Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3135302e302f32342d3234203d3e20323635373836.roa
File:                     3139322e3134312e3135302e302f32342d3234203d3e20323635373836.roa (raw, json)
Hash identifier:          c0ZeMCVYW88oPegfy06oO2SU1H7qfkFoLQs2hThIVw8=
Subject key identifier:   53:91:23:5C:F2:B1:49:FA:67:6E:99:61:CE:D9:E9:E6:88:11:0E:AF
Certificate issuer:       /CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
Certificate serial:       64D975D057991155CEDC789CA933CF54EFFF471F
Authority key identifier: 84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3135302e302f32342d3234203d3e20323635373836.roa
Signing time:             Tue 05 Mar 2024 17:47:07 +0000
ROA not before:           Tue 05 Mar 2024 17:42:07 +0000
ROA not after:            Tue 04 Mar 2025 17:47:07 +0000
asID:                     265786
IP address blocks:        192.141.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d9:75:d0:57:99:11:55:ce:dc:78:9c:a9:33:cf:54:ef:ff:47:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B6E0EF21A41448788FD7C69334F2BAEFCE6689
        Validity
            Not Before: Mar  5 17:42:07 2024 GMT
            Not After : Mar  4 17:47:07 2025 GMT
        Subject: CN=5391235CF2B149FA676E9961CED9E9E688110EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:79:00:b7:1b:70:2e:f1:fa:18:07:7d:9e:
                    76:ae:f1:54:65:b8:ae:39:b4:30:81:dd:01:2d:77:
                    5e:0f:d6:1a:28:d6:92:58:6e:49:97:07:00:d0:cf:
                    d6:fa:1d:b9:18:0a:83:ca:d9:31:6c:27:01:6c:f0:
                    f8:4b:6d:15:6c:fe:3b:62:99:9a:33:18:40:b7:c1:
                    4d:18:77:75:74:79:83:46:2d:b1:05:bc:cf:24:fd:
                    9b:59:43:f4:a9:93:d0:7e:29:5d:14:47:57:d5:3f:
                    79:fd:43:66:0d:43:80:2f:92:e2:2e:2f:3a:a8:a1:
                    a2:d3:6b:19:0f:1c:f6:8a:4e:92:a4:12:c7:ea:1a:
                    f3:2a:ff:d8:81:8b:24:af:8b:ab:bd:63:f0:08:73:
                    36:46:5e:05:e8:3c:54:ac:53:d4:5a:01:58:a2:89:
                    a2:43:96:98:4f:0c:81:e3:72:69:fb:92:f0:b5:d9:
                    1a:91:e4:d6:09:83:9d:82:0f:23:42:35:51:45:55:
                    27:4e:f9:6b:15:5b:3b:92:1b:f7:5c:9b:f9:09:a5:
                    5d:2b:98:03:0a:ae:79:bc:77:54:12:22:ce:b9:08:
                    4d:fb:66:10:94:09:38:4b:ab:d9:89:cf:73:d7:50:
                    85:57:1e:3f:5d:db:3e:38:e7:79:54:bf:bc:a3:b7:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:91:23:5C:F2:B1:49:FA:67:6E:99:61:CE:D9:E9:E6:88:11:0E:AF
            X509v3 Authority Key Identifier:
                keyid:84:B6:E0:EF:21:A4:14:48:78:8F:D7:C6:93:34:F2:BA:EF:CE:66:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B6E0EF21A41448788FD7C69334F2BAEFCE6689.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F739BF2BFC071B9A995E0777D60BF0A6B6F1C96F3ED1C7B302A5399103AC8DBE/0/3139322e3134312e3135302e302f32342d3234203d3e20323635373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:6f:4a:7d:5c:44:d4:4f:57:2c:45:50:a8:45:83:b6:99:41:
         86:ad:01:21:c1:3b:74:15:2f:81:7d:30:b2:15:a5:a1:b8:81:
         8d:a4:97:82:be:09:7a:f1:40:a1:45:48:60:f0:99:fc:e0:e9:
         90:a3:32:35:54:93:80:7f:30:4b:e8:62:55:45:61:c3:e4:74:
         d5:22:a6:5f:59:75:38:61:52:ea:e5:63:86:a1:53:7d:8a:53:
         2d:85:e7:2b:98:ea:43:0e:82:10:01:06:6a:af:8e:86:f2:89:
         e5:bc:9a:b8:60:83:46:38:4f:07:3c:ad:0f:7b:da:b7:fd:59:
         04:e5:4f:56:e0:8b:af:b3:c1:61:a5:45:18:9c:65:b4:7a:c2:
         76:ce:40:de:59:64:6e:4b:dc:26:05:8d:84:0f:4d:54:9b:20:
         2f:7b:85:1c:2a:a1:df:dc:0d:59:de:73:d8:d4:4e:4b:32:24:
         e0:ea:77:ae:78:56:74:f1:3d:fd:5e:d7:fa:82:ff:93:51:19:
         99:6c:90:c9:4f:10:24:5a:35:97:df:fa:e1:23:a8:c5:07:37:
         81:75:95:4c:87:d7:05:01:98:f3:ad:68:e3:18:c5:c2:eb:c3:
         7d:12:b0:4b:fc:c5:d1:d4:5b:85:9b:20:d0:f1:30:23:50:3c:
         0d:c8:a3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:24 2024 by rpki-client on console-ams.rpki-client.org