Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3230362e302f32332d3234203d3e203232313232.roa
File:                     3134382e3230392e3230362e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier:          uywnWvmqfZU5iy1FFzQJiQ/JMc9Z2Hdvn8Wb2A4rYT0=
Subject key identifier:   5F:1A:05:E3:28:72:F1:13:4E:63:E2:D5:1B:4B:21:FB:27:42:4D:48
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       7B68B974806C898C6BF166997F0400588AB0C189
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3230362e302f32332d3234203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:49 +0000
ROA not before:           Tue 05 Mar 2024 17:41:49 +0000
ROA not after:            Tue 04 Mar 2025 17:46:49 +0000
asID:                     22122
IP address blocks:        148.209.206.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:68:b9:74:80:6c:89:8c:6b:f1:66:99:7f:04:00:58:8a:b0:c1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:49 2024 GMT
            Not After : Mar  4 17:46:49 2025 GMT
        Subject: CN=5F1A05E32872F1134E63E2D51B4B21FB27424D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6e:16:bd:30:c9:32:a4:4c:fb:86:4c:c4:b7:
                    8f:23:07:b0:f6:13:48:a7:4e:80:5f:49:c4:d4:15:
                    23:98:e0:d5:05:50:11:86:18:20:ab:bd:47:26:d3:
                    02:c4:88:7c:e1:2e:12:40:f4:3b:ac:00:bc:1a:8e:
                    b1:57:0b:55:c9:27:ab:22:c3:97:3e:b0:0b:37:ad:
                    95:9c:66:d8:df:ff:14:5e:3b:9f:91:57:6f:51:97:
                    42:d8:5e:40:02:57:37:fe:22:ed:0d:d5:6e:86:f4:
                    78:86:d0:fd:9d:94:3f:95:55:28:fa:20:52:b5:d2:
                    34:fb:5e:4e:1f:39:80:bc:b7:90:48:ce:88:94:85:
                    da:e4:c3:8f:db:95:c6:87:bc:b6:ee:45:54:ac:dc:
                    b0:9a:83:8c:9a:88:67:7a:55:9b:26:75:46:d3:d8:
                    01:28:2d:1f:d1:5a:0a:a6:8f:d0:36:3b:2d:5b:61:
                    64:4c:1a:4e:03:e6:ea:55:e5:77:00:a3:db:01:c8:
                    f5:d8:e3:88:27:57:ab:44:d6:0c:cc:c6:85:48:60:
                    16:fa:e9:a9:6e:5b:fc:ad:09:ff:7a:42:9b:d0:c9:
                    69:73:56:84:d2:de:cf:5f:27:f5:8a:0c:0b:1f:67:
                    1b:5b:a4:df:f4:6a:fd:08:f5:50:6f:5d:73:bc:1e:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1A:05:E3:28:72:F1:13:4E:63:E2:D5:1B:4B:21:FB:27:42:4D:48
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3230362e302f32332d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:15:d5:eb:8c:4f:31:41:b6:6c:d3:69:f7:b7:4d:f8:2f:cb:
         6b:a2:b3:f0:fc:6d:bb:eb:ca:88:26:93:19:b9:7f:18:ae:bf:
         98:7c:36:5a:60:c5:41:45:92:c6:04:94:b0:60:29:b7:f1:59:
         c2:ea:c5:b8:b2:cd:f5:4b:e0:ac:9f:e2:d2:a7:71:fe:e5:7a:
         2e:46:f6:45:78:3a:9c:b8:99:0b:09:99:66:8f:8b:82:22:4c:
         54:26:76:79:e5:24:0d:b0:21:20:a7:0d:64:95:fc:ad:52:94:
         0a:c7:4d:1d:a5:27:77:f7:1e:fc:e6:9d:af:9e:5e:af:a6:7b:
         b2:3f:e0:fa:49:a6:9e:19:2d:7e:9f:cf:06:14:31:a3:c8:58:
         d2:d8:31:d0:13:a6:2b:02:fb:93:32:f2:4c:b1:4e:c2:42:6f:
         e5:22:7a:c7:58:63:cc:b8:76:31:3e:a5:40:e0:74:ea:de:0e:
         a3:be:e6:e9:59:92:cf:52:29:aa:e4:a3:03:29:3c:86:07:c5:
         5b:90:ff:29:09:d5:46:8e:00:92:95:97:8e:a6:75:64:af:c5:
         4d:31:f3:6e:e4:53:55:7c:96:b0:63:4d:82:c0:d3:0e:42:1c:
         af:ed:01:35:70:e1:17:18:f9:c7:1e:aa:2a:fa:b5:24:51:b6:
         4e:a6:55:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:57 2024 by rpki-client on console-ams.rpki-client.org