Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233362e302f32332d3234203d3e203232313232.roa
File:                     3134382e3230392e3233362e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier:          yPBpcx/LIkWsJhPvG/C33Rkvw7U+rRsuArPCx/LJI44=
Subject key identifier:   0D:31:26:2F:44:78:87:49:F6:F2:99:C5:B2:BA:99:62:8B:B8:9C:84
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       33FCBCE7B2B1A4E7F9C242075AE2F20A8173B360
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233362e302f32332d3234203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:41 +0000
ROA not before:           Tue 05 Mar 2024 17:41:41 +0000
ROA not after:            Tue 04 Mar 2025 17:46:41 +0000
asID:                     22122
IP address blocks:        148.209.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fc:bc:e7:b2:b1:a4:e7:f9:c2:42:07:5a:e2:f2:0a:81:73:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:41 2024 GMT
            Not After : Mar  4 17:46:41 2025 GMT
        Subject: CN=0D31262F44788749F6F299C5B2BA99628BB89C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:47:bc:39:25:9c:3a:73:8e:c7:bf:2b:c4:
                    dc:21:33:17:6d:3f:2f:fa:90:db:f7:a8:ec:bb:80:
                    28:27:ab:65:96:d3:5f:5e:d4:19:93:a0:81:33:c2:
                    a7:25:0b:0e:33:b4:8e:4a:e0:7d:c4:74:15:8c:98:
                    a4:e9:1d:d7:53:96:2d:5e:11:4b:85:ab:e8:de:7c:
                    23:90:17:18:ae:c5:76:30:7f:43:13:82:d7:c8:da:
                    c5:ab:16:23:9a:42:bc:b3:87:d8:4f:5f:fe:7a:1b:
                    72:12:8e:b5:98:dc:18:59:1f:12:6d:d2:47:40:ba:
                    a5:30:74:1c:ef:a1:2e:54:33:4e:71:f5:d3:65:06:
                    fd:37:46:1b:18:02:60:c4:45:43:ef:f0:13:15:be:
                    f2:0e:63:01:75:54:04:97:b3:62:19:26:13:93:9a:
                    50:6a:cd:ac:3b:2d:93:ba:77:f5:f7:50:03:8c:4f:
                    25:4a:90:be:ef:1f:0d:5a:5d:90:b3:a8:2f:f6:6c:
                    63:22:05:d4:f0:09:6d:37:a3:64:08:1e:77:ad:11:
                    45:d5:b6:77:4f:68:15:c0:5a:8e:71:17:6a:ce:19:
                    0f:07:ca:87:23:3b:ec:ed:f0:a0:8c:ce:36:81:52:
                    82:c1:3b:5e:76:a5:9b:18:53:16:0b:a9:fd:d0:4f:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:31:26:2F:44:78:87:49:F6:F2:99:C5:B2:BA:99:62:8B:B8:9C:84
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3233362e302f32332d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:03:06:10:07:80:e6:1a:16:4e:c9:94:43:c5:d3:3a:c9:a4:
         f6:7f:16:4d:0f:21:b5:e6:d2:c0:71:f2:71:3f:5a:28:71:df:
         d3:3e:a4:3f:1b:7c:80:c3:7d:96:4c:56:62:54:f7:08:fc:34:
         4c:c8:3e:6b:be:3e:16:bc:9f:df:24:ca:aa:fe:17:03:f1:d2:
         08:c8:9a:0f:ca:17:52:f7:70:c3:af:3a:9d:8b:93:18:59:06:
         2f:e9:a7:68:95:b2:7d:af:0a:bc:d2:8a:38:cd:2b:ce:49:09:
         46:3d:83:66:87:39:3d:24:92:f9:85:c4:ce:b9:27:1f:3c:65:
         ae:b6:2f:33:ba:81:03:70:a0:19:14:99:a7:25:e9:80:75:b2:
         7c:ff:6e:c2:8f:52:4d:39:b4:9c:8c:92:bb:17:64:c6:3e:05:
         aa:7e:7b:fb:72:02:bf:e7:5d:b0:38:a1:1a:48:a0:54:44:b6:
         87:8e:a5:49:21:7f:66:49:78:2d:b3:c8:8a:db:3b:59:de:76:
         ca:61:75:c8:03:1b:0d:2a:fb:38:4a:fa:5b:a2:8d:27:ae:54:
         aa:39:db:d0:56:de:a1:ba:3c:9c:3d:2d:a9:09:5d:78:0e:18:
         43:c1:95:21:71:b4:38:2f:7e:fc:3d:09:82:b9:da:e0:bf:af:
         de:7c:07:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:46:19 2024 by rpki-client on console-fra.rpki-client.org