : Mar  4 18:04:18 2025 GMT
        Subject: CN=418257F48CB5350344A950F55D2A0CD3B993C367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:eb:f6:5a:25:b3:84:4e:a3:b1:0d:a8:66:
                    69:56:d4:1d:a2:87:70:25:b3:47:64:26:30:c6:5b:
                    33:09:64:b9:41:14:47:6e:e9:4e:40:ba:51:85:4d:
                    69:26:d9:02:89:8a:f2:31:fc:cf:02:e4:1e:19:24:
                    2d:90:4b:05:cd:f2:29:b9:2b:a8:6c:2f:0f:2f:fc:
                    61:7e:22:6e:e7:15:d0:ab:61:00:dd:63:77:e9:ca:
                    c5:ce:42:37:11:01:1c:4a:ce:ea:ac:40:7c:57:46:
                    f7:ce:93:2e:0b:47:f0:e7:71:82:ae:52:d2:14:90:
                    24:e0:aa:f2:ca:a1:a6:54:34:8c:78:b3:d6:c7:4b:
                    0a:68:86:e9:33:72:d0:08:b0:89:e2:47:42:4a:b5:
                    32:0d:49:a3:ec:f0:63:6e:36:79:86:28:0d:fe:fe:
                    b3:04:a1:d1:16:7e:d3:eb:fb:23:8a:53:af:8c:4d:
                    41:bd:d3:6e:8b:fe:c6:03:cd:7c:bf:95:18:3d:22:
                    37:9b:44:85:a6:6c:09:d8:09:0c:ad:67:41:3d:5e:
                    c2:e1:f7:51:00:49:b8:97:fa:aa:4c:2c:88:3b:db:
                    65:07:65:5b:6d:f9:f8:7b:42:20:8f:3e:30:18:55:
                    23:f4:7c:bf:5f:b5:db:c4:59:2d:b2:5c:37:41:cd:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:82:57:F4:8C:B5:35:03:44:A9:50:F5:5D:2A:0C:D3:B9:93:C3:67
            X509v3 Authority Key Identifier:
                keyid:FA:5E:9C:D9:98:13:0E:98:AA:01:7D:66:E7:9F:35:21:D1:D8:3E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA5E9CD998130E98AA017D66E79F3521D1D83EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8A53E13B6A02B49792E165E766445C653435580178A6E36C301CDBAA2C0C236/0/3139322e3134312e392e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:91:94:bc:54:e6:4f:bd:b1:98:b0:fc:1f:fb:90:b7:3d:21:
         51:26:2a:89:21:a1:37:a7:d8:e9:cb:f0:78:35:4e:b3:d5:a8:
         a4:87:ec:30:20:ce:07:d6:cd:ed:45:f7:af:01:84:2d:54:e4:
         02:2f:74:61:0c:09:e1:79:67:a5:5c:52:a3:04:7b:41:72:fd:
         a4:58:aa:3b:65:af:a3:6a:9f:f6:af:14:0f:a9:3c:30:2d:7f:
         93:8c:cb:b3:46:ca:e0:db:2c:1f:e6:10:db:eb:5c:fd:03:f8:
         79:60:7f:50:53:fc:1f:68:a1:e7:5b:06:68:88:b3:a6:49:e7:
         31:b0:82:bb:cd:d0:eb:4f:13:9c:e1:9e:c6:b2:6a:e3:3d:b1:
         5b:41:e6:73:ad:7a:6a:78:1b:c7:66:7a:ee:d6:5f:64:ab:cd:
         a3:db:7a:46:8e:c8:ec:61:4e:1d:94:f3:2d:74:74:7d:cd:e5:
         b9:3e:ab:16:18:3d:34:2c:fe:5a:7e:bb:bd:6b:ce:ed:7f:c1:
         f0:af:cf:6e:9b:a7:5e:35:1c:e6:40:ce:ec:72:27:12:01:74:
         00:1e:35:82:66:e0:79:a7:81:5b:66:26:60:be:89:de:29:36:
         a0:ec:d4:1e:e7:fc:66:14:27:f7:78:77:33:af:0b:4e:6c:70:
         fe:79:75:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 05:23:10 2024 by rpki-client on console-fra.rpki-client.org