Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136312e302f32342d3234203d3e20323730313439.roa
File:                     3134382e3230382e3136312e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier:          cyolNHmQcyc+/HGNivDBKg+xLSLYnmIudDux9E+7Crg=
Subject key identifier:   B7:DE:E0:43:1A:89:66:49:4E:C7:9E:48:1D:15:CC:19:FA:6D:0C:A8
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       3F92F7CB16536C68BAF7D01CEE8776C20BB7FE54
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136312e302f32342d3234203d3e20323730313439.roa
Signing time:             Tue 05 Mar 2024 17:42:22 +0000
ROA not before:           Tue 05 Mar 2024 17:37:22 +0000
ROA not after:            Tue 04 Mar 2025 17:42:22 +0000
asID:                     270149
IP address blocks:        148.208.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:92:f7:cb:16:53:6c:68:ba:f7:d0:1c:ee:87:76:c2:0b:b7:fe:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Mar  5 17:37:22 2024 GMT
            Not After : Mar  4 17:42:22 2025 GMT
        Subject: CN=B7DEE0431A8966494EC79E481D15CC19FA6D0CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:53:44:47:27:c6:1d:68:44:7a:7d:e9:6f:
                    fe:17:c1:98:c8:be:70:52:27:b8:9f:d5:eb:09:72:
                    fc:a1:d4:04:45:b7:1f:b9:6c:c5:62:0f:d4:6a:46:
                    32:8c:14:e8:23:62:ea:c3:83:e4:04:e7:4e:31:2c:
                    6c:1b:fb:26:75:70:e2:3f:1b:69:de:1b:7e:bb:f5:
                    59:b4:ad:55:9c:36:c8:90:2a:1d:ea:2c:38:57:e0:
                    30:85:a2:f9:ff:aa:f4:23:50:4c:0f:04:89:99:f3:
                    f5:56:70:a2:ba:19:0e:0d:0b:c1:45:65:91:31:b7:
                    7b:99:bb:de:f8:77:40:13:5d:01:00:aa:50:7e:63:
                    df:52:f1:f9:4b:13:c9:1a:bc:9b:5c:95:2f:ec:75:
                    76:30:4a:24:19:69:a5:0a:16:2b:af:c3:1a:5e:ce:
                    3e:72:5c:22:c2:a4:a5:1e:d1:bf:8c:e4:97:2e:31:
                    5c:ff:1c:9a:3c:ee:7a:5b:ee:4c:14:b6:b5:09:1d:
                    97:aa:ad:a0:72:24:5d:91:21:69:45:37:aa:08:d7:
                    80:8a:08:67:c0:5a:a5:dd:9b:5e:66:10:38:34:9f:
                    6a:b6:3f:53:95:b8:a6:68:bd:f9:a5:cc:71:86:62:
                    4b:a4:41:87:17:8e:f4:2c:52:5a:41:05:c5:86:29:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DE:E0:43:1A:89:66:49:4E:C7:9E:48:1D:15:CC:19:FA:6D:0C:A8
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136312e302f32342d3234203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:71:4c:94:b2:51:84:71:a0:e4:46:61:be:8a:dc:76:7e:64:
         ff:4a:59:c7:4b:f9:ce:bf:61:dd:53:4a:ac:f4:86:f8:67:1a:
         30:4c:09:af:76:3a:7a:66:5e:c6:6b:01:89:9d:f8:cd:92:86:
         17:d7:65:1d:c2:88:ae:63:c5:13:eb:f0:ce:10:58:52:45:bf:
         b1:e6:60:34:b5:dd:82:7c:5f:40:e8:4f:43:d9:92:db:eb:a3:
         47:0d:e8:30:fe:6c:08:de:13:cb:c2:0c:84:70:60:41:f6:ed:
         bf:a7:f5:d0:f3:22:7b:7f:cd:22:51:c7:f4:07:46:ab:97:84:
         4a:d1:c5:b4:0a:52:50:e9:be:8c:f5:bd:80:e1:7c:64:b3:14:
         b8:74:82:2e:df:21:21:35:3e:c8:2d:48:a6:11:3d:ae:a1:c1:
         21:14:44:db:9e:17:06:93:76:b5:ca:20:7a:b3:8a:b4:6f:7e:
         43:b4:92:41:5e:94:c8:a0:74:5d:f8:cb:43:34:67:b3:ea:c7:
         e4:11:f8:23:30:9e:da:3e:ed:0a:ad:81:f1:d1:78:46:c5:61:
         6b:ef:e8:f0:3a:0b:18:25:43:95:e8:f4:16:20:ae:1e:0b:f8:
         01:2f:be:58:e0:e2:29:1b:8a:10:ff:d1:d5:a0:ee:86:9c:8c:
         c8:59:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org