Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/3139322e3134312e36342e302f32322d3234203d3e203231373635.roa
File:                     3139322e3134312e36342e302f32322d3234203d3e203231373635.roa (raw, json)
Hash identifier:          5ZYzjKQ8ab/89pZMg8T6Odml58vx4pBC1oOrg8lu1Vs=
Subject key identifier:   5A:6A:B3:62:61:49:D9:79:3A:A9:7D:92:BE:30:D7:00:AF:35:0C:69
Certificate issuer:       /CN=F773F00E96D59598ACBF0AE55485A2D0F09AC3EE
Certificate serial:       06F5DEB135DEB7C142FC0F046C3D146A49A27706
Authority key identifier: F7:73:F0:0E:96:D5:95:98:AC:BF:0A:E5:54:85:A2:D0:F0:9A:C3:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/3139322e3134312e36342e302f32322d3234203d3e203231373635.roa
Signing time:             Tue 05 Mar 2024 17:48:10 +0000
ROA not before:           Tue 05 Mar 2024 17:43:10 +0000
ROA not after:            Tue 04 Mar 2025 17:48:10 +0000
asID:                     21765
IP address blocks:        192.141.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f5:de:b1:35:de:b7:c1:42:fc:0f:04:6c:3d:14:6a:49:a2:77:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F773F00E96D59598ACBF0AE55485A2D0F09AC3EE
        Validity
            Not Before: Mar  5 17:43:10 2024 GMT
            Not After : Mar  4 17:48:10 2025 GMT
        Subject: CN=5A6AB3626149D9793AA97D92BE30D700AF350C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:32:47:52:4b:6d:f9:ab:7e:7b:e7:2f:0a:7f:
                    26:44:fc:84:cd:f3:5a:e7:7f:f7:97:91:8f:48:6c:
                    22:8c:e0:69:45:75:28:80:28:9e:02:8c:9d:96:50:
                    82:54:4b:8a:5d:94:65:e9:13:35:03:da:36:21:7a:
                    e4:ad:25:5b:a4:79:4f:7d:ae:c9:ae:4c:9c:2a:aa:
                    e3:a0:30:da:ad:29:b6:44:a2:56:e5:75:f7:8c:53:
                    78:6c:26:e8:8f:80:57:49:c8:96:27:9a:d1:39:1c:
                    3e:b2:57:f4:47:8e:fc:71:9a:29:eb:fd:ac:a7:0a:
                    ae:c4:09:e9:63:b8:b2:25:02:e7:54:da:fe:4b:c8:
                    f8:70:df:89:de:05:63:52:8f:d1:7c:a2:fa:09:03:
                    29:99:26:0f:4f:bb:b7:fd:7c:62:23:52:48:f8:00:
                    e4:6e:b2:e0:a6:12:ea:9b:97:51:ae:24:f0:e8:5d:
                    29:74:64:ef:9b:fa:b7:a6:40:3e:a3:8a:d6:1f:71:
                    c4:21:06:2a:78:fc:4a:d6:64:19:05:5c:ad:ad:17:
                    05:4e:76:48:2b:2d:14:23:8b:fc:d0:f4:ac:95:3e:
                    29:1d:98:4c:0e:d6:40:a0:96:49:b7:1f:f4:ee:6f:
                    fb:d1:87:c4:1b:7d:f9:0d:b1:46:2e:82:1a:b0:d6:
                    ba:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6A:B3:62:61:49:D9:79:3A:A9:7D:92:BE:30:D7:00:AF:35:0C:69
            X509v3 Authority Key Identifier:
                keyid:F7:73:F0:0E:96:D5:95:98:AC:BF:0A:E5:54:85:A2:D0:F0:9A:C3:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F773F00E96D59598ACBF0AE55485A2D0F09AC3EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8FC20B0AB4EF8F2EE6321C9E35EAC5D4D707EF175C0DBA0A55FD779C32AAEF6/0/3139322e3134312e36342e302f32322d3234203d3e203231373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:6d:0b:e9:28:24:30:35:01:8d:42:51:72:21:6e:05:e0:f3:
         3c:c2:31:88:28:f5:b8:ee:b6:8d:ac:2b:d7:d3:99:93:4b:b4:
         a6:5d:88:f9:92:bd:76:a5:50:03:a4:51:95:f2:72:ec:0b:3c:
         99:b5:81:86:bd:e8:84:9e:2c:6d:83:59:fa:95:c6:17:85:bb:
         97:3c:7f:2a:14:e6:94:25:77:39:d7:eb:66:00:ba:f4:4c:db:
         07:a6:e4:04:1c:c6:4b:92:e6:04:f8:fb:53:f8:1d:70:0b:f9:
         8f:64:d2:63:de:2d:87:3e:68:93:4b:da:4e:67:38:3e:d8:bc:
         41:68:a3:34:0f:1d:2a:53:d6:4f:70:c3:26:19:18:de:54:bd:
         26:e5:32:d6:a3:c6:4a:43:71:a9:fb:e5:93:b0:39:ae:f8:a7:
         e5:47:83:5e:5d:ee:64:0c:64:19:36:f8:b2:a6:d2:3d:1b:45:
         28:c5:4e:18:1f:a1:99:62:57:d9:ce:59:3c:81:f7:f1:82:a6:
         56:b4:26:14:6f:23:3b:a3:f3:e2:67:08:d0:0c:e1:8b:14:15:
         3f:fb:b1:6d:5b:c3:b3:07:04:a6:ac:b3:9e:af:92:c0:6a:54:
         fd:26:de:23:de:56:34:0d:44:13:f6:a0:64:00:a5:46:93:fd:
         4d:4b:45:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:07:43 2024 by rpki-client on console-ams.rpki-client.org