Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230312e3134382e31362e302f32342d3234203d3e203138373334.roa
File:                     3230312e3134382e31362e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          b4jH63uHjA3bAs6J7gCrXNKvuzjsf9eEpkmhVQZ/xf4=
Subject key identifier:   8E:F4:03:6F:AE:17:46:96:A1:CB:9A:49:CB:29:CA:AD:8C:4D:B5:F8
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       16BB5A374E432A3E85058C5889606BB9658B083D
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230312e3134382e31362e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:36 +0000
ROA not before:           Tue 05 Mar 2024 17:45:36 +0000
ROA not after:            Tue 04 Mar 2025 17:50:36 +0000
asID:                     18734
IP address blocks:        201.148.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bb:5a:37:4e:43:2a:3e:85:05:8c:58:89:60:6b:b9:65:8b:08:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:36 2024 GMT
            Not After : Mar  4 17:50:36 2025 GMT
        Subject: CN=8EF4036FAE174696A1CB9A49CB29CAAD8C4DB5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:61:3a:74:7c:75:88:de:67:74:81:f4:aa:
                    3d:f7:88:01:33:2e:73:41:aa:80:2e:86:f6:eb:b8:
                    3c:51:f0:c2:88:a5:fe:07:4b:8d:0b:1d:62:fe:67:
                    77:b6:9e:53:b4:19:e0:56:0b:8a:51:1b:ad:e9:43:
                    fb:41:b8:75:d5:48:d2:72:2c:29:76:ba:b6:f9:c1:
                    1c:d0:2c:00:6c:e7:89:83:20:b1:6f:b2:b3:c4:9e:
                    cf:74:2a:b5:48:8c:d6:d4:c6:6a:d5:05:5d:c3:34:
                    04:04:77:14:4b:5f:e5:06:96:1c:b1:0a:66:cd:d5:
                    47:61:8b:70:b2:4e:71:5e:94:bb:f5:db:06:ac:52:
                    1e:3e:18:41:eb:7b:05:ea:54:c7:7c:95:a0:d9:cc:
                    18:43:0f:2a:cd:7d:c2:d7:76:c3:ea:6a:12:f0:f8:
                    93:2c:33:ac:de:08:30:a9:78:e7:c7:67:30:6b:77:
                    80:44:9c:b4:44:38:97:47:28:dc:1d:a5:d7:aa:c2:
                    ca:2a:79:1a:31:2d:c6:c7:ad:55:8c:da:f7:de:7a:
                    5d:6c:ad:87:0b:8b:d7:1c:e2:0c:ce:0f:7c:80:37:
                    48:0c:82:3c:e9:ad:93:07:b5:28:5f:15:a1:90:8d:
                    4d:56:3b:20:f9:e2:87:9a:62:be:c8:cd:5c:db:68:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F4:03:6F:AE:17:46:96:A1:CB:9A:49:CB:29:CA:AD:8C:4D:B5:F8
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230312e3134382e31362e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:8e:1f:1e:cf:44:10:2d:24:91:df:49:e8:0e:89:5f:4e:40:
         92:0b:e9:55:69:bb:98:d6:95:8d:11:ac:24:56:3c:cd:29:a2:
         e7:3c:07:98:7f:23:58:4b:dd:93:19:d4:d6:3f:7c:ac:01:51:
         77:a4:1e:36:b3:67:1c:67:34:7a:7d:a4:f6:b9:72:54:09:91:
         7e:35:5e:23:40:8b:25:24:87:a5:01:5a:ef:15:37:f0:05:69:
         6e:37:88:fd:14:87:7a:fd:db:b2:75:ec:d6:15:1e:15:1c:43:
         38:3f:5c:c0:ce:dd:25:8c:d1:5b:72:75:6a:27:37:ce:0f:c6:
         f1:a1:58:ea:62:13:e7:8c:4d:6a:cc:97:fe:f3:e5:14:95:be:
         4a:1f:fa:a4:40:7a:9e:38:00:10:5b:28:91:51:33:80:e7:ee:
         a7:e3:1d:54:91:48:dd:be:38:30:58:51:ca:db:6a:55:ca:3a:
         e4:5b:76:f2:39:c4:f0:99:2f:ab:fc:b2:65:a7:b4:e7:b3:2d:
         8d:e2:46:0b:5a:5a:59:b6:ac:4e:3b:07:15:21:15:09:16:b8:
         d9:a4:8c:c4:2d:36:d3:9f:f3:69:f9:f3:0d:1a:5a:4a:08:5a:
         20:78:96:c9:75:46:ce:d2:ed:d1:9b:fa:e4:cc:8a:cd:d4:4b:
         e3:84:07:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org