Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e33322e302f31392d3234203d3e203232313232.roa
File:                     3134382e3230392e33322e302f31392d3234203d3e203232313232.roa (raw, json)
Hash identifier:          J9gt3CbmX5QBVn0ziyk1ZIWhmTQItGON+caIu3vtdtY=
Subject key identifier:   85:01:D9:BA:02:6F:4C:72:87:5A:02:FC:C8:C7:AF:30:9E:31:F2:79
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       52A3104DF38AA9F61E1CBF896592ADADB8D33453
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e33322e302f31392d3234203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:53 +0000
ROA not before:           Tue 05 Mar 2024 17:41:53 +0000
ROA not after:            Tue 04 Mar 2025 17:46:53 +0000
asID:                     22122
IP address blocks:        148.209.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a3:10:4d:f3:8a:a9:f6:1e:1c:bf:89:65:92:ad:ad:b8:d3:34:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:53 2024 GMT
            Not After : Mar  4 17:46:53 2025 GMT
        Subject: CN=8501D9BA026F4C72875A02FCC8C7AF309E31F279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:f2:b8:2c:a0:e7:a5:24:86:48:c3:1c:b8:
                    c7:f3:cf:7e:61:88:cc:63:5d:38:33:3d:f5:98:fd:
                    1f:d1:65:53:01:b6:f4:ca:1b:e5:c4:b3:8b:88:e8:
                    37:52:eb:f8:58:03:10:91:22:5f:9b:b4:fe:44:30:
                    df:7b:d7:23:73:b4:a4:bf:c0:72:f3:a1:69:f9:3b:
                    cd:91:46:a3:b4:ad:93:a7:68:f1:01:a6:e7:1f:09:
                    b9:9b:61:f3:be:b4:3a:a6:62:22:9e:c3:a7:da:7a:
                    76:5e:7a:35:dc:bc:fc:5a:7f:e1:ea:08:e6:0d:fc:
                    f1:ae:de:f9:40:05:1b:23:51:7f:dd:f7:d5:4f:82:
                    82:1d:3a:b4:7e:fe:ae:14:d7:4e:a5:c8:ba:e9:77:
                    68:e4:7f:e6:77:bf:b8:20:89:cd:e8:71:e8:08:b6:
                    71:43:42:4f:2b:07:34:95:73:ca:1f:b8:34:bf:78:
                    2d:d6:e7:e5:17:df:19:91:d5:fc:c8:f1:77:10:b7:
                    b2:0a:d7:54:94:21:d4:9b:58:f3:48:0c:11:ff:c9:
                    00:f6:bb:1b:ae:1e:07:ef:cf:ad:52:95:62:28:8f:
                    86:92:4e:bb:c3:8c:d1:e7:60:ab:8b:6d:6d:96:36:
                    07:c3:68:91:64:98:02:db:17:e9:6e:70:25:1b:29:
                    5d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:01:D9:BA:02:6F:4C:72:87:5A:02:FC:C8:C7:AF:30:9E:31:F2:79
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e33322e302f31392d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:01:f0:1f:c2:69:36:e6:90:66:c6:3d:0c:2c:a2:d2:c7:fc:
         1b:ef:e1:9b:41:a1:6a:47:54:2d:d6:1d:9e:82:64:0d:c8:a6:
         d9:6f:bf:b7:c1:d9:63:0c:b6:be:a8:d7:b3:01:f5:ce:78:0a:
         6e:2f:c1:7e:3f:bd:8a:4c:5b:0d:8b:79:e3:b7:97:dd:cc:78:
         45:89:76:66:85:d7:34:f2:38:17:fd:03:9e:ca:3d:50:80:6c:
         3a:bc:64:28:c3:ea:56:5c:42:51:38:05:fd:79:fd:5f:7f:54:
         ee:18:c0:9b:bf:13:73:16:24:11:8e:c1:21:c4:fb:9e:33:bd:
         a1:3f:11:89:6a:dc:8b:f1:0c:f8:7e:44:67:7d:11:d7:69:8c:
         70:7b:a9:ef:96:d7:2f:66:a8:00:8d:5a:1a:6c:24:7e:1b:51:
         38:ea:8d:b8:f0:06:36:34:cf:ca:e5:a5:e9:7d:5b:50:02:0c:
         1e:33:ee:95:f1:98:1c:bc:14:32:8e:e6:16:f9:b5:5e:a4:fc:
         c5:66:b8:77:f3:42:e1:d3:b9:10:c9:23:52:f9:b1:44:3d:53:
         ab:bc:6a:9a:3a:ae:b1:87:08:a6:1f:36:a1:2b:23:6a:ba:27:
         de:60:e9:40:23:82:70:3a:31:44:f8:ee:f6:6c:af:93:1d:79:
         a7:2e:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:00:25 2024 by rpki-client on console-ams.rpki-client.org