Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133372e302f32342d3234203d3e20323730313439.roa
File:                     3134382e3230382e3133372e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier:          0Ky25NpbAIzTvaW6hqoFqQfnJQCfFbwZR7LI1VQZXfQ=
Subject key identifier:   B5:5F:C2:B6:A7:51:D7:BE:77:83:9D:F9:56:E0:AB:E5:BA:D9:E1:73
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       6DE7D1ABD249C58A98F9F82B67C6824E7483A2EE
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133372e302f32342d3234203d3e20323730313439.roa
Signing time:             Fri 27 Sep 2024 13:35:00 +0000
ROA not before:           Fri 27 Sep 2024 13:30:00 +0000
ROA not after:            Fri 26 Sep 2025 13:35:00 +0000
asID:                     270149
IP address blocks:        148.208.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e7:d1:ab:d2:49:c5:8a:98:f9:f8:2b:67:c6:82:4e:74:83:a2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Sep 27 13:30:00 2024 GMT
            Not After : Sep 26 13:35:00 2025 GMT
        Subject: CN=B55FC2B6A751D7BE77839DF956E0ABE5BAD9E173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fe:42:54:71:c3:0f:26:c4:26:a5:8d:3c:bb:
                    0c:7b:80:a3:20:c5:60:59:15:e6:65:06:9d:e7:29:
                    ef:d0:9f:95:17:07:38:05:17:06:63:a4:22:14:8d:
                    d2:c3:ab:fc:42:3b:69:cd:42:39:a6:db:8a:46:cf:
                    41:7e:7e:96:c3:11:a6:92:e5:31:f8:25:0b:73:63:
                    ed:8b:cb:7d:f0:17:56:fd:08:88:a6:d3:16:60:ef:
                    25:71:71:3c:d1:1a:61:db:84:1b:1a:25:10:a1:fd:
                    14:b0:0c:7c:d3:71:ab:b3:7b:12:40:c2:a3:c7:93:
                    30:ac:d1:d0:fa:06:5c:60:e8:62:3c:05:a9:5b:2c:
                    e2:b7:c9:ad:59:1a:33:a3:cc:79:b7:82:75:03:c3:
                    8f:2b:2e:f6:eb:b5:1b:aa:d7:af:30:71:41:bc:44:
                    d6:35:70:f8:68:8d:9c:48:2b:91:84:89:13:ca:2e:
                    e4:e8:89:72:7a:f7:28:78:2c:b7:9a:6b:32:b4:36:
                    cf:10:ff:1c:05:fe:05:d4:0f:ea:ed:a1:26:1c:b6:
                    47:1c:69:e4:4b:12:56:d8:f1:bf:b9:04:5a:14:bd:
                    f7:89:5a:7c:bb:60:e7:13:88:7f:0f:30:03:f8:6c:
                    a2:1a:7f:59:3f:39:5a:67:4b:5c:07:b4:6e:d5:66:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5F:C2:B6:A7:51:D7:BE:77:83:9D:F9:56:E0:AB:E5:BA:D9:E1:73
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133372e302f32342d3234203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:9c:8b:82:c2:9e:a7:35:8b:13:37:c9:20:25:3b:f9:45:61:
         b5:94:72:6e:e3:50:3c:c5:fe:87:4c:b5:bb:7a:c1:cf:82:58:
