Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e3233322e302f32332d3234203d3e203238313136.roa
File:                     3134362e38332e3233322e302f32332d3234203d3e203238313136.roa (raw, json)
Hash identifier:          m5miaRoYyJOXGNPQuR8DcSaC/P0MGuwySzjkWcWD6ko=
Subject key identifier:   B7:74:EC:63:21:AD:0F:6C:DE:45:E0:4A:8E:7D:49:A4:C7:45:CD:FF
Certificate issuer:       /CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
Certificate serial:       4507E55981C4CE8D57F80FC04B6725EB784F727F
Authority key identifier: 1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e3233322e302f32332d3234203d3e203238313136.roa
Signing time:             Tue 05 Mar 2024 17:58:12 +0000
ROA not before:           Tue 05 Mar 2024 17:53:12 +0000
ROA not after:            Tue 04 Mar 2025 17:58:12 +0000
asID:                     28116
IP address blocks:        146.83.232.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Dec 2024 18:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:07:e5:59:81:c4:ce:8d:57:f8:0f:c0:4b:67:25:eb:78:4f:72:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910
        Validity
            Not Before: Mar  5 17:53:12 2024 GMT
            Not After : Mar  4 17:58:12 2025 GMT
        Subject: CN=B774EC6321AD0F6CDE45E04A8E7D49A4C745CDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:2a:a3:c5:8f:bb:16:fc:91:52:40:b9:a8:
                    37:1c:57:43:5d:44:b3:e9:bd:86:bc:e6:5f:d8:3b:
                    3f:b8:df:b6:f2:3b:c6:b4:e3:ea:b5:82:5b:d5:da:
                    b7:ef:e6:d6:03:79:a1:7e:a2:47:01:1d:51:bc:73:
                    02:dc:d9:09:ca:ff:7c:a9:76:44:43:b5:75:37:29:
                    8a:fb:8f:04:3c:1d:c0:35:ef:d7:95:40:0d:03:e9:
                    05:6c:79:61:ff:4e:a0:9b:8d:5b:db:03:31:49:fe:
                    c7:9c:b9:a8:5f:5e:84:2b:b5:4d:52:fe:98:0a:7c:
                    a9:52:c4:91:99:69:2e:04:53:12:e6:fb:e4:69:82:
                    6a:6c:ce:0b:5e:df:ea:d7:d3:b4:60:a5:c7:6d:82:
                    8d:42:26:55:8a:00:df:d6:c7:55:5a:19:f9:0b:b9:
                    fa:61:be:0d:6a:cc:a6:e1:d5:d8:d7:83:a0:b9:7c:
                    7a:e6:69:a6:d9:c7:f0:bb:c3:35:08:41:d3:1b:84:
                    1c:d2:44:0a:c6:5b:89:57:44:07:e7:ae:26:0c:cd:
                    15:97:7b:07:ad:0e:39:c8:7e:f8:57:08:59:aa:4e:
                    b9:ee:0b:3d:8d:57:53:f6:17:35:bf:1b:73:6e:a9:
                    f7:b4:e1:95:97:a9:0f:b4:ac:6a:0b:de:70:ee:bb:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:74:EC:63:21:AD:0F:6C:DE:45:E0:4A:8E:7D:49:A4:C7:45:CD:FF
            X509v3 Authority Key Identifier:
                keyid:1A:E4:EF:A9:75:B0:42:48:E7:21:8A:3B:CC:F4:F7:C3:DB:9D:69:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1AE4EFA975B04248E7218A3BCCF4F7C3DB9D6910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C4F52DA220C02CD7BEF0182BE0D4BD7E4A140FD805F1C75AEDB78C51C5055A4/0/3134362e38332e3233322e302f32332d3234203d3e203238313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.83.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:b5:f2:b4:96:c9:46:ba:1b:7f:a2:fd:b5:cd:6f:3e:e5:77:
         2a:09:56:4f:b2:49:69:a1:97:ee:2e:0c:32:49:a1:50:70:79:
         ec:be:c0:9d:21:b4:17:ae:07:5a:59:21:3c:04:dd:bb:c4:c2:
         36:bc:d3:be:d3:1e:aa:e7:18:dc:04:3d:2b:78:be:a7:e4:ed:
         40:47:33:25:d4:1d:c9:de:2a:45:ea:b7:0e:0e:e0:3a:9c:78:
         3b:b0:cc:93:fb:ed:74:de:bd:7b:c6:2d:d3:0e:82:71:25:97:
         00:b0:c7:1a:bf:20:3c:ac:dd:53:ac:9a:5b:79:71:e6:b3:08:
         87:95:02:cf:4b:62:2a:b0:ca:a7:a7:2b:71:75:f7:c2:40:8d:
         39:45:0a:fe:6d:ea:20:e0:27:7f:ed:ed:c1:e8:ec:cd:a1:2a:
         25:77:5b:b4:8a:ff:19:df:c7:df:fa:3f:f8:fc:89:43:7f:90:
         45:2d:d3:67:82:e2:b9:10:cf:f8:67:2a:08:34:21:ed:85:72:
         25:0e:a2:f0:8e:fd:3b:74:93:a1:38:ed:c7:51:49:40:67:41:
         00:f9:d3:97:7d:80:df:2f:96:ee:3e:05:a0:3d:af:91:5a:85:
         d4:65:34:5a:0a:cf:d5:1e:af:c5:31:05:f3:aa:37:9d:59:5c:
         e2:07:45:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 15:53:46 2024 by rpki-client on console-fra.rpki-client.org