Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3232302e302f32332d3234203d3e203232313232.roa
File:                     3134382e3230392e3232302e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier:          VEnQtQzKEtT1BinRuhx3thE7IZhfYw2gS5jN0T127fo=
Subject key identifier:   EA:66:90:54:DF:C3:84:B9:47:4A:72:25:C8:B9:ED:51:EE:F3:28:AC
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       14EE3C7DACA2FF4556C83D6E3318A6977E76E601
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3232302e302f32332d3234203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:50 +0000
ROA not before:           Tue 05 Mar 2024 17:41:50 +0000
ROA not after:            Tue 04 Mar 2025 17:46:50 +0000
asID:                     22122
IP address blocks:        148.209.220.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ee:3c:7d:ac:a2:ff:45:56:c8:3d:6e:33:18:a6:97:7e:76:e6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:50 2024 GMT
            Not After : Mar  4 17:46:50 2025 GMT
        Subject: CN=EA669054DFC384B9474A7225C8B9ED51EEF328AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:8a:8b:bf:25:bd:4c:7f:4b:2f:11:58:85:
                    be:5f:b8:e7:f0:1e:a4:5f:74:a4:18:f2:72:6c:00:
                    ec:c4:6f:39:09:ab:8f:56:8f:db:44:8a:3e:2d:cb:
                    4d:61:b9:3e:bf:da:6e:20:ca:dd:f5:2e:d7:91:f5:
                    dc:ae:a5:75:e5:84:e5:cf:5c:8a:0d:01:66:7e:8b:
                    3e:b7:0d:f5:38:9e:43:72:6e:b9:f3:8a:c9:66:f0:
                    e8:c2:41:e2:fe:7a:e1:91:61:df:fa:53:03:57:f9:
                    c2:c0:18:2f:c2:fe:42:74:5c:a3:36:0c:90:51:e4:
                    a9:67:54:da:f1:da:51:c8:a7:40:20:2d:93:f4:06:
                    6f:a0:ef:d0:77:7d:0d:31:fe:63:67:2b:a5:72:be:
                    e7:9f:7d:c5:f7:96:4c:ce:f0:f5:10:ff:0c:05:aa:
                    21:bd:e1:54:60:a4:1f:42:29:df:2d:cc:27:46:ca:
                    3e:e9:44:da:25:89:4d:97:b1:a4:fa:21:2e:22:f4:
                    77:b2:e6:8e:ea:b5:92:4a:c3:0e:75:ff:e5:9f:3f:
                    a7:f2:99:34:29:2f:98:b3:11:a4:97:5c:c1:17:f5:
                    4d:9a:13:f8:fd:20:31:81:19:16:52:ca:03:02:5a:
                    ac:61:1c:d7:1b:93:a2:99:45:7e:14:cf:39:6a:bd:
                    9d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:66:90:54:DF:C3:84:B9:47:4A:72:25:C8:B9:ED:51:EE:F3:28:AC
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3232302e302f32332d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:39:9c:18:e7:90:ca:b9:47:51:93:48:f8:0f:c1:03:14:d0:
         8c:ac:fd:9c:e8:6e:cb:d9:67:b7:52:2c:47:ca:d3:07:a1:49:
         ea:d8:7f:f2:ae:61:c9:ed:c6:2f:7d:d6:16:ad:eb:a4:b2:ae:
         08:cb:fa:8f:3b:e0:65:0f:c0:c1:1e:c2:5d:98:33:8b:cd:35:
         6f:37:fe:64:6c:19:97:ce:cf:3d:73:09:b7:fd:0f:51:a3:0f:
         c0:ab:3a:ba:e6:71:b3:44:9b:92:58:f1:fd:15:d8:a3:1e:8a:
         8c:d1:c4:e0:4f:94:48:7a:91:d8:0e:44:1c:97:ea:97:bb:a7:
         7e:bd:56:f9:98:1e:2c:e0:ca:3b:f3:f9:60:96:b8:05:c3:a4:
         3a:95:8a:8c:8a:d1:ec:f6:cf:d0:84:ac:01:b7:2f:e1:f3:4f:
         10:50:d1:3d:2f:a6:59:28:36:8f:84:f6:17:9d:b3:86:6e:a6:
         0f:f4:32:33:fc:c4:ee:60:cf:f3:be:de:60:ff:b3:31:d5:b7:
         e2:d2:45:8f:6f:4a:9e:69:ea:de:2a:8a:9b:78:98:01:10:31:
         e6:6b:b8:b3:a4:c2:8c:74:06:6a:b9:35:f0:e5:46:41:fe:c9:
         c7:38:ae:e1:e0:b2:1d:af:38:54:21:fe:28:a1:f9:57:7e:13:
         45:f8:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:57 2024 by rpki-client on console-ams.rpki-client.org