Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133382e302f32342d3234203d3e20323732333233.roa
File:                     3134382e3230382e3133382e302f32342d3234203d3e20323732333233.roa (raw, json)
Hash identifier:          XjO7kQztLNuHWm5UYon4ktgZ8bzuCY/xzWym0TV8lsA=
Subject key identifier:   AE:3F:E3:E4:D5:F9:EC:66:D5:BB:28:60:D5:89:2C:83:BB:95:BB:6B
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       6AB4C2AE2633E07E046D2CF9D79BB6D02D4C0B32
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133382e302f32342d3234203d3e20323732333233.roa
Signing time:             Thu 26 Sep 2024 23:50:01 +0000
ROA not before:           Thu 26 Sep 2024 23:45:01 +0000
ROA not after:            Thu 25 Sep 2025 23:50:01 +0000
asID:                     272323
IP address blocks:        148.208.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b4:c2:ae:26:33:e0:7e:04:6d:2c:f9:d7:9b:b6:d0:2d:4c:0b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Sep 26 23:45:01 2024 GMT
            Not After : Sep 25 23:50:01 2025 GMT
        Subject: CN=AE3FE3E4D5F9EC66D5BB2860D5892C83BB95BB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:f8:fb:1e:18:b8:29:da:96:93:0a:d1:1d:
                    84:10:ba:c9:cc:d9:da:1d:2e:8f:43:88:78:f5:1d:
                    63:03:d2:a8:da:4c:d3:3f:49:2d:0a:e3:72:4c:7d:
                    c7:64:97:88:83:4e:db:59:08:87:18:b8:ff:3a:74:
                    7c:cd:89:d1:38:39:4e:fc:de:01:9f:74:e7:71:e4:
                    03:90:b5:33:6d:3d:7c:63:87:0b:05:1c:37:e8:78:
                    fd:d4:35:7f:b6:60:7f:f3:55:b2:10:1a:b0:2b:8e:
                    59:1b:be:92:4d:69:cd:72:ed:3f:7c:7c:c1:ab:64:
                    53:2d:a6:87:4b:19:c5:26:b2:e4:df:a6:27:0a:c8:
                    cf:9d:9f:22:16:1b:9a:c9:d8:a2:c1:29:c8:b6:0d:
                    89:e0:ca:b4:b0:db:66:f9:4d:e7:f1:d7:eb:59:d2:
                    be:d8:cc:81:f2:f6:52:b6:08:9c:ce:cd:e3:93:4a:
                    91:bf:c1:42:82:ee:a8:cd:2b:6e:9b:c2:d3:1c:ce:
                    54:fb:19:57:d8:00:c0:8e:da:c4:12:3c:a1:13:0a:
                    58:13:e1:d4:63:fe:af:ea:76:3a:1d:2c:ff:a5:6e:
                    2d:3d:08:94:7f:f2:f1:6e:e3:fd:e3:ab:66:af:10:
                    cb:03:5f:f7:61:ef:af:9c:47:63:c9:62:7d:4b:13:
                    c2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3F:E3:E4:D5:F9:EC:66:D5:BB:28:60:D5:89:2C:83:BB:95:BB:6B
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3133382e302f32342d3234203d3e20323732333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:05:74:a3:0b:e2:fa:fc:07:90:aa:de:2c:17:78:f9:02:c5:
         f8:8d:c8:bf:6e:1a:b5:ed:64:3f:6c:68:8b:eb:c3:df:e1:87:
         e3:89:55:c4:e8:b2:86:3c:4d:3e:9b:83:69:fc:27:ba:47:ff:
         ba:36:93:e0:60:54:38:23:23:2b:e5:d6:b2:d1:95:03:b1:a5:
         f1:41:33:62:7d:85:39:84:70:83:8d:08:47:19:a9:f9:b5:6b:
         a0:e6:68:ba:58:f7:b9:a5:43:85:ce:df:d7:e0:29:5d:28:1e:
         b8:90:e5:2b:51:88:6b:82:34:ce:d4:74:4d:20:bf:eb:83:9b:
         7c:15:5e:b1:20:1d:aa:2b:85:e4:3a:d7:e7:6c:61:b7:96:d8:
         d4:db:cb:8e:fe:51:18:54:75:82:fa:fe:a1:19:0e:5d:8c:f6:
         28:4a:3a:68:7b:9f:fe:7c:29:bc:64:37:06:e7:3c:2c:8f:36:
         84:59:0f:b0:95:8d:7d:17:a8:91:67:af:10:b5:45:ac:53:84:
         b6:91:7c:7b:ec:3e:0c:46:2a:24:19:30:49:73:30:25:06:04:
         e0:a8:df:7d:06:6c:e3:98:a2:8e:3f:09:ab:e9:ee:66:60:2e:
         d7:d4:6b:0c:cf:00:7f:ef:91:dd:3a:2e:63:69:33:42:e7:b6:
         58:dd:00:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org