Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3231362e302f32322d3233203d3e203232313232.roa
File:                     3134382e3230392e3231362e302f32322d3233203d3e203232313232.roa (raw, json)
Hash identifier:          KslEcgnp/640fWP680bPecFDGb0wJY1+7+E/BzzaEpo=
Subject key identifier:   42:45:28:DF:2C:AC:28:0B:C9:78:A0:E1:39:92:2B:8D:9C:12:3D:27
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       2A1A28B30CB26ACB9C08C5E163E14C35539588F3
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3231362e302f32322d3233203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:55 +0000
ROA not before:           Tue 05 Mar 2024 17:41:55 +0000
ROA not after:            Tue 04 Mar 2025 17:46:55 +0000
asID:                     22122
IP address blocks:        148.209.216.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1a:28:b3:0c:b2:6a:cb:9c:08:c5:e1:63:e1:4c:35:53:95:88:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:55 2024 GMT
            Not After : Mar  4 17:46:55 2025 GMT
        Subject: CN=424528DF2CAC280BC978A0E139922B8D9C123D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:d2:1a:dd:8a:03:b0:20:06:2c:a0:60:1b:
                    9c:d3:ef:18:d6:26:d2:0c:94:87:2f:94:b2:85:b6:
                    2d:73:ea:ad:19:ef:2e:7d:d9:bf:c2:c9:af:49:09:
                    4e:eb:18:f3:eb:2a:71:2c:c4:52:99:cd:69:71:b1:
                    91:71:f2:17:d8:69:fa:70:83:dc:10:d0:26:c3:07:
                    08:65:0d:51:5c:f6:0c:c7:a3:33:d9:96:d7:61:ea:
                    09:ac:65:0c:6a:16:ca:47:14:10:eb:84:df:3b:51:
                    fd:c4:50:71:c0:df:cc:fb:06:c9:25:c0:f0:ab:76:
                    76:12:7f:58:5c:7e:3d:43:97:38:02:d2:11:1b:36:
                    af:a9:a2:71:d5:23:53:5f:11:33:cf:05:08:b2:2b:
                    48:a0:35:af:02:d8:3e:15:77:e3:e9:ca:5c:c1:02:
                    2e:f3:a5:cf:6a:97:ed:3e:f3:d3:10:82:be:7d:a9:
                    80:60:68:5c:91:dc:70:5f:ae:dc:84:54:45:34:52:
                    91:8d:64:24:37:76:e6:31:21:f1:d1:b8:de:94:1c:
                    50:f4:32:c1:9f:ed:af:1b:dc:2a:2c:55:6b:01:d0:
                    eb:fe:9a:5f:72:b0:38:c7:54:48:28:8a:2f:63:10:
                    dc:41:5a:7f:d0:a8:ff:c3:7f:92:d6:71:b5:4e:1a:
                    fd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:45:28:DF:2C:AC:28:0B:C9:78:A0:E1:39:92:2B:8D:9C:12:3D:27
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3231362e302f32322d3233203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:2d:5f:24:2e:db:ec:e7:66:68:7d:16:a6:c1:0d:76:92:65:
         3b:64:82:57:88:5a:10:a5:3c:eb:8f:b0:78:ad:9e:c5:9a:3b:
         a6:3c:3c:0e:85:53:8e:c6:9b:18:bb:df:97:10:83:6f:f1:90:
         4f:dc:10:2e:8c:03:1f:02:42:34:ac:ba:5f:51:49:fe:ab:f4:
         49:25:49:c8:c7:b5:50:d0:81:46:e7:b9:32:c7:82:18:53:45:
         88:b2:31:c7:bf:fc:f2:6f:b3:bd:fc:0e:aa:6d:56:ad:a5:95:
         79:f9:e2:19:29:63:7d:96:ac:e7:4a:d0:b5:3e:bd:95:a1:5a:
         ac:a2:4d:84:cf:33:22:65:f2:52:1a:02:e5:00:6f:33:fc:ed:
         10:f8:04:c6:db:d7:09:2a:57:48:01:dd:47:89:f6:1c:1e:78:
         83:5c:3a:59:46:28:22:52:eb:d7:4e:e2:0d:9b:37:cd:12:65:
         a8:06:2f:00:50:45:e7:d7:73:36:a7:d9:1e:66:84:11:d0:74:
         de:d5:9e:67:73:50:03:ad:3d:c8:76:cf:6c:34:6f:fb:f2:53:
         cb:30:33:85:7b:12:36:03:30:b4:c1:be:f7:2b:82:2b:cd:13:
         de:67:87:73:84:af:1b:fe:02:0b:b3:ab:01:ef:0a:74:88:36:
         8e:0a:5e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:57 2024 by rpki-client on console-ams.rpki-client.org