Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3234382e302f32332d3233203d3e203232313232.roa
File:                     3134382e3230392e3234382e302f32332d3233203d3e203232313232.roa (raw, json)
Hash identifier:          7LfbjHVCGiB+fO85mqmWTfO1rOQD1qFNDq48lOzBBuc=
Subject key identifier:   9C:45:7D:1D:8B:75:2C:42:2B:1B:9B:E9:CB:F6:1D:A5:D3:A0:30:F7
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       469DC602358CB9A1A53E0414CDB35449FE9D65A8
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3234382e302f32332d3233203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:53 +0000
ROA not before:           Tue 05 Mar 2024 17:41:53 +0000
ROA not after:            Tue 04 Mar 2025 17:46:53 +0000
asID:                     22122
IP address blocks:        148.209.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9d:c6:02:35:8c:b9:a1:a5:3e:04:14:cd:b3:54:49:fe:9d:65:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:53 2024 GMT
            Not After : Mar  4 17:46:53 2025 GMT
        Subject: CN=9C457D1D8B752C422B1B9BE9CBF61DA5D3A030F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:7e:b6:b7:a7:92:fc:17:06:75:c0:a3:9d:
                    ed:95:25:1e:35:74:9d:14:09:60:48:c0:77:a3:99:
                    5c:18:cf:04:e8:f9:b6:c8:07:d3:b7:fc:9b:ee:76:
                    33:48:01:8e:18:72:9a:4c:6f:7c:72:17:5c:18:53:
                    44:79:4c:26:93:13:9f:37:d2:aa:ec:3a:05:13:80:
                    a7:56:c1:07:e6:bd:ab:a3:4d:a4:3a:93:29:fe:3b:
                    4f:29:f8:52:0c:ac:31:cb:ce:ac:e8:a9:f6:b6:62:
                    05:d0:5b:49:85:b2:df:2e:21:fd:1a:52:f4:50:c9:
                    f3:c7:61:80:77:0a:fc:e9:2d:85:16:c5:25:31:6c:
                    96:c0:f2:4b:86:c4:e3:ff:fb:5f:44:b5:db:41:70:
                    8c:b9:08:ed:77:04:c9:8e:3a:73:85:89:25:eb:6d:
                    08:4b:e1:ac:7b:f3:31:85:61:39:41:4e:c0:f5:6a:
                    3f:a0:32:78:cf:01:25:e2:ef:32:e4:62:d0:68:27:
                    03:12:c7:57:71:e0:9a:cc:a2:1f:e2:7f:82:a4:49:
                    94:c4:6f:eb:77:86:97:95:31:d7:4b:2d:96:db:23:
                    33:32:24:22:5d:73:6f:68:c9:d9:16:6c:61:41:e6:
                    66:f0:36:25:9a:27:92:aa:d6:bf:11:60:dc:a2:c2:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:45:7D:1D:8B:75:2C:42:2B:1B:9B:E9:CB:F6:1D:A5:D3:A0:30:F7
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3234382e302f32332d3233203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:79:8b:01:cf:55:97:8a:7e:6e:46:34:fb:a1:9f:bd:8f:19:
         98:bc:0a:b2:5a:d3:e5:26:0e:c9:91:57:cf:53:69:f4:87:58:
         c0:ad:ee:ae:d2:5e:a4:bd:67:4a:3e:8b:0d:87:0a:78:37:17:
         d5:46:e7:3c:cd:96:7e:58:2c:df:8b:93:4d:86:bb:11:ed:c1:
         ea:bb:e2:96:f5:f6:ae:f0:e1:91:39:13:47:ae:4d:b6:08:5c:
         62:9d:8d:65:eb:93:f1:c2:19:80:07:9d:39:9f:6b:26:03:a8:
         f7:a4:60:d7:8a:60:8b:1c:fe:0e:3e:1a:55:90:fb:7c:99:5e:
         8d:d8:46:6d:6d:df:86:a2:b7:7b:7e:fa:81:1c:d0:0e:03:2b:
         fc:a7:ce:a7:94:a3:15:96:7c:a1:d1:2c:9d:da:e4:60:fc:b2:
         96:42:6b:c6:f6:dd:53:48:90:ce:00:7e:34:85:8b:ce:5a:4b:
         ad:3a:f5:fe:06:13:dc:53:0d:97:b5:22:a0:27:9d:b4:b7:b2:
         2b:77:5d:3f:d2:68:bb:9f:1b:8c:b6:94:a1:20:15:12:6e:7c:
         80:cd:1a:8b:6d:c8:d5:c8:1b:62:00:5d:cb:83:5a:6e:29:b2:
         11:97:c6:8b:b1:a3:e2:7f:be:ca:de:17:95:fc:fb:03:d8:44:
         81:1d:87:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:57 2024 by rpki-client on console-ams.rpki-client.org