Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136332e302f32342d3234203d3e20323730313439.roa
File:                     3134382e3230382e3136332e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier:          6d68BDg3HhiRERhQoa+a7Hsxf2OghkeqI0SqKftaM34=
Subject key identifier:   9C:76:59:C3:41:CC:5B:11:59:70:CC:B2:BD:A2:0E:52:2E:74:A3:22
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       5CFB8273A0682DC6EE4173F2626FF3E469883777
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136332e302f32342d3234203d3e20323730313439.roa
Signing time:             Mon 25 Mar 2024 16:30:00 +0000
ROA not before:           Mon 25 Mar 2024 16:25:00 +0000
ROA not after:            Mon 24 Mar 2025 16:30:00 +0000
asID:                     270149
IP address blocks:        148.208.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fb:82:73:a0:68:2d:c6:ee:41:73:f2:62:6f:f3:e4:69:88:37:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Mar 25 16:25:00 2024 GMT
            Not After : Mar 24 16:30:00 2025 GMT
        Subject: CN=9C7659C341CC5B115970CCB2BDA20E522E74A322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:8f:e0:3d:78:c2:17:bc:54:4f:a2:80:ee:
                    0b:8b:36:2f:42:21:9e:8e:2d:1e:9a:4b:5a:72:9e:
                    a8:25:ee:51:86:72:a4:f1:29:c4:b2:5b:1b:71:d9:
                    a4:e9:c2:91:5d:a4:c0:cc:55:df:29:8e:f3:2d:93:
                    89:7c:d0:3c:45:73:62:0e:ec:d2:5d:31:b9:c9:c5:
                    39:bf:17:15:01:05:ad:19:fb:0e:19:bb:66:2f:a1:
                    00:57:f2:77:b0:0d:26:6b:33:9c:e2:09:72:04:de:
                    72:32:64:cd:8a:d4:da:25:aa:7b:12:61:22:bf:7d:
                    9d:bd:3b:4a:3a:bf:41:40:ea:1a:3c:55:73:a0:2a:
                    b5:fb:6a:ce:2f:8a:67:a8:39:f0:a8:56:ec:3f:0b:
                    d8:0b:c9:97:9e:31:bb:69:8f:d4:c2:2d:73:0a:2c:
                    ec:c9:7a:6e:4d:7e:e9:50:58:3b:d8:5e:d9:e0:41:
                    f9:e3:a6:1e:72:e8:c3:d7:ec:d5:ce:93:96:66:3f:
                    0c:4b:cf:03:a1:1a:5b:70:c9:ff:8b:53:88:87:58:
                    ce:88:f1:ac:48:0d:c5:cb:f9:35:e6:ba:dc:58:68:
                    21:d3:5a:2e:52:9b:33:ed:a1:eb:94:a9:ff:34:2f:
                    7f:82:bc:d8:95:5a:e6:79:06:c4:2c:ff:9b:42:8b:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:76:59:C3:41:CC:5B:11:59:70:CC:B2:BD:A2:0E:52:2E:74:A3:22
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136332e302f32342d3234203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6b:30:f3:e3:57:95:8a:05:8d:e5:a9:d5:bc:18:2e:b0:be:
         24:45:df:b9:39:c3:9e:0a:e7:53:50:f0:46:2c:37:de:bb:b3:
         92:a7:1b:75:61:5f:6c:ce:ac:aa:11:68:68:9c:83:ca:61:a1:
         25:9c:b8:0e:4b:1c:91:77:d3:7d:f2:36:e7:a0:b8:f0:06:11:
         3c:88:7a:20:35:34:8d:75:b2:f9:81:a0:a7:29:1b:c4:f3:c6:
         0a:4c:61:6e:62:dd:c3:f6:78:80:3e:69:9f:e4:95:3a:a8:76:
         5c:66:d3:c1:0c:33:27:40:e4:fe:d4:49:28:14:4f:8b:5f:c8:
         51:5e:9c:90:bf:2c:51:b1:04:00:89:a5:9f:e8:4b:05:60:77:
         59:83:79:2e:a6:33:8d:f1:a6:e6:0b:4f:b1:12:90:40:c2:7c:
         8b:13:23:1e:a8:08:3c:ce:41:14:b5:e1:17:51:c2:2c:88:4c:
         a4:35:76:41:47:01:f5:f2:70:ce:01:10:58:1d:4a:6d:66:fe:
         d0:25:75:f8:26:cd:a3:95:e9:4c:f9:56:a9:84:86:c3:c4:99:
         24:63:47:ce:c6:92:ea:c9:66:0b:f4:9b:43:62:0f:42:50:cd:
         38:cc:4d:7d:df:7a:ea:fa:69:a1:42:5e:8b:8f:6a:96:df:18:
         84:9e:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org