Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/3134382e3232322e3232382e302f32332d3234203d3e203634313535.roa
File:                     3134382e3232322e3232382e302f32332d3234203d3e203634313535.roa (raw, json)
Hash identifier:          m1yS/dpuzOJOvBY+yqdCc0fcrqzmKHQn1Fzh+5PtJB4=
Subject key identifier:   41:B3:03:20:E2:56:0A:97:8F:42:41:4A:E1:F6:75:CA:6B:80:B6:6D
Certificate issuer:       /CN=BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E
Certificate serial:       5B0E737779DA4D06A7FA4A618C4E7EB377B66D38
Authority key identifier: BD:19:EC:7F:63:6F:DC:AE:69:62:D1:45:47:24:A6:8B:CF:C6:AF:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/3134382e3232322e3232382e302f32332d3234203d3e203634313535.roa
Signing time:             Tue 05 Mar 2024 17:41:21 +0000
ROA not before:           Tue 05 Mar 2024 17:36:21 +0000
ROA not after:            Tue 04 Mar 2025 17:41:21 +0000
asID:                     64155
IP address blocks:        148.222.228.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0e:73:77:79:da:4d:06:a7:fa:4a:61:8c:4e:7e:b3:77:b6:6d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E
        Validity
            Not Before: Mar  5 17:36:21 2024 GMT
            Not After : Mar  4 17:41:21 2025 GMT
        Subject: CN=41B30320E2560A978F42414AE1F675CA6B80B66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:48:ed:bf:64:bc:b1:98:fc:cc:58:36:5e:
                    93:53:97:f6:9a:09:05:ae:3c:2d:65:a2:92:b7:08:
                    7e:0d:9b:64:fd:9d:61:7d:e7:1a:b3:63:26:7f:8c:
                    85:71:21:97:a0:7a:54:44:17:ee:0e:45:6c:86:53:
                    cc:4a:c6:5d:be:59:e6:53:2d:fc:cd:e0:0d:bc:f1:
                    21:f2:b6:20:19:4c:35:48:1d:09:5a:85:30:71:1a:
                    a6:7f:48:24:dc:49:e0:81:84:48:99:38:ae:7b:f8:
                    9b:e4:c4:54:cf:67:e8:88:50:4e:23:65:b3:1c:1c:
                    e6:44:68:3e:44:37:11:ff:4a:61:cd:fc:65:c9:f8:
                    ce:48:d4:26:57:dc:21:15:e1:1b:60:e5:97:17:ab:
                    d7:62:a4:4f:da:9f:7f:56:69:53:c6:1e:6c:50:6c:
                    ed:44:fc:89:12:7f:e2:15:c9:bb:25:a4:4f:ab:bd:
                    38:83:c4:65:45:22:a4:73:c1:6c:d6:cf:93:e3:bb:
                    7e:30:0a:ff:ee:4b:93:98:e1:d0:e2:3a:68:e6:f1:
                    f9:02:88:f8:6d:23:ad:94:3c:e2:6d:8a:d2:8d:5d:
                    8c:31:ca:8d:99:84:ab:d1:b7:ad:41:ea:42:89:58:
                    cf:8d:db:3a:5c:6e:28:a9:b1:22:6b:c9:46:34:6f:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B3:03:20:E2:56:0A:97:8F:42:41:4A:E1:F6:75:CA:6B:80:B6:6D
            X509v3 Authority Key Identifier:
                keyid:BD:19:EC:7F:63:6F:DC:AE:69:62:D1:45:47:24:A6:8B:CF:C6:AF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD19EC7F636FDCAE6962D1454724A68BCFC6AF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E97C023907F2F1C1D0671E546B4566C69ECD5F5E524BDCE5267F6763375BFB0/0/3134382e3232322e3232382e302f32332d3234203d3e203634313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:de:7c:11:fe:8a:2d:7f:52:48:ba:1e:ad:7b:30:7d:00:3d:
         22:fe:b9:f6:9e:fe:8d:38:55:75:59:ee:19:bb:3a:e7:d3:1c:
         2c:6c:d4:00:ec:40:52:43:cf:e7:2c:d5:00:56:8b:ec:d1:14:
         22:80:37:f8:93:22:d6:f8:dd:87:ba:a0:b3:14:e5:19:dd:5f:
         18:6f:89:6c:45:7d:89:9f:69:92:23:db:38:c9:90:90:f8:4b:
         e0:49:56:6d:10:3b:23:4d:c3:c8:0b:86:fd:6a:c6:8b:19:fd:
         04:d6:3b:1e:96:77:30:87:33:dd:ec:18:ae:ff:d5:3c:07:d4:
         75:71:d9:e1:70:df:07:31:85:d6:8f:9a:9b:08:69:b0:d0:64:
         0a:da:60:60:b6:56:42:72:fb:02:aa:83:db:6b:f6:91:40:1d:
         ce:4f:cd:eb:cf:be:67:f5:32:79:8f:fa:a2:55:3a:f8:10:56:
         c4:86:63:3d:06:03:d4:6c:6e:45:12:59:68:95:10:8d:70:46:
         64:1d:9f:d3:3f:5d:d8:ab:ea:05:00:9a:76:9f:3b:2e:00:87:
         79:bc:c5:53:f4:65:41:b0:72:ac:13:5f:e3:dc:64:32:9f:c7:
         ee:83:64:f0:d0:e4:24:e4:a1:d0:58:48:0e:9e:8f:9b:8d:53:
         fc:20:b6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:21 2024 by rpki-client on console-fra.rpki-client.org