Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e352e302f32342d3234203d3e203232313232.roa
File:                     3134382e3230392e352e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier:          gAM4YqHZNGLdGW3BpLckdrSH0G21UcdDH9HatXkC8Ao=
Subject key identifier:   0C:8D:AF:1A:D3:41:CC:8F:12:75:EE:79:B8:AE:99:07:E5:7F:6D:BA
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       19D995D54742772F4A3022C63C3742774E995645
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e352e302f32342d3234203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:39 +0000
ROA not before:           Tue 05 Mar 2024 17:41:39 +0000
ROA not after:            Tue 04 Mar 2025 17:46:39 +0000
asID:                     22122
IP address blocks:        148.209.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d9:95:d5:47:42:77:2f:4a:30:22:c6:3c:37:42:77:4e:99:56:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:39 2024 GMT
            Not After : Mar  4 17:46:39 2025 GMT
        Subject: CN=0C8DAF1AD341CC8F1275EE79B8AE9907E57F6DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:e2:c4:ea:50:1e:38:28:31:b2:a3:b5:50:
                    0e:67:7d:88:81:4d:2a:59:4f:8e:43:71:73:1c:92:
                    8d:05:2c:45:b8:78:de:78:3e:a0:d6:32:4f:51:20:
                    ec:18:20:fa:ba:09:3e:df:af:a6:85:8a:e1:b1:51:
                    9f:8c:68:ea:89:0a:27:de:5b:24:6c:00:e6:47:28:
                    dc:35:49:fc:66:85:07:86:9a:a2:8d:78:e6:df:2b:
                    c0:69:8f:d1:64:e3:92:a0:65:97:09:d6:bd:17:a2:
                    80:f9:46:ac:17:9a:08:40:19:40:b3:b8:18:ab:d8:
                    7e:41:ce:0c:df:e4:f4:8a:36:c8:97:22:ad:f9:62:
                    0d:6e:fe:43:71:f1:c1:78:ad:5d:70:88:fe:69:f8:
                    85:e7:4d:12:8d:a9:7e:7d:f0:83:f6:21:8b:cf:b2:
                    0a:70:40:e0:bb:e3:16:0e:de:44:08:e2:46:e4:ae:
                    03:4a:8d:a4:79:3b:6e:4e:ba:fe:c9:98:21:8e:94:
                    92:7a:42:ee:f3:ed:e7:e2:00:16:85:58:77:84:7d:
                    b1:29:5d:3d:77:b9:ab:72:5c:67:a0:dd:21:71:1f:
                    de:b6:ff:89:95:3d:73:74:83:b1:44:e6:ba:15:84:
                    e9:16:d0:95:e1:a6:e4:95:08:f1:10:0f:e5:2c:aa:
                    f2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8D:AF:1A:D3:41:CC:8F:12:75:EE:79:B8:AE:99:07:E5:7F:6D:BA
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e352e302f32342d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:63:8f:99:68:bf:aa:fb:8a:87:fc:db:22:44:ad:36:8e:
         63:88:d6:9a:64:ea:a2:d0:ad:2e:88:ca:61:28:28:5b:2d:a6:
         56:1a:56:97:e2:b6:f1:7b:04:51:fc:cb:ba:10:db:64:7f:b7:
         a4:d7:5e:6e:20:98:4a:82:64:22:92:9d:53:4e:48:3a:37:76:
         eb:3a:5c:da:dc:93:9b:56:67:c5:8c:e0:aa:06:95:d8:2f:02:
         c2:be:35:a7:66:c4:52:c5:9b:f0:2b:41:e9:47:79:10:b2:4b:
         1a:93:7e:3c:5f:4d:0d:9a:e7:02:e3:ac:de:fe:18:8c:bf:b6:
         e0:e5:c4:4c:c7:57:fa:fb:59:9e:5c:ac:e5:0b:3c:68:a8:3d:
         bb:79:e8:e6:f7:a8:b3:05:2d:72:98:15:b2:28:ce:23:ad:4a:
         9b:30:6e:56:cf:d4:15:42:a3:44:d7:aa:2c:ae:e7:88:ba:e6:
         97:5a:03:4c:ed:02:d5:b5:73:4d:21:b4:46:ae:19:83:be:4e:
         01:56:eb:9d:ea:2d:34:8a:f3:97:62:02:d5:aa:f6:28:ca:9a:
         fb:9c:52:4d:1f:c4:60:04:90:15:15:96:fe:da:f7:c1:1b:46:
         06:69:ef:91:8a:aa:66:38:21:a9:db:bd:f9:e3:81:58:5f:a0:
         06:eb:16:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org