Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3139322e302f32332d3233203d3e203232313232.roa
File:                     3134382e3230392e3139322e302f32332d3233203d3e203232313232.roa (raw, json)
Hash identifier:          +LqCkgkv9vXUIE943wivx26MTqRCMJRJsSDKsUO/11A=
Subject key identifier:   63:F2:94:02:28:66:6B:F8:E5:5D:C5:B6:16:80:4D:B4:FB:11:45:F2
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       C7D2401F285548C050A0D910FF7148F3194640
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3139322e302f32332d3233203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:39 +0000
ROA not before:           Tue 05 Mar 2024 17:41:39 +0000
ROA not after:            Tue 04 Mar 2025 17:46:39 +0000
asID:                     22122
IP address blocks:        148.209.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c7:d2:40:1f:28:55:48:c0:50:a0:d9:10:ff:71:48:f3:19:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:39 2024 GMT
            Not After : Mar  4 17:46:39 2025 GMT
        Subject: CN=63F2940228666BF8E55DC5B616804DB4FB1145F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7b:da:df:da:ef:2f:6e:66:9a:32:5d:ec:00:
                    08:4d:da:8f:d5:fb:33:be:67:e5:c5:41:eb:2a:a7:
                    4d:e2:13:cc:bf:f7:67:3e:2b:7d:4d:05:0a:89:32:
                    7b:60:fb:40:bf:38:80:80:06:6f:16:f8:94:f3:31:
                    84:9c:c6:ba:45:73:04:22:94:fd:96:45:bc:ed:f2:
                    44:a4:f5:b1:66:b3:51:17:c6:01:84:da:ef:59:ec:
                    f4:aa:c0:88:80:d7:ac:89:05:2c:8a:83:88:db:d9:
                    c1:49:b5:6a:1c:ed:8c:d5:18:3e:7e:44:4b:67:f5:
                    2b:55:37:7b:94:c4:99:8d:ad:bc:d7:88:27:ab:f2:
                    bf:c2:70:4a:8f:20:29:8b:22:41:c7:f6:05:eb:12:
                    32:67:ac:94:1a:bc:4c:dc:d0:32:0c:36:d6:8c:59:
                    15:da:2e:38:91:c3:39:38:d3:b3:31:d8:cc:35:ac:
                    83:ed:1a:d2:75:3b:78:d1:df:f3:bf:a5:af:4a:a2:
                    43:42:ed:de:81:26:9c:7e:e3:6a:6d:6e:dd:77:09:
                    d0:a5:41:58:9a:a2:63:66:65:ba:af:1f:17:57:ae:
                    91:65:6a:dc:20:0b:ad:c3:b1:7c:91:a2:07:ef:82:
                    48:9e:48:6c:7f:49:ac:ce:de:55:9b:07:34:f0:bd:
                    7d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F2:94:02:28:66:6B:F8:E5:5D:C5:B6:16:80:4D:B4:FB:11:45:F2
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3139322e302f32332d3233203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:a6:a4:89:51:91:d2:e5:7a:4f:1d:33:23:9a:f5:d2:7f:f8:
         1a:ba:6a:13:a1:a8:3e:32:f2:d3:98:7a:08:3f:1c:33:2b:e9:
         a5:f5:5b:6d:40:42:b2:54:21:7e:24:e9:71:f5:49:86:00:65:
         64:21:94:7f:80:e0:7e:e8:62:b5:2e:01:e7:30:a1:78:1e:ce:
         4e:b5:a2:90:2a:4d:b6:5a:3d:a6:40:49:fd:31:46:97:db:3b:
         a3:3c:33:e0:22:23:f8:0f:9d:cf:6d:b9:92:91:90:43:c7:64:
         07:53:a6:91:a6:dd:a9:da:0f:57:a2:38:d5:f0:0b:43:8f:44:
         9f:00:20:22:eb:d1:44:64:a8:b5:8e:c8:67:d9:83:a0:29:44:
         9b:6b:f5:78:23:c7:55:fa:bc:75:1d:ed:20:e2:6d:4c:22:ca:
         0d:78:6b:15:74:93:b9:1e:87:aa:62:8a:ad:1f:fc:e9:18:85:
         b2:cf:43:11:19:c4:50:06:cc:17:6e:49:b6:b8:2e:10:d6:64:
         97:64:88:fe:b7:0b:83:b9:33:9e:2f:6f:5b:4b:ba:70:cd:c0:
         5e:14:8c:e6:42:ab:bf:7d:84:84:18:e0:02:cb:67:d0:92:19:
         e0:a5:70:7b:51:30:f2:58:8c:a5:cf:c7:b5:1e:40:ae:05:a9:
         95:15:1b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:57 2024 by rpki-client on console-ams.rpki-client.org