Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32322d3232203d3e20323635373836.roa
File:                     3139322e3134312e3134382e302f32322d3232203d3e20323635373836.roa (raw, json)
Hash identifier:          TJZ6uzKgdkXKyznsgUZT83xvU6SShk4hlbQpVWWVXFg=
Subject key identifier:   80:BD:37:A4:93:19:D8:73:17:66:88:40:63:D7:04:FA:F7:B2:CB:67
Certificate issuer:       /CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
Certificate serial:       0ECFFB56D725514C5A641652ECFADF0FC86C2895
Authority key identifier: 84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32322d3232203d3e20323635373836.roa
Signing time:             Tue 05 Mar 2024 17:47:06 +0000
ROA not before:           Tue 05 Mar 2024 17:42:06 +0000
ROA not after:            Tue 04 Mar 2025 17:47:06 +0000
asID:                     265786
IP address blocks:        192.141.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:fb:56:d7:25:51:4c:5a:64:16:52:ec:fa:df:0f:c8:6c:28:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
        Validity
            Not Before: Mar  5 17:42:06 2024 GMT
            Not After : Mar  4 17:47:06 2025 GMT
        Subject: CN=80BD37A49319D8731766884063D704FAF7B2CB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a2:ad:1d:e7:a5:0e:29:83:a9:89:69:cb:f9:
                    ee:c1:ce:56:41:10:8a:e4:fe:86:54:23:69:76:b5:
                    b2:f1:09:3a:3a:4d:cc:43:b0:14:c0:d9:61:72:e3:
                    19:e7:62:aa:6d:d7:95:d3:10:93:e8:3c:0f:41:e0:
                    cc:d6:15:a5:d3:61:bb:bf:91:d5:f0:35:3f:fa:a0:
                    9d:6b:54:47:35:69:50:07:ab:0b:8c:49:a2:58:1d:
                    8a:98:66:57:57:b7:8d:5a:3b:83:a9:2b:a8:9a:71:
                    e8:21:17:16:03:d6:87:02:d1:a9:d5:1a:ee:99:a1:
                    96:e4:fa:f3:60:30:53:31:aa:e4:9c:32:70:c7:b4:
                    47:a5:10:c5:c0:0c:34:6d:42:c6:87:9d:ea:e3:98:
                    f6:ab:71:70:f0:b0:c4:a9:cf:38:ef:e2:de:76:12:
                    64:09:b5:74:24:eb:04:1b:ea:38:12:f4:47:95:ea:
                    be:4d:25:09:c0:3a:28:00:34:11:b4:73:99:53:ef:
                    dd:aa:72:26:c3:3f:62:f3:f3:3d:57:e2:b9:69:77:
                    06:2e:d5:a9:31:14:a0:64:35:3d:d0:a5:cd:14:ca:
                    43:1a:ad:8e:24:a7:e5:cb:04:35:b9:c0:3b:da:3b:
                    fd:12:a4:22:e4:2f:4c:76:bf:25:ea:dc:03:09:de:
                    ed:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BD:37:A4:93:19:D8:73:17:66:88:40:63:D7:04:FA:F7:B2:CB:67
            X509v3 Authority Key Identifier:
                keyid:84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32322d3232203d3e20323635373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:3e:71:ef:13:b4:0c:72:8f:eb:af:fb:77:4d:c1:c0:cd:a2:
         07:24:59:94:2f:ec:09:e0:d6:a5:69:e9:cc:3e:f4:9c:10:3a:
         d6:e7:d9:bf:6c:c4:4c:55:a4:17:aa:3f:5a:dd:6f:03:6c:90:
         e0:68:86:1c:7b:33:83:7c:23:69:7a:32:10:1f:a1:c4:88:6f:
         4e:2e:8a:9a:bc:2a:d9:21:7b:4f:a7:9d:19:cf:28:30:a0:75:
         f3:d4:7c:5f:37:3a:bf:9c:3b:4a:23:de:e6:38:a6:16:a5:85:
         e0:a3:49:15:ff:24:99:8d:f3:16:e2:c5:fc:98:6a:1c:fa:a1:
         70:5a:dc:0d:49:96:ae:2c:03:bc:3d:81:55:fc:89:d0:fe:10:
         f0:c3:73:e7:f9:92:07:73:53:45:ed:b4:bd:6d:73:ec:d4:d1:
         3e:f9:15:83:f8:0b:cc:32:72:50:04:03:05:4a:54:4b:80:9e:
         56:02:6b:b7:62:aa:4d:55:d1:a2:f3:84:72:53:42:24:d4:ae:
         9e:40:7a:62:d7:82:ce:cd:c0:4e:38:cf:71:91:8d:53:c6:32:
         94:53:8a:fb:7a:ff:2d:1d:9b:32:ec:d2:f9:db:89:14:9d:cf:
         bd:75:b4:d2:88:1e:ce:2a:bd:be:cb:70:9a:c6:1b:80:bc:9d:
         5e:c6:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:20 2024 by rpki-client on console-fra.rpki-client.org