Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35362e302f32322d3234203d3e20323632323536.roa
File:                     3139322e3134302e35362e302f32322d3234203d3e20323632323536.roa (raw, json)
Hash identifier:          qgW2qpUGSNcCFeou3jJrg1DY9dIUYwfGeh3oxUg6Oys=
Subject key identifier:   B5:6D:BC:26:2D:2F:74:29:04:3D:0A:E5:14:33:4E:E9:6E:D3:26:3F
Certificate issuer:       /CN=8C797120238F0722DF341ADB8DF5F4192C0C7988
Certificate serial:       48157ACAEC8091A01D1B9DAF429632D83482872C
Authority key identifier: 8C:79:71:20:23:8F:07:22:DF:34:1A:DB:8D:F5:F4:19:2C:0C:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35362e302f32322d3234203d3e20323632323536.roa
Signing time:             Tue 05 Mar 2024 18:20:06 +0000
ROA not before:           Tue 05 Mar 2024 18:15:06 +0000
ROA not after:            Tue 04 Mar 2025 18:20:06 +0000
asID:                     262256
IP address blocks:        192.140.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 May 2024 10:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:15:7a:ca:ec:80:91:a0:1d:1b:9d:af:42:96:32:d8:34:82:87:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C797120238F0722DF341ADB8DF5F4192C0C7988
        Validity
            Not Before: Mar  5 18:15:06 2024 GMT
            Not After : Mar  4 18:20:06 2025 GMT
        Subject: CN=B56DBC262D2F7429043D0AE514334EE96ED3263F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:dd:5b:75:23:43:19:69:65:71:1e:0a:1f:
                    3c:f3:6d:aa:e4:fa:4b:1e:2e:b7:9c:6f:c1:b2:a9:
                    84:8a:2c:0b:71:ce:b3:03:95:9a:f5:16:b3:72:66:
                    da:51:ee:4c:c9:80:58:42:2f:b4:a2:6d:41:17:9f:
                    c8:4e:b9:37:39:e1:e7:ab:c0:c8:eb:7e:8e:6d:d9:
                    21:5a:a6:89:6d:df:c5:b8:ee:ba:c1:37:81:2b:39:
                    68:f9:2f:8f:e2:27:23:d1:6c:3c:7f:42:df:f0:99:
                    2c:fb:52:7c:aa:f4:bd:5a:c5:76:e1:14:e5:22:bd:
                    d1:8d:39:72:88:2e:2b:05:d7:ed:6b:83:29:85:ee:
                    2d:f3:9c:c1:d6:9c:c5:53:01:f1:f6:9d:95:96:66:
                    3c:1b:b1:e7:1d:ab:a5:5e:d1:75:0f:1a:2f:8d:e8:
                    32:67:03:34:b1:46:b0:9c:fc:cf:32:85:59:80:0d:
                    72:94:ca:49:7b:2f:1a:73:37:51:c5:52:b2:be:48:
                    c3:c2:ac:6b:90:1e:98:9e:7f:38:52:38:1d:0b:ba:
                    bc:86:bf:ef:74:c1:d6:1b:e2:92:e2:59:2c:14:ae:
                    81:a0:35:97:16:4a:af:58:7d:75:d2:76:27:1a:37:
                    67:9f:e1:2e:24:da:d7:26:90:c5:93:e2:b7:d5:52:
                    5d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6D:BC:26:2D:2F:74:29:04:3D:0A:E5:14:33:4E:E9:6E:D3:26:3F
            X509v3 Authority Key Identifier:
                keyid:8C:79:71:20:23:8F:07:22:DF:34:1A:DB:8D:F5:F4:19:2C:0C:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C797120238F0722DF341ADB8DF5F4192C0C7988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E5323A07BD5269F065D35634EF1C8C8EA9E4864463AFC65D718FC0AB5BFA235D/0/3139322e3134302e35362e302f32322d3234203d3e20323632323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:90:0a:04:62:84:83:19:b6:1b:95:31:ce:77:33:c2:1d:59:
         04:b4:ef:3f:0a:dd:73:43:a9:b1:49:d1:d3:a6:7a:be:38:00:
         00:35:31:40:d7:f4:bd:c5:1b:81:b7:f4:23:53:8d:01:28:79:
         94:94:bc:1c:28:38:d8:25:f5:20:d2:a8:f4:ed:93:d4:be:a1:
         5c:e2:7d:8e:20:91:81:8f:e3:36:16:4c:9a:44:06:de:5c:52:
         7e:34:87:a1:cd:89:3f:f3:9d:72:c5:f0:c3:6d:4e:9e:8f:3f:
         a2:33:d0:f4:0b:83:69:98:66:3f:c8:03:cc:9f:3c:3a:3a:a4:
         73:7c:9e:6e:b7:b9:10:6f:84:41:4d:fc:e1:cc:5e:c0:08:a5:
         2c:66:f3:09:91:c1:d8:5d:7c:48:78:6b:60:57:0a:fd:21:65:
         23:f6:eb:f8:e2:45:60:45:b6:ab:67:e5:ff:a2:11:09:f7:ab:
         7c:8b:2f:ce:45:89:21:1d:2d:46:8a:f6:0e:3d:b7:66:09:2b:
         cc:79:a6:6f:8c:38:3b:ba:5d:8c:ee:de:43:99:5a:10:fe:1a:
         49:1e:c6:c3:10:33:ee:e2:58:4a:bc:53:77:9b:56:58:0c:f3:
         25:cb:7e:9d:5c:a3:5a:35:eb:01:ad:63:5d:a9:8b:6f:f0:df:
         da:e5:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 09:04:08 2024 by rpki-client on console-fra.rpki-client.org