Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3134382e3233302e31352e302f32342d3234203d3e20323635363036.roa
File:                     3134382e3233302e31352e302f32342d3234203d3e20323635363036.roa (raw, json)
Hash identifier:          KFR/YiOLCd9cAfIuilXSEjWbqE19TYEscA3o/SiaT7E=
Subject key identifier:   46:05:0D:4B:31:CE:95:06:A6:B0:22:6C:02:53:E0:1A:31:57:48:51
Certificate issuer:       /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial:       1052312908F84C08A6B04610B8368A7BB37DAFD8
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3134382e3233302e31352e302f32342d3234203d3e20323635363036.roa
Signing time:             Fri 12 Jul 2024 17:20:00 +0000
ROA not before:           Fri 12 Jul 2024 17:15:00 +0000
ROA not after:            Fri 11 Jul 2025 17:20:00 +0000
asID:                     265606
IP address blocks:        148.230.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:52:31:29:08:f8:4c:08:a6:b0:46:10:b8:36:8a:7b:b3:7d:af:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
        Validity
            Not Before: Jul 12 17:15:00 2024 GMT
            Not After : Jul 11 17:20:00 2025 GMT
        Subject: CN=46050D4B31CE9506A6B0226C0253E01A31574851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e5:47:23:6f:52:d7:43:51:dc:51:2d:58:48:
                    62:c4:eb:5d:a3:6d:83:df:dc:d2:4f:8b:84:36:fb:
                    3c:1e:58:45:40:e1:e8:78:be:e2:ff:69:56:05:9c:
                    d6:c2:8a:fe:c0:6d:19:ab:67:88:6f:2f:68:9a:fc:
                    e4:b9:c8:0e:43:61:9f:ed:d5:bb:cf:4e:bc:18:55:
                    92:35:80:14:6a:9c:58:b3:41:ff:0a:e3:3b:96:15:
                    85:c1:88:69:7a:ad:0a:41:f1:80:19:94:39:ae:ae:
                    cb:a9:47:13:80:9c:58:9d:83:23:a7:04:d8:96:dd:
                    5c:75:d5:6b:e5:3f:12:c5:96:af:d0:41:44:27:45:
                    e8:6c:05:c6:4a:4b:fd:31:16:f1:a4:7d:11:e2:ee:
                    7a:e0:a1:7a:0e:c2:15:7f:14:ff:45:62:d5:ba:bd:
                    5c:54:7e:4c:1b:41:e0:f3:de:20:6c:75:68:13:0c:
                    0c:34:33:d6:22:59:02:b5:7c:b1:61:b3:7b:71:64:
                    0b:29:e6:9d:0b:79:f6:bb:30:5b:bc:cf:ed:b2:ad:
                    1c:33:38:8b:c5:a9:90:63:32:62:77:86:1d:0c:0c:
                    03:dc:b2:36:f6:ff:65:c1:f4:69:96:02:c4:9e:84:
                    c4:2d:4a:48:2e:9e:2a:88:2b:94:88:3d:30:d6:9d:
                    3e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:0D:4B:31:CE:95:06:A6:B0:22:6C:02:53:E0:1A:31:57:48:51
            X509v3 Authority Key Identifier:
                keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3134382e3233302e31352e302f32342d3234203d3e20323635363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.230.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f9:bd:f2:13:17:c0:ec:b1:40:8f:f0:f7:de:84:32:69:d0:
