Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/3139322e3134312e39322e302f32322d3234203d3e20323635383233.roa
File:                     3139322e3134312e39322e302f32322d3234203d3e20323635383233.roa (raw, json)
Hash identifier:          qd7Efj0rEpdP62adIec0FHU1xRreoV3hehRuWJ4os5s=
Subject key identifier:   E3:17:3D:CD:24:CD:3B:87:CB:7B:42:F3:94:F1:A0:D2:D5:00:EB:0B
Certificate issuer:       /CN=C8AC2548546E760ED8D66D65505D4BF733452EB3
Certificate serial:       0BD27BD4B305DEC033A53D8314C5482DB420E4C5
Authority key identifier: C8:AC:25:48:54:6E:76:0E:D8:D6:6D:65:50:5D:4B:F7:33:45:2E:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/3139322e3134312e39322e302f32322d3234203d3e20323635383233.roa
Signing time:             Tue 05 Mar 2024 17:43:43 +0000
ROA not before:           Tue 05 Mar 2024 17:38:43 +0000
ROA not after:            Tue 04 Mar 2025 17:43:43 +0000
asID:                     265823
IP address blocks:        192.141.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d2:7b:d4:b3:05:de:c0:33:a5:3d:83:14:c5:48:2d:b4:20:e4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AC2548546E760ED8D66D65505D4BF733452EB3
        Validity
            Not Before: Mar  5 17:38:43 2024 GMT
            Not After : Mar  4 17:43:43 2025 GMT
        Subject: CN=E3173DCD24CD3B87CB7B42F394F1A0D2D500EB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:4f:7d:d5:e9:60:6b:d7:86:16:f6:d8:8d:
                    6b:df:cb:4b:59:0b:5d:7b:b7:c2:cc:75:28:24:50:
                    01:13:95:99:61:ce:57:3f:84:72:2f:32:c0:58:b0:
                    de:94:da:65:07:2a:cc:9d:8a:fa:fc:2e:38:17:9c:
                    37:01:3a:47:8d:4f:ec:3b:ed:55:e1:d0:e1:39:d9:
                    66:a6:dd:36:5e:20:98:3f:71:f8:36:7f:d3:38:71:
                    f4:7f:da:de:da:61:0f:72:58:69:a8:04:7a:e2:65:
                    be:1c:b6:de:68:86:00:87:db:b7:93:9f:93:25:12:
                    75:5c:fc:cf:2f:56:91:e7:e7:ae:fb:3c:6f:d1:db:
                    3b:c8:dc:f8:7b:32:b4:9f:64:38:95:a1:fc:88:bf:
                    a7:ae:9f:53:b0:8a:03:d6:9d:a1:95:ef:76:e0:00:
                    37:2b:99:e6:d9:81:1c:0e:7b:40:46:90:f5:76:fc:
                    71:a1:ec:db:e0:81:ca:c0:fb:b4:fd:37:37:f5:e5:
                    2e:1e:66:ab:0b:c6:4c:cc:42:c5:b6:62:bf:6c:1d:
                    0a:47:0b:85:c0:c6:15:dc:30:8a:93:7a:3e:2b:71:
                    f9:aa:bd:bf:79:03:58:86:bc:d1:9c:6f:25:4d:fc:
                    18:88:ab:f0:6d:3d:a3:e7:7e:12:95:f4:c8:8e:ca:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:17:3D:CD:24:CD:3B:87:CB:7B:42:F3:94:F1:A0:D2:D5:00:EB:0B
            X509v3 Authority Key Identifier:
                keyid:C8:AC:25:48:54:6E:76:0E:D8:D6:6D:65:50:5D:4B:F7:33:45:2E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/3139322e3134312e39322e302f32322d3234203d3e20323635383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:94:5b:11:8d:8f:81:e1:e4:16:e0:d9:c9:b6:c0:ff:7e:c8:
         44:db:95:0c:e6:75:57:9f:64:96:ab:9d:2a:31:00:e7:20:73:
         84:e6:75:c6:6f:5c:8f:29:24:86:7e:25:86:71:5a:67:56:42:
         bc:33:92:09:f6:2c:5a:4f:9e:67:c2:ac:37:72:bb:9c:a8:e9:
         33:0e:6d:54:f9:19:d3:2b:7f:91:fb:4c:52:e3:4f:c7:f0:80:
         b0:22:75:d7:84:e3:8e:a2:ed:f2:b1:fc:6d:72:93:5a:14:6f:
         a0:25:a7:3f:80:3b:88:75:ac:83:a0:ea:33:81:6d:3d:87:c9:
         4d:90:8a:d5:7a:62:af:34:3a:b5:e8:b3:3c:12:8e:99:91:f8:
         39:73:a4:c5:9d:4d:0b:ab:6a:af:ec:d0:b3:dc:46:82:da:ec:
         ad:29:6f:4c:13:8a:13:9b:6a:c8:f2:a0:13:41:78:01:17:6b:
         45:e8:67:80:e5:89:86:1f:66:02:b3:e0:32:8a:4c:0a:70:9d:
         7f:d2:17:33:6d:63:88:83:d0:2a:e1:d5:d3:32:a2:8f:af:98:
         56:36:56:39:94:81:73:70:ea:c0:16:02:94:50:f5:63:e9:d3:
         bc:8e:bb:66:f2:3d:f0:2c:5d:e5:34:90:ee:a1:bb:9a:18:db:
         ed:27:39:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:23 2024 by rpki-client on console-fra.rpki-client.org