Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e382e302f32322d3232203d3e203232313232.roa
File:                     3134382e3230392e382e302f32322d3232203d3e203232313232.roa (raw, json)
Hash identifier:          GjsdnSqhqq5MMHPuso5WtRNlNoGyz7bHXUXId7OXwLI=
Subject key identifier:   ED:82:71:A5:0C:64:7D:4A:63:9F:E2:18:5A:A2:E6:40:7E:F5:33:D9
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       5FA7758B51DD61D144F8B44609683671DF04BAA4
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e382e302f32322d3232203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:55 +0000
ROA not before:           Tue 05 Mar 2024 17:41:55 +0000
ROA not after:            Tue 04 Mar 2025 17:46:55 +0000
asID:                     22122
IP address blocks:        148.209.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a7:75:8b:51:dd:61:d1:44:f8:b4:46:09:68:36:71:df:04:ba:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:55 2024 GMT
            Not After : Mar  4 17:46:55 2025 GMT
        Subject: CN=ED8271A50C647D4A639FE2185AA2E6407EF533D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:4d:7d:59:b3:98:42:af:32:d3:79:de:8b:
                    2a:9d:6e:ef:18:e6:9a:b2:a3:83:9b:83:ea:98:e0:
                    57:b2:31:c6:a1:db:92:a8:da:f6:31:36:49:dd:ad:
                    ac:3a:8a:1a:09:5f:6b:d0:dd:34:fb:70:14:b0:f1:
                    93:71:fc:ae:fa:13:7f:5f:7b:02:a9:84:93:c2:3f:
                    1b:d4:a4:6b:9a:52:fc:ed:ac:f5:d8:7e:5f:a6:47:
                    b1:94:42:53:7e:04:e4:98:ac:7e:fb:01:1a:d2:e0:
                    0d:bc:2a:9c:c7:d6:53:c2:0f:10:a0:b7:3a:d5:9e:
                    ee:bd:49:2b:26:76:19:9d:8f:78:46:4c:9c:5f:ae:
                    9c:25:7e:64:9c:f8:00:1d:1d:45:cf:88:0b:a6:7b:
                    8b:1f:47:43:7e:2e:15:55:db:cd:ff:0f:da:64:37:
                    e6:6c:83:49:79:c0:28:1d:16:dc:dd:af:f4:07:5a:
                    37:8a:3b:75:ba:9d:70:cc:a0:fa:21:f4:9e:5a:90:
                    08:7a:c1:70:78:5b:f8:e9:c1:08:3d:47:ae:ce:c3:
                    c0:3d:cd:dc:37:40:5a:51:96:46:fe:19:bb:1c:a4:
                    22:b2:25:d4:0a:b0:48:e1:a9:c6:58:00:7a:48:6b:
                    1a:8e:39:4a:c7:8f:4a:f9:54:b7:b7:17:cd:a3:8e:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:82:71:A5:0C:64:7D:4A:63:9F:E2:18:5A:A2:E6:40:7E:F5:33:D9
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e382e302f32322d3232203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:90:f5:e6:ea:fa:86:de:8f:5b:8c:31:0c:e8:b5:c3:9c:be:
         72:b0:89:ae:31:69:95:54:e9:af:a6:cb:ac:14:71:c7:9b:31:
         fd:c7:1f:60:5d:a8:24:f8:ed:ac:bf:54:34:42:87:38:84:d8:
         a0:96:1f:4e:39:17:21:f6:1e:78:8e:fa:8b:d6:94:af:46:26:
         dd:a1:e5:3b:42:f3:84:8f:ee:90:48:84:31:eb:59:9d:7c:66:
         5b:58:9b:74:1b:1d:b5:00:90:ac:23:91:1a:14:f9:33:28:9d:
         36:4a:14:5d:2e:c7:c4:dd:f9:4e:e7:70:0d:3e:4b:6e:82:31:
         78:76:22:f5:51:bd:5d:cf:d7:ee:fd:f0:12:d7:06:a7:d2:37:
         f4:13:36:24:66:0a:33:46:7c:16:a1:bf:34:e4:37:ba:d8:17:
         46:fc:92:67:56:7f:02:76:2f:c7:ac:9d:98:f1:53:df:f5:57:
         a8:c6:69:cd:db:c0:f6:c7:af:50:15:34:cd:c3:05:1a:90:48:
         20:e0:92:1f:b7:ed:f6:5c:05:0d:d6:15:2c:2c:ba:9c:dd:6f:
         34:b0:1c:89:65:4c:1a:cb:52:ff:84:8f:70:37:44:69:95:da:
         31:7c:5f:7e:01:00:5f:b7:71:d4:f2:68:9e:5b:c0:9b:92:e4:
         39:7c:fa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:57 2024 by rpki-client on console-ams.rpki-client.org