Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32322d3232203d3e20323635373836.roa
File:                     3139322e3134312e3134382e302f32322d3232203d3e20323635373836.roa (raw, json)
Hash identifier:          gZ6jU9GajqFYAJ41kzjLW8Hzdo6ilh1mbjZghzo+O5I=
Subject key identifier:   54:18:92:F2:40:3B:46:36:8E:0D:6B:31:90:11:42:0B:E9:CE:00:33
Certificate issuer:       /CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
Certificate serial:       08F190137372E481DC3E8F6873951B074A8B8009
Authority key identifier: 84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32322d3232203d3e20323635373836.roa
Signing time:             Tue 04 Feb 2025 18:18:40 +0000
ROA not before:           Tue 04 Feb 2025 18:13:40 +0000
ROA not after:            Tue 03 Feb 2026 18:18:40 +0000
asID:                     265786
IP address blocks:        192.141.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f1:90:13:73:72:e4:81:dc:3e:8f:68:73:95:1b:07:4a:8b:80:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
        Validity
            Not Before: Feb  4 18:13:40 2025 GMT
            Not After : Feb  3 18:18:40 2026 GMT
        Subject: CN=541892F2403B46368E0D6B319011420BE9CE0033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:83:d4:d8:1b:32:05:28:c8:5b:cb:95:a2:
                    b4:ac:90:87:4c:33:e5:b2:86:71:9a:f6:15:d3:c1:
                    fb:9b:70:77:92:fa:0a:53:ac:30:aa:0d:4a:19:bb:
                    04:6c:fe:96:a4:f2:3c:b7:3e:22:2f:c0:21:85:37:
                    a4:e6:36:a0:91:06:f2:98:10:49:64:1c:9a:44:13:
                    c3:fd:7e:33:73:5b:b8:d2:17:fb:6e:9d:0a:65:74:
                    40:d8:40:88:74:6a:ce:12:84:69:21:5b:de:ed:3e:
                    df:54:b3:12:5c:c9:37:d4:99:a2:26:2f:f3:7d:df:
                    7c:eb:89:1e:0b:e3:fd:03:dc:4f:68:7a:35:ef:11:
                    92:b0:5e:99:fd:6a:95:68:18:50:48:86:30:fb:83:
                    b8:90:34:0a:2c:2a:0c:3e:eb:72:6d:11:73:19:c6:
                    59:cc:7d:df:34:be:0c:c3:7d:32:45:db:d5:27:5e:
                    82:d6:8d:15:71:e0:94:23:b9:65:09:f6:0a:c4:9a:
                    cb:a0:9c:3c:29:65:ba:4d:3f:42:5d:c7:3b:4c:24:
                    58:4b:39:e5:cc:53:8f:e6:6e:07:ac:af:79:89:a3:
                    d6:8d:dd:54:04:54:b2:bb:58:3a:d2:1d:93:fc:4b:
                    06:de:a8:81:2c:63:0f:4f:a1:29:3a:0a:b7:2c:e5:
                    b9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:18:92:F2:40:3B:46:36:8E:0D:6B:31:90:11:42:0B:E9:CE:00:33
            X509v3 Authority Key Identifier:
                keyid:84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32322d3232203d3e20323635373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:29:ee:ad:2c:4a:11:b0:38:20:a0:86:43:0c:4c:24:46:29:
         fd:a8:59:7b:55:4e:cb:dd:92:f7:fe:fd:69:fd:b5:23:80:e0:
         5f:f2:cf:5c:49:17:a8:e3:6f:be:95:ec:f8:92:c2:8e:26:ec:
         17:d2:b7:19:c9:af:63:79:20:e2:9e:06:66:5b:6a:95:f0:81:
         df:ac:3a:d2:47:58:4b:20:0a:82:50:06:bf:cd:43:3d:e6:5d:
         35:73:79:57:dd:1c:12:b6:6a:ab:bb:3f:fc:e0:e1:6c:b1:e2:
         39:66:ce:e6:a1:0c:34:de:15:b9:c5:05:ad:cc:b0:72:2b:44:
         ff:df:c1:e4:50:f8:d0:2e:5e:d0:9e:e8:27:d3:88:a0:45:03:
         de:ef:07:c3:17:eb:63:18:43:fb:b4:e3:72:3e:ef:66:f9:ef:
         7e:5e:b7:cd:01:80:3c:7a:9c:37:1b:4f:14:ce:97:11:2d:f7:
         f9:2f:b8:9f:58:cc:f7:5e:2a:af:e2:47:fe:61:35:51:6b:8c:
         55:26:ba:8e:2d:44:1d:90:58:ce:eb:8b:f2:f2:1a:31:64:bc:
         36:6b:9b:05:ed:58:54:78:e6:ca:73:fd:00:ef:3b:c5:ca:42:
         93:e9:e3:92:cd:5a:d4:53:d4:2a:1a:fd:72:86:b2:b4:14:00:
         7e:c3:63:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:29:07 2025 by rpki-client