         62:57:93:fa:d8:9d:54:94:1f:ad:65:b0:30:f5:a4:75:ed:9c:
         50:ae:93:08:44:e4:ef:e7:fe:e1:c5:87:ca:a4:68:4d:da:a9:
         dd:aa:e1:07:1e:03:2a:c4:20:47:03:13:b7:7e:4b:54:65:2e:
         92:42:07:52:c4:60:3c:84:cd:b0:46:18:7c:b7:f7:02:12:45:
         c5:09:dd:8c:eb:c0:40:b0:2e:a1:44:d1:d5:d1:d7:a5:97:43:
         11:d3:00:17:59:77:32:d6:cb:ec:23:26:7e:00:c8:10:86:24:
         dc:46:4b:89:ce:a0:80:79:ad:75:de:ba:59:da:2a:a0:a4:2b:
         68:0a:d7:cb:7d:da:af:d7:40:ee:6e:82:34:9d:48:3e:f0:12:
         00:19:f9:05:ca:f0:d2:e8:e3:4f:be:9d:25:61:0b:c6:74:0c:
         f7:3b:1b:ee:5e:14:5b:2b:92:1b:96:c3:7b:f2:34:6d:3b:ff:
         3f:04:33:e5:96:7d:60:96:de:cb:35:1d:5a:ee:fb:65:b3:a9:
         46:ee:82:7f:3f:45:cc:72:6b:89:08:d5:02:34:64:9b:1e:8c:
         7b:f0:1e:80:16:42:60:4a:27:14:55:88:04:1e:16:38:ca:c8:
         26:21:f1:70
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEFIxKQj4TAimsEYQuDaKe7N9r9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUyMjRBNUMxN0RENTIxQzRCN0Y0OTRCNkFENzFFOTk3
MUQzNEFCRTAeFw0yNDA3MTIxNzE1MDBaFw0yNTA3MTExNzIwMDBaMDMxMTAvBgNV
BAMTKDQ2MDUwRDRCMzFDRTk1MDZBNkIwMjI2QzAyNTNFMDFBMzE1NzQ4NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5Ucjb1LXQ1HcUS1YSGLE612j
bYPf3NJPi4Q2+zweWEVA4eh4vuL/aVYFnNbCiv7AbRmrZ4hvL2ia/OS5yA5DYZ/t
1bvPTrwYVZI1gBRqnFizQf8K4zuWFYXBiGl6rQpB8YAZlDmursupRxOAnFidgyOn
BNiW3Vx11WvlPxLFlq/QQUQnRehsBcZKS/0xFvGkfRHi7nrgoXoOwhV/FP9FYtW6
vVxUfkwbQeDz3iBsdWgTDAw0M9YiWQK1fLFhs3txZAsp5p0Lefa7MFu8z+2yrRwz
OIvFqZBjMmJ3hh0MDAPcsjb2/2XB9GmWAsSehMQtSkguniqIK5SIPTDWnT5pAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQURgUNSzHOlQamsCJsAlPgGjFXSFEwHwYDVR0j
BBgwFoAUxSJKXBfdUhxLf0lLatcemXHTSr4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODIxRjAwNkE2NjgyNTM0RUNGRjBGMTBBMzQ4NDE1MTgz
MTZEQURDMERDMjUwMTgwNDkwMDEyMDg2NjZGNEU3LzAvQzUyMjRBNUMxN0RENTIx
QzRCN0Y0OTRCNkFENzFFOTk3MUQzNEFCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNTIyNEE1QzE3REQ1MjFDNEI3
RjQ5NEI2QUQ3MUU5OTcxRDM0QUJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDgyMUYwMDZBNjY4MjUzNEVDRkYwRjEwQTM0ODQxNTE4MzE2REFEQzBE
QzI1MDE4MDQ5MDAxMjA4NjY2RjRFNy8wLzMxMzQzODJlMzIzMzMwMmUzMTM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlOYP
MA0GCSqGSIb3DQEBCwUAA4IBAQCd+b3yExfA7LFAj/D33oQyadBiV5P62J1UlB+t
ZbAw9aR17ZxQrpMIROTv5/7hxYfKpGhN2qndquEHHgMqxCBHAxO3fktUZS6SQgdS
xGA8hM2wRhh8t/cCEkXFCd2M68BAsC6hRNHV0dell0MR0wAXWXcy1svsIyZ+AMgQ
hiTcRkuJzqCAea113rpZ2iqgpCtoCtfLfdqv10DuboI0nUg+8BIAGfkFyvDS6ONP
vp0lYQvGdAz3OxvuXhRbK5IblsN78jRtO/8/BDPlln1glt7LNR1a7vtls6lG7oJ/
P0XMcmuJCNUCNGSbHox78B6AFkJgSicUVYgEHhY4ysgmIfFw
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org