Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133352e302f32342d3234203d3e203232313232.roa
File:                     3134382e3230392e3133352e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier:          WA82CDGoY9ip6C8nlAxqyB5ipSdN7uFgB0rhe+7kClg=
Subject key identifier:   CF:04:0A:9B:EE:69:70:68:D5:D4:D1:5F:CD:22:A0:A1:D6:1A:71:8C
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       25F092F824E411989DD6A95BEBB28519C940B5F6
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133352e302f32342d3234203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:56 +0000
ROA not before:           Tue 05 Mar 2024 17:41:56 +0000
ROA not after:            Tue 04 Mar 2025 17:46:56 +0000
asID:                     22122
IP address blocks:        148.209.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f0:92:f8:24:e4:11:98:9d:d6:a9:5b:eb:b2:85:19:c9:40:b5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:56 2024 GMT
            Not After : Mar  4 17:46:56 2025 GMT
        Subject: CN=CF040A9BEE697068D5D4D15FCD22A0A1D61A718C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:4b:b1:60:dd:52:87:4d:24:79:35:13:67:
                    14:2e:c8:2f:20:d1:34:e9:5c:cb:38:f8:37:81:52:
                    ea:24:2b:bc:d0:61:05:0b:4d:0b:4e:39:ca:3b:3e:
                    5f:b2:c7:aa:08:22:d1:92:0a:41:2f:9d:93:90:e7:
                    ae:10:04:ff:85:6f:14:cd:e0:d5:61:d3:92:f6:9e:
                    cb:a7:ad:b0:22:9b:0a:a0:9b:96:b5:5a:ab:24:41:
                    a5:d0:7f:b5:7e:aa:6e:69:b5:e4:fa:4a:53:9e:d5:
                    4e:e6:1c:77:01:ee:d9:0a:5c:f0:50:31:1e:b5:ec:
                    b4:11:9d:f8:04:f5:f0:8b:f4:26:7b:d2:00:78:c1:
                    b9:8c:c1:65:14:61:e7:74:1a:ae:b3:48:60:26:a2:
                    52:23:76:58:ee:eb:3d:b4:4e:ac:54:18:ab:aa:ec:
                    78:82:e0:78:e1:fc:66:2d:30:e8:af:37:45:f9:4d:
                    f9:76:86:d2:74:d2:53:05:bb:5f:dc:a9:64:d6:38:
                    e0:a6:a7:4f:91:4e:a6:e2:90:f5:a4:87:b1:68:36:
                    f5:60:2a:b0:6d:75:0b:85:12:d0:cd:06:60:e5:29:
                    5c:dc:7e:5a:87:34:58:65:95:27:40:9d:43:36:d1:
                    79:98:53:36:54:fd:ea:44:24:d9:1d:ea:d0:2b:13:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:04:0A:9B:EE:69:70:68:D5:D4:D1:5F:CD:22:A0:A1:D6:1A:71:8C
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133352e302f32342d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:50:5b:a3:60:c9:0e:84:2b:0f:5f:3c:16:ea:f2:57:43:f3:
         90:43:83:cf:0f:f2:d1:78:18:ce:c3:d0:6b:27:4c:33:ab:d4:
         4e:2d:74:b9:ee:68:55:8b:f4:62:14:1f:14:fa:60:bd:ed:6c:
         93:1b:13:4e:9c:6c:3e:a4:47:9a:69:4e:69:73:cb:12:6e:ba:
         7f:57:52:ea:d9:bd:9e:2c:68:8a:61:01:f7:3c:ac:29:b7:74:
         12:b8:60:22:82:dc:26:e1:60:c0:7e:a3:66:7c:7a:00:7c:5c:
         6a:65:11:f6:ae:27:87:07:55:7e:cb:79:c2:34:f1:79:2c:7f:
         07:42:0d:ea:c1:01:8c:b0:19:7f:0c:5a:6c:c0:f1:3a:74:3a:
         13:6c:48:5c:9f:46:2d:be:28:9d:d7:52:b2:0f:f9:4f:d4:60:
         84:16:34:54:67:8e:fd:93:73:a1:bf:2b:05:fc:4f:7f:f9:86:
         89:5a:79:d8:fa:fe:91:a6:16:11:2e:82:5e:56:ee:0e:0e:80:
         cb:ec:cb:da:e0:9a:8b:8e:56:f1:e1:37:ce:26:03:bb:3b:26:
         28:e1:a6:af:4d:29:d1:a9:03:6f:18:66:0c:63:6a:8d:55:3a:
         17:02:6b:4f:45:3f:cb:0c:93:df:88:6e:6f:28:25:12:17:9f:
         54:07:c6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org