         c7:96:6a:bc:8f:ea:43:50:f6:42:a4:20:f3:4b:7c:32:1b:fb:
         69:22:83:23:45:5c:bc:ef:12:19:2e:12:c3:9f:5a:a0:53:c0:
         19:e1:60:5a:f4:c0:eb:46:0d:a7:b0:18:ba:f3:54:d9:9c:a8:
         9f:15:45:d0:5a:70:33:f7:19:b0:88:a6:7b:e7:a6:4b:4e:ca:
         fb:fe:93:c9:b5:56:1f:d7:a8:7a:82:8d:e8:16:52:0d:52:60:
         0a:38:e0:76:a9:09:e2:ab:79:3f:97:aa:27:6f:e2:1b:b7:21:
         44:79:87:4c:89:b4:fb:0d:57:7c:1c:2f:35:09:46:df:b9:a6:
         ba:96:5e:78:5d:3e:d7:4d:b0:bf:c9:e8:de:54:63:f7:e9:27:
         db:cb:a1:6f:48:f0:b8:9b:9c:e6:3a:d6:1c:54:35:66:b3:75:
         3b:6f:1f:25:a7:5d:32:19:ba:32:59:74:d7:f6:75:32:21:9d:
         97:f3:8c:f5:8d:6a:8c:b1:0b:4e:9c:86:a7:54:0c:42:4d:9d:
         ee:24:6a:08:de:b0:a0:70:f9:ee:96:ed:7a:5f:4a:9c:9f:f7:
         82:d2:b1:4b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUbefRq9JJxYqY+fgrZ8aCTnSDou4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEExMjY3RENCNERDNkZGQTlGQ0REN0ZFQTlEN0Y5Rjc4
QzM3OTFEQjAeFw0yNDA5MjcxMzMwMDBaFw0yNTA5MjYxMzM1MDBaMDMxMTAvBgNV
BAMTKEI1NUZDMkI2QTc1MUQ3QkU3NzgzOURGOTU2RTBBQkU1QkFEOUUxNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS/kJUccMPJsQmpY08uwx7gKMg
xWBZFeZlBp3nKe/Qn5UXBzgFFwZjpCIUjdLDq/xCO2nNQjmm24pGz0F+fpbDEaaS
5TH4JQtzY+2Ly33wF1b9CIim0xZg7yVxcTzRGmHbhBsaJRCh/RSwDHzTcauzexJA
wqPHkzCs0dD6Blxg6GI8BalbLOK3ya1ZGjOjzHm3gnUDw48rLvbrtRuq168wcUG8
RNY1cPhojZxIK5GEiRPKLuToiXJ69yh4LLeaazK0Ns8Q/xwF/gXUD+rtoSYctkcc
aeRLElbY8b+5BFoUvfeJWny7YOcTiH8PMAP4bKIaf1k/OVpnS1wHtG7VZgavAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUtV/CtqdR1753g535VuCr5brZ4XMwHwYDVR0j
BBgwFoAUihJn3LTcb/qfzdf+qdf594w3kdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0I3QzY5N0U5ODhDMTQ3MjgwMTVGNzVBRDRCRDYyMTc1
NUJCMzk4NzBFQTI4MzFCM0NEMDUzQjk4ODUzM0YxLzAvOEExMjY3RENCNERDNkZG
QTlGQ0REN0ZFQTlEN0Y5Rjc4QzM3OTFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTEyNjdEQ0I0REM2RkZBOUZD
REQ3RkVBOUQ3RjlGNzhDMzc5MURCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNCN0M2OTdFOTg4QzE0NzI4MDE1Rjc1QUQ0QkQ2MjE3NTVCQjM5ODcw
RUEyODMxQjNDRDA1M0I5ODg1MzNGMS8wLzMxMzQzODJlMzIzMDM4MmUzMTMzMzcy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMTM0Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
0IkwDQYJKoZIhvcNAQELBQADggEBAHyci4LCnqc1ixM3ySAlO/lFYbWUcm7jUDzF
/odMtbt6wc+CWMeWaryP6kNQ9kKkIPNLfDIb+2kigyNFXLzvEhkuEsOfWqBTwBnh
YFr0wOtGDaewGLrzVNmcqJ8VRdBacDP3GbCIpnvnpktOyvv+k8m1Vh/XqHqCjegW
Ug1SYAo44HapCeKreT+Xqidv4hu3IUR5h0yJtPsNV3wcLzUJRt+5prqWXnhdPtdN
sL/J6N5UY/fpJ9vLoW9I8LibnOY61hxUNWazdTtvHyWnXTIZujJZdNf2dTIhnZfz
jPWNaoyxC06chqdUDEJNne4kagjesKBw+e6W7XpfSpyf94LSsUs=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org