Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133302e302f32332d3234203d3e203232313232.roa
File:                     3134382e3230392e3133302e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier:          PyQLLbelh4GUsbvwH/IKxCZWTDEmw3H0mRXs3n8ZC30=
Subject key identifier:   0E:CC:B1:04:36:54:A2:21:02:CF:A3:20:A0:FD:85:CF:21:84:5D:E2
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       52249BCFED651BF300752148971BEFA7AB2323C3
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133302e302f32332d3234203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:38 +0000
ROA not before:           Tue 05 Mar 2024 17:41:38 +0000
ROA not after:            Tue 04 Mar 2025 17:46:38 +0000
asID:                     22122
IP address blocks:        148.209.130.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:24:9b:cf:ed:65:1b:f3:00:75:21:48:97:1b:ef:a7:ab:23:23:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:38 2024 GMT
            Not After : Mar  4 17:46:38 2025 GMT
        Subject: CN=0ECCB1043654A22102CFA320A0FD85CF21845DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:e1:e6:41:bc:2a:d2:e9:8b:76:fd:6c:8f:
                    23:78:4a:b6:d3:a6:0c:aa:86:d7:97:41:db:c6:3d:
                    00:e2:dd:93:8e:aa:e1:93:8c:37:c5:de:1d:49:a4:
                    e9:06:f9:2d:dc:4b:92:24:ea:72:f6:c8:29:1f:bb:
                    1e:6f:de:a6:30:b9:21:e7:ae:01:a5:2a:44:96:4b:
                    7d:d4:64:da:9d:c6:b7:33:d4:fd:f8:1c:6a:06:83:
                    e8:5a:3c:d5:4c:90:88:09:73:94:b9:f9:85:52:ef:
                    50:1d:0b:bf:1a:9c:fb:ee:3d:a9:d8:3c:54:f7:a0:
                    c1:0c:02:0a:7c:15:e1:4f:01:aa:a6:74:90:01:e3:
                    32:d1:93:ee:4b:64:43:50:04:38:a7:20:3e:51:b1:
                    69:45:75:5f:37:4a:93:13:88:0b:3e:fb:19:92:c4:
                    fd:b9:76:87:e4:8b:42:74:23:fc:47:49:f8:5f:0c:
                    81:33:92:4c:0d:50:c0:90:94:de:a1:60:eb:05:83:
                    85:e1:ed:79:db:36:8c:e9:58:ec:74:02:c0:33:0a:
                    73:03:20:33:93:7b:1f:0c:88:43:a5:0c:d5:22:0c:
                    91:e6:04:06:ca:80:77:a3:6c:50:aa:81:91:0a:dd:
                    a7:0a:bd:2a:07:c3:08:2f:43:5e:9a:d5:ac:0d:89:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CC:B1:04:36:54:A2:21:02:CF:A3:20:A0:FD:85:CF:21:84:5D:E2
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133302e302f32332d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:97:ad:8a:e0:01:9b:bf:8f:45:76:cc:65:81:97:de:44:60:
         56:3b:bb:de:6a:9a:04:74:b0:29:bc:49:b8:2f:90:47:5b:21:
         0d:b0:f7:53:36:43:46:67:65:5c:69:74:f0:92:d1:b9:67:58:
         8c:fc:7d:dd:5d:60:42:00:ea:b8:12:dd:c8:52:07:22:09:87:
         8b:90:6b:f1:d9:d6:49:20:3c:d1:c7:84:12:d8:f9:09:2b:5a:
         96:14:87:37:c2:65:5a:31:aa:d7:9a:1c:a5:12:ad:4a:d8:2c:
         64:20:fc:fe:5f:a4:6f:c1:5c:08:10:70:15:a9:12:5c:d3:95:
         74:51:f2:6e:a7:fb:06:5f:c2:b0:b9:9a:71:7c:91:02:af:63:
         17:d9:0c:73:59:77:de:33:fd:56:64:b9:de:d2:f2:0b:f5:32:
         35:46:39:83:6f:26:f1:7f:04:0e:56:8e:5a:43:33:59:a9:cc:
         c4:ac:ad:c6:d8:75:fb:9d:9c:fc:73:03:71:09:d2:15:0a:ff:
         2a:5b:3d:8c:2b:c1:11:7b:29:53:a0:57:20:86:ca:5d:e6:6e:
         de:54:56:4f:2a:c9:53:da:0e:3b:25:5d:02:47:a9:b4:b6:3b:
         b6:8f:ac:b2:d9:6b:76:ce:c9:3c:be:d1:20:52:0b:30:a2:20:
         1d:90:8b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:57 2024 by rpki-client on console-ams.rpki-client.org