Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32342d3234203d3e20323635373836.roa
File:                     3139322e3134312e3134382e302f32342d3234203d3e20323635373836.roa (raw, json)
Hash identifier:          knoQd+bomal/1x3OVitEoBZa5aHx+HDHz8S7IbE1qHU=
Subject key identifier:   6A:22:73:86:11:21:BA:93:BA:B9:FD:AA:65:07:69:3F:ED:86:9F:76
Certificate issuer:       /CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
Certificate serial:       146675683810425887CF41CD4DB023DCE9FD0DCE
Authority key identifier: 84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32342d3234203d3e20323635373836.roa
Signing time:             Tue 05 Mar 2024 17:47:07 +0000
ROA not before:           Tue 05 Mar 2024 17:42:07 +0000
ROA not after:            Tue 04 Mar 2025 17:47:07 +0000
asID:                     265786
IP address blocks:        192.141.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:66:75:68:38:10:42:58:87:cf:41:cd:4d:b0:23:dc:e9:fd:0d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
        Validity
            Not Before: Mar  5 17:42:07 2024 GMT
            Not After : Mar  4 17:47:07 2025 GMT
        Subject: CN=6A2273861121BA93BAB9FDAA6507693FED869F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:22:ab:7e:c3:2e:dc:77:44:e5:43:31:8e:
                    ca:0f:1a:61:47:fe:89:e4:c3:49:6d:b7:5e:a2:7d:
                    72:db:b7:22:9c:8a:cf:3c:c2:07:94:b1:f4:c0:63:
                    62:2e:6b:88:d1:df:6e:41:60:f7:99:83:cf:66:b3:
                    a6:3a:c7:f7:a0:53:b7:66:60:56:e2:03:2c:82:24:
                    34:d3:49:94:35:81:4c:1d:61:ed:46:13:32:de:4b:
                    3b:d3:3b:0f:ff:b6:ee:e8:05:39:a1:f2:fd:6c:56:
                    28:0e:31:6f:fe:42:af:21:7b:cf:aa:2d:d6:49:73:
                    c8:52:0b:2f:2d:db:26:56:bd:85:13:64:32:56:5c:
                    f8:41:90:8a:1b:95:27:b2:39:f2:0f:3f:dd:2f:c7:
                    5a:a4:ae:64:b7:0d:39:f6:a5:4d:b9:31:bd:39:29:
                    9c:6c:49:8f:1e:1d:b8:41:5d:63:38:25:cc:fb:65:
                    e9:24:f2:63:d7:fe:e1:0f:54:93:1d:4d:d7:d3:10:
                    e5:12:de:36:57:ec:7c:62:5c:e0:e8:43:65:1d:b9:
                    9d:49:d1:8b:70:ac:01:39:de:d0:2f:fc:a1:a4:7c:
                    ed:1c:6f:9a:5a:a4:91:3e:97:25:57:ee:a5:1e:0e:
                    f4:35:b5:17:f3:26:c4:c1:e5:bd:17:df:dc:89:66:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:22:73:86:11:21:BA:93:BA:B9:FD:AA:65:07:69:3F:ED:86:9F:76
            X509v3 Authority Key Identifier:
                keyid:84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32342d3234203d3e20323635373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:04:56:9c:b9:46:a8:15:16:a0:40:38:3e:1b:7e:c6:48:c2:
         3b:a0:a0:bf:f5:51:1c:06:7b:30:86:40:31:98:8f:e6:07:b6:
         f0:bb:7f:18:0b:af:29:8f:fd:ba:c1:05:02:dc:30:8f:1a:06:
         f6:48:94:ca:97:c0:6d:eb:cb:b0:29:76:19:34:98:68:e4:90:
         0f:39:7b:d2:6b:3c:8e:d4:7b:08:ea:9d:8f:6c:df:92:dd:41:
         f6:e2:75:7f:d3:a4:81:87:5f:22:c3:2d:dc:71:a0:98:80:69:
         f5:69:e8:e1:90:8b:8a:77:99:43:97:fc:bd:7f:8b:b8:fd:89:
         9d:23:87:82:01:33:ac:82:7a:49:84:a1:df:6b:4f:29:88:53:
         17:ee:8b:40:83:8b:3d:0a:1f:d5:d8:f8:ed:73:8b:1d:33:3b:
         44:b8:ab:de:40:1a:30:f3:b2:04:e7:db:d3:cb:ce:0d:cb:58:
         bf:a1:66:2f:85:5f:25:36:9f:a0:4d:7c:f3:84:21:9f:e5:db:
         62:d6:af:d4:0a:d9:e4:37:a8:cd:00:83:37:70:dc:fd:e0:da:
         bc:a4:a2:ae:03:84:b4:8f:cc:54:c1:c6:d8:98:e8:dd:72:ce:
         fa:a7:c9:01:73:8b:7f:95:ac:ca:a7:f9:4e:a8:af:14:41:54:
         e4:84:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:24 2024 by rpki-client on console-ams.rpki-client.org