Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32342d3234203d3e20323635373836.roa
File:                     3139322e3134312e3134382e302f32342d3234203d3e20323635373836.roa (raw, json)
Hash identifier:          lGx68CvTuoxeng1T83RlIX1CVeOx8SJtNvW70ZJGSJk=
Subject key identifier:   24:04:F6:15:10:6E:AD:A2:A2:3B:7F:FD:6B:43:8F:60:4F:00:AC:93
Certificate issuer:       /CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
Certificate serial:       19F10D08721648409B303AC77F7EC96B33E1B493
Authority key identifier: 84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32342d3234203d3e20323635373836.roa
Signing time:             Tue 04 Feb 2025 18:18:40 +0000
ROA not before:           Tue 04 Feb 2025 18:13:40 +0000
ROA not after:            Tue 03 Feb 2026 18:18:40 +0000
asID:                     265786
IP address blocks:        192.141.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f1:0d:08:72:16:48:40:9b:30:3a:c7:7f:7e:c9:6b:33:e1:b4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
        Validity
            Not Before: Feb  4 18:13:40 2025 GMT
            Not After : Feb  3 18:18:40 2026 GMT
        Subject: CN=2404F615106EADA2A23B7FFD6B438F604F00AC93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:53:03:53:5d:d7:f9:45:df:de:41:bc:75:
                    df:70:40:a5:aa:58:53:29:5f:53:57:9a:11:a0:dd:
                    48:92:d0:68:e1:cf:d8:74:7c:0b:4d:63:5f:8f:3e:
                    4a:e9:fa:43:51:af:27:01:ca:68:de:15:f7:e1:c0:
                    00:bb:ee:4c:b0:4c:01:b3:78:8e:81:ce:68:1d:c5:
                    6f:1a:22:3c:6a:00:bd:a0:8a:00:f0:31:08:66:18:
                    8f:ee:14:df:5c:48:7c:13:a6:76:bd:52:a3:b0:e1:
                    d2:db:47:7b:3c:1d:9e:27:d2:e5:a8:3e:b9:9f:88:
                    fb:44:84:73:6b:1d:bc:33:41:23:d3:01:0a:dc:19:
                    8a:55:85:02:82:21:5e:46:30:bd:bb:0a:02:83:c5:
                    82:77:33:74:9a:f7:d6:94:a0:28:d4:02:4f:a7:02:
                    37:7f:fa:ac:cb:75:80:fa:2b:7f:94:4d:53:a8:ae:
                    27:e1:27:a3:a5:3d:c3:81:9d:cf:86:e0:95:19:84:
                    31:7e:be:0f:84:08:d7:2d:af:dc:92:23:e9:19:dc:
                    03:dc:64:27:64:7b:ae:d8:33:0b:2f:7f:88:31:e8:
                    9b:8a:55:d2:23:22:86:b4:de:21:f4:67:87:a3:76:
                    e3:e1:0e:b3:22:f3:c3:bb:b3:6a:c0:4b:c8:ab:90:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:04:F6:15:10:6E:AD:A2:A2:3B:7F:FD:6B:43:8F:60:4F:00:AC:93
            X509v3 Authority Key Identifier:
                keyid:84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3134382e302f32342d3234203d3e20323635373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:da:43:c8:bb:25:20:3b:bd:55:1a:7e:36:23:8c:00:26:80:
         c0:58:55:07:56:32:7f:bd:40:a0:96:14:79:45:20:8d:a1:24:
         d3:e7:43:d5:49:86:0e:89:74:2b:1e:66:52:f4:91:37:5e:01:
         de:c1:77:0b:00:78:01:f3:f7:30:a2:47:05:ee:70:0f:5f:84:
         19:ea:d7:f1:f4:1d:b1:c1:42:d5:c9:a8:4a:04:fd:18:66:52:
         3d:ef:0d:8d:13:41:53:c7:62:f1:ad:c9:ca:83:f6:33:68:e5:
         43:df:2c:63:0c:3e:68:de:7c:8a:bb:0f:fa:b8:23:33:cb:a8:
         8d:5c:82:88:77:50:8f:97:e4:44:e7:bc:14:ac:2e:2e:58:f8:
         6d:27:3d:6d:ac:ad:a3:43:3e:f0:2c:52:2f:8d:65:94:20:9e:
         28:36:dc:7e:f7:9b:19:6a:f4:42:d1:01:2a:d4:39:49:22:3c:
         a9:a7:20:ac:41:e7:1c:4f:f6:b0:55:5a:5c:9d:3d:cd:77:ea:
         f0:d1:7c:f6:f6:b6:fb:51:fb:26:f7:3c:5c:53:4e:a2:6b:a8:
         85:6e:2e:8c:3d:9e:a4:f6:80:47:cb:8a:b1:6d:59:ac:73:20:
         a5:75:a3:5b:03:a7:a1:2a:b3:f8:ce:82:52:c8:c0:66:33:6e:
         95:1a:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:05 2025 by rpki-client