Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3134382e3233302e342e302f32342d3234203d3e20323635363036.roa
File:                     3134382e3233302e342e302f32342d3234203d3e20323635363036.roa (raw, json)
Hash identifier:          /WEbu4qLnkptvAkZj5YZYQGujIOx3Di2895jp7bR1Ug=
Subject key identifier:   55:FB:E9:47:08:43:EA:F2:CE:9E:A6:44:27:BF:52:06:D6:35:E9:45
Certificate issuer:       /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial:       0F82FE7A35FADBEEACC0AC9818B67B1A17858894
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3134382e3233302e342e302f32342d3234203d3e20323635363036.roa
Signing time:             Fri 12 Jul 2024 17:20:00 +0000
ROA not before:           Fri 12 Jul 2024 17:15:00 +0000
ROA not after:            Fri 11 Jul 2025 17:20:00 +0000
asID:                     265606
IP address blocks:        148.230.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:82:fe:7a:35:fa:db:ee:ac:c0:ac:98:18:b6:7b:1a:17:85:88:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
        Validity
            Not Before: Jul 12 17:15:00 2024 GMT
            Not After : Jul 11 17:20:00 2025 GMT
        Subject: CN=55FBE9470843EAF2CE9EA64427BF5206D635E945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:ee:c1:13:52:47:ce:27:af:78:c2:5f:27:
                    5c:f9:6a:9f:3b:16:e4:2f:df:f8:b0:7e:c1:d6:60:
                    81:26:4c:d1:0b:79:34:1b:87:68:5d:ab:a3:10:d9:
                    ef:21:a6:a0:9d:7f:a0:06:f4:6e:a6:ac:87:4c:85:
                    85:c6:3a:42:0b:41:f3:c4:d3:d9:10:1e:2a:d6:04:
                    ff:af:c0:1f:a8:ff:1c:ea:46:06:36:96:8e:32:7c:
                    0e:e6:7c:f8:7d:d4:ec:3f:f4:dd:15:1b:e9:dc:88:
                    e4:d9:ae:6e:ff:a4:88:c4:70:79:63:71:51:d4:a2:
                    ef:69:d0:80:21:13:93:43:f7:3c:7c:f7:86:9b:63:
                    94:dc:80:39:97:e2:a2:1b:bc:42:9b:b8:39:55:82:
                    46:71:88:00:15:15:79:dc:f1:20:fc:8b:e2:ec:0b:
                    24:cc:57:b5:7a:a8:dd:26:85:5f:79:0b:e0:e1:5e:
                    29:2d:39:4f:34:93:a2:6f:7a:71:c7:b9:f4:03:7e:
                    c4:02:ea:81:a9:e1:59:ab:87:a2:f1:88:9b:cf:27:
                    e0:0c:3b:03:94:41:a1:88:ea:21:74:29:ed:91:f5:
                    c3:e1:3a:b6:31:62:b2:89:64:1a:5f:e7:d6:51:87:
                    e9:a3:f1:a5:bd:e0:02:6f:d8:ed:5f:a0:49:dc:bb:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FB:E9:47:08:43:EA:F2:CE:9E:A6:44:27:BF:52:06:D6:35:E9:45
            X509v3 Authority Key Identifier:
                keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3134382e3233302e342e302f32342d3234203d3e20323635363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.230.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:37:d8:cc:67:d2:6b:2c:31:98:60:41:59:00:0a:4a:42:85:
         bb:23:1a:cd:77:37:a5:d5:e9:15:3f:d9:96:14:d0:2a:fa:ed:
         18:9b:41:5b:86:75:ca:d7:47:97:1d:5c:59:44:8c:9e:b6:a0:
         27:72:cf:cd:62:14:73:d3:17:e7:56:5f:72:51:af:37:f9:d9:
         76:01:0b:41:4e:90:9d:7f:cd:84:40:52:9a:d7:b3:81:17:11:
         2d:9a:f7:03:25:d5:05:70:c4:47:71:23:7e:e8:7f:32:fe:1a:
         4e:59:ca:cb:4b:b7:c4:f9:8f:8b:dd:0d:11:72:b1:b7:77:47:
         24:eb:57:a5:86:51:5a:8d:97:a5:79:59:19:a4:e7:a0:fa:fe:
         92:cc:bb:92:98:70:1a:02:8a:8a:4d:96:03:1b:04:14:76:89:
         3a:8d:6f:d7:b8:1d:76:95:db:5c:3a:d7:01:b2:12:3d:b9:4a:
         0b:0e:2e:e4:42:9f:88:08:39:2a:5f:30:66:92:2f:e8:48:69:
         ac:3c:01:e3:60:51:0f:f2:ca:ec:af:b3:ff:bd:be:1a:59:6e:
         8a:98:42:6c:a9:5d:c2:b3:af:b6:e8:f0:59:58:5f:f5:ad:30:
         41:dc:75:f4:d8:e3:8d:b1:f9:79:be:b2:c0:47:8c:0e:8f:23:
         21:aa:09:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org