Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/3139322e3134312e39322e302f32322d3232203d3e20323635383233.roa
File:                     3139322e3134312e39322e302f32322d3232203d3e20323635383233.roa (raw, json)
Hash identifier:          5mnGvdRWf6WqNa8e5dN2OQmPhSM6+mdSUt3y4Bn1W/g=
Subject key identifier:   9E:4F:29:7B:0E:ED:28:77:7F:99:FB:47:7B:5D:DA:46:45:8F:13:42
Certificate issuer:       /CN=C8AC2548546E760ED8D66D65505D4BF733452EB3
Certificate serial:       34FE9060C5D4797BD7617FE340E9979C07359DCC
Authority key identifier: C8:AC:25:48:54:6E:76:0E:D8:D6:6D:65:50:5D:4B:F7:33:45:2E:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/3139322e3134312e39322e302f32322d3232203d3e20323635383233.roa
Signing time:             Tue 05 Mar 2024 17:43:43 +0000
ROA not before:           Tue 05 Mar 2024 17:38:43 +0000
ROA not after:            Tue 04 Mar 2025 17:43:43 +0000
asID:                     265823
IP address blocks:        192.141.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fe:90:60:c5:d4:79:7b:d7:61:7f:e3:40:e9:97:9c:07:35:9d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AC2548546E760ED8D66D65505D4BF733452EB3
        Validity
            Not Before: Mar  5 17:38:43 2024 GMT
            Not After : Mar  4 17:43:43 2025 GMT
        Subject: CN=9E4F297B0EED28777F99FB477B5DDA46458F1342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:2e:e5:06:d4:82:4d:09:94:7d:58:48:a4:
                    d1:69:97:30:3d:2b:a9:1e:ef:5e:a9:55:97:41:1e:
                    dc:af:ae:f1:74:36:9b:df:71:af:89:2a:4d:1e:59:
                    fc:76:50:7b:35:64:54:72:c4:d5:ea:e8:7b:5d:0d:
                    16:f6:a2:75:31:e8:65:2c:a7:a3:43:40:97:46:e1:
                    74:9d:ac:01:c4:6c:d2:40:e7:4b:16:b7:85:35:2f:
                    31:68:6c:31:e8:fe:8a:5f:54:68:36:2a:09:74:0d:
                    75:89:5f:6c:57:80:72:0e:e5:60:43:9a:0d:c6:8e:
                    88:05:9b:23:26:23:72:25:51:94:46:fb:80:37:41:
                    b7:3c:14:c1:84:e6:da:6c:e8:4d:34:df:8c:1b:12:
                    7c:2f:77:74:a7:82:e1:b7:15:88:4d:fd:58:0f:ef:
                    ae:96:92:2f:9b:4f:fb:e6:6b:22:d6:6e:e2:ef:a9:
                    ad:22:24:bb:6c:b9:b8:69:b3:f7:48:c1:02:f4:e3:
                    48:42:87:28:07:d6:76:92:ec:94:37:7f:28:38:8b:
                    81:a0:6f:b7:4d:92:11:12:2f:c4:db:7d:78:77:4f:
                    a7:a2:df:93:11:78:c3:b9:9e:14:f3:32:c4:e1:17:
                    8f:52:a6:64:01:c9:e4:ac:13:32:ae:9e:a7:df:1e:
                    fc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4F:29:7B:0E:ED:28:77:7F:99:FB:47:7B:5D:DA:46:45:8F:13:42
            X509v3 Authority Key Identifier:
                keyid:C8:AC:25:48:54:6E:76:0E:D8:D6:6D:65:50:5D:4B:F7:33:45:2E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/3139322e3134312e39322e302f32322d3232203d3e20323635383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:e2:fd:c4:f9:67:64:a3:24:de:e8:ac:de:89:90:5f:49:5f:
         c0:02:12:dc:18:bb:47:a1:80:5c:3e:e8:8f:55:ce:71:3c:6a:
         70:95:1a:1b:d7:3f:44:c0:a6:6f:ab:d8:55:76:28:5f:bd:04:
         eb:5d:10:28:d9:91:3d:e3:f1:8d:d4:6a:7e:48:e1:25:92:2b:
         bb:11:87:25:25:62:fd:4d:04:db:e3:a4:0d:51:38:24:c0:3e:
         34:94:4c:98:77:46:80:7c:0f:30:a0:4e:51:bb:d0:79:67:1d:
         f4:95:cc:08:1c:a2:ec:89:3e:14:76:06:3e:7c:29:92:e4:2a:
         d8:b8:e5:90:6c:17:4f:99:19:71:26:c6:38:84:71:b2:af:90:
         38:86:67:07:32:b2:72:27:4a:eb:1b:69:d8:67:42:b6:61:1c:
         68:15:fd:d8:d5:7a:28:0c:3b:93:a6:ba:b1:30:e9:66:00:cb:
         d8:21:99:85:36:51:ad:35:7f:fb:47:6d:b7:6f:90:73:ca:67:
         62:15:ed:61:62:78:9d:86:d2:c4:3e:f8:16:9e:f2:8b:82:8d:
         6b:97:3c:e8:cf:da:7d:e9:ac:97:be:51:6f:54:f8:7c:05:65:
         21:42:f0:42:eb:38:ce:da:27:a3:c7:19:42:b5:0b:15:de:bd:
         e5:64:d3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:50:06 2024 by rpki-client on console-ams.rpki-client.org