Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e302e302f31362d3234203d3e203232313232.roa
File:                     3134382e3230392e302e302f31362d3234203d3e203232313232.roa (raw, json)
Hash identifier:          /7g0IHulr22ZCqPbkCj7BLvcnJEvWFX2IEyuBgPTr9g=
Subject key identifier:   D0:6A:E0:6C:3C:45:A3:A6:8A:FC:75:CF:FE:ED:AD:D3:A6:9A:D5:51
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       341DE828F40386B274399C58F0DD7B572A43D450
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e302e302f31362d3234203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:47 +0000
ROA not before:           Tue 05 Mar 2024 17:41:47 +0000
ROA not after:            Tue 04 Mar 2025 17:46:47 +0000
asID:                     22122
IP address blocks:        148.209.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1d:e8:28:f4:03:86:b2:74:39:9c:58:f0:dd:7b:57:2a:43:d4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:47 2024 GMT
            Not After : Mar  4 17:46:47 2025 GMT
        Subject: CN=D06AE06C3C45A3A68AFC75CFFEEDADD3A69AD551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:50:54:e8:6e:c6:e6:fd:ca:0f:90:b6:47:1d:
                    0e:ff:b3:90:bf:42:6a:6f:c8:5f:9a:d1:ee:b3:b2:
                    9e:82:36:b8:ee:af:aa:0b:02:f8:dc:fa:38:98:90:
                    05:68:34:13:bf:11:e4:af:6c:64:1c:b9:82:c6:ac:
                    69:ca:14:66:2b:62:b6:28:03:70:a3:7f:b2:e2:8c:
                    a9:0d:51:4a:a1:5c:04:07:8d:1e:5e:ba:cf:15:80:
                    b2:16:4e:36:45:ee:4c:9e:55:41:94:e5:d6:56:4d:
                    f7:9f:03:43:45:5a:fb:45:16:ec:5a:d9:d6:80:9f:
                    e3:6a:e8:97:ad:72:6e:83:f2:90:e4:ef:1c:d7:11:
                    cf:d1:89:8b:aa:01:85:7b:72:ce:3d:6f:ac:d7:00:
                    31:48:ff:9a:4d:53:8f:e3:8a:61:06:e6:d5:ad:91:
                    c1:4c:93:df:73:8f:d7:80:ec:ee:25:c5:ed:e0:57:
                    2f:67:b1:c4:84:8f:64:82:cd:b3:ce:0a:00:07:02:
                    8c:e6:42:5e:de:73:2a:3a:77:db:a3:cf:34:c3:d1:
                    45:20:ee:01:d0:74:ed:f1:90:b4:51:fe:6d:74:a3:
                    60:a8:6a:53:3b:29:d5:92:5d:f8:fe:09:c6:f0:ec:
                    74:a0:c2:c3:23:51:25:ea:0a:75:e0:e9:cf:83:f6:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6A:E0:6C:3C:45:A3:A6:8A:FC:75:CF:FE:ED:AD:D3:A6:9A:D5:51
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e302e302f31362d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:05:70:41:c9:4b:74:64:6b:54:89:52:3f:1d:0b:d8:98:6f:
         bb:ee:8d:75:19:6c:38:0b:0e:2d:77:ff:99:73:1e:90:b7:01:
         d3:e5:3f:9a:34:11:12:be:84:0e:46:8b:65:5e:fb:e8:46:b9:
         11:09:67:dc:c0:a8:55:4e:8d:4e:36:39:64:5e:6f:fc:18:09:
         8a:d3:de:19:07:31:25:e7:10:0d:0d:e9:3d:3d:b2:06:b1:bf:
         ed:32:c3:93:c3:e1:3d:e8:e5:3a:c2:5e:98:ba:e3:cf:be:1c:
         98:6a:e3:61:a0:75:83:22:96:c8:88:5f:0a:22:fe:ca:25:2a:
         90:be:92:4f:91:2e:10:cc:0c:6d:0d:f0:10:46:ae:2c:7a:7b:
         43:37:00:ef:f5:c4:e6:f2:20:ea:e2:3e:20:a1:3a:d0:6b:86:
         30:cd:59:2e:55:2a:a3:56:1d:3b:63:12:95:bc:ef:f0:cd:cc:
         3a:5f:60:3d:10:65:e5:22:88:ec:a4:e1:ea:ab:fb:09:2a:8e:
         ca:1f:84:75:e5:d2:92:ab:eb:04:5a:f8:9a:8a:80:dc:08:a6:
         66:f8:b1:3d:2b:3b:52:01:61:f9:92:a2:1d:e9:d2:64:b2:0a:
         25:74:1d:f8:b4:91:dd:85:e4:44:bb:c1:f9:6d:30:3d:78:d1:
         b3:76:ab:5e
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUNB3oKPQDhrJ0OZxY8N17VypD1FAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3
NkQ2N0FGQTAeFw0yNDAzMDUxNzQxNDdaFw0yNTAzMDQxNzQ2NDdaMDMxMTAvBgNV
BAMTKEQwNkFFMDZDM0M0NUEzQTY4QUZDNzVDRkZFRURBREQzQTY5QUQ1NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUFTobsbm/coPkLZHHQ7/s5C/
QmpvyF+a0e6zsp6CNrjur6oLAvjc+jiYkAVoNBO/EeSvbGQcuYLGrGnKFGYrYrYo
A3Cjf7LijKkNUUqhXAQHjR5eus8VgLIWTjZF7kyeVUGU5dZWTfefA0NFWvtFFuxa
2daAn+Nq6Jetcm6D8pDk7xzXEc/RiYuqAYV7cs49b6zXADFI/5pNU4/jimEG5tWt
kcFMk99zj9eA7O4lxe3gVy9nscSEj2SCzbPOCgAHAozmQl7ecyo6d9ujzzTD0UUg
7gHQdO3xkLRR/m10o2CoalM7KdWSXfj+Ccbw7HSgwsMjUSXqCnXg6c+D9iFrAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU0GrgbDxFo6aK/HXP/u2t06aa1VEwHwYDVR0j
BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw
OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC
MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5
RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0
MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzIzMTMyMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCU0TANBgkq
hkiG9w0BAQsFAAOCAQEAFwVwQclLdGRrVIlSPx0L2Jhvu+6NdRlsOAsOLXf/mXMe
kLcB0+U/mjQREr6EDkaLZV776Ea5EQln3MCoVU6NTjY5ZF5v/BgJitPeGQcxJecQ
DQ3pPT2yBrG/7TLDk8PhPejlOsJemLrjz74cmGrjYaB1gyKWyIhfCiL+yiUqkL6S
T5EuEMwMbQ3wEEauLHp7QzcA7/XE5vIg6uI+IKE60GuGMM1ZLlUqo1YdO2MSlbzv
8M3MOl9gPRBl5SKI7KTh6qv7CSqOyh+EdeXSkqvrBFr4moqA3AimZvixPSs7UgFh
+ZKiHenSZLIKJXQd+LSR3YXkRLvB+W0wPXjRs3arXg==
-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:57 2024 by rpki-client on console-ams.rpki-client.org