Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38342e302f32322d3232203d3e203232313232.roa
File:                     3134382e3230392e38342e302f32322d3232203d3e203232313232.roa (raw, json)
Hash identifier:          MH7CwhQbuqMggvLhQSnIYliDXJBRGZVXzU8Zn3DUt+k=
Subject key identifier:   00:FE:A8:EF:5E:53:74:E9:9D:18:5D:8D:5B:45:B7:9C:39:29:DE:FE
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       5BB3217E4B753EB37EC18A30ABDF6AF0CCDED2F3
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38342e302f32322d3232203d3e203232313232.roa
Signing time:             Tue 05 Mar 2024 17:46:44 +0000
ROA not before:           Tue 05 Mar 2024 17:41:44 +0000
ROA not after:            Tue 04 Mar 2025 17:46:44 +0000
asID:                     22122
IP address blocks:        148.209.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b3:21:7e:4b:75:3e:b3:7e:c1:8a:30:ab:df:6a:f0:cc:de:d2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Mar  5 17:41:44 2024 GMT
            Not After : Mar  4 17:46:44 2025 GMT
        Subject: CN=00FEA8EF5E5374E99D185D8D5B45B79C3929DEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:60:8f:60:bf:f6:c2:59:14:da:75:5a:49:
                    ca:73:7d:58:ee:25:e2:fd:6c:71:5d:74:20:ed:d3:
                    f7:54:cf:59:3b:5f:90:3b:60:22:2e:eb:9b:9c:86:
                    ed:60:dc:b6:19:61:d0:46:8f:1e:22:4e:f9:ac:62:
                    1c:b7:66:09:a7:06:f0:b2:54:6d:af:5d:07:13:63:
                    fc:1a:72:66:7e:0f:16:fd:8b:85:75:d4:23:ba:3d:
                    63:98:6b:05:be:e7:aa:d8:6c:ca:eb:95:59:42:44:
                    7d:5d:8c:2b:53:0d:fd:7c:a9:e3:2e:6c:27:81:99:
                    bb:80:fd:7c:4d:e5:fe:d0:6b:9c:e0:04:be:64:28:
                    7c:31:fe:43:78:ac:0e:96:18:20:67:b5:26:f1:68:
                    f1:2a:08:b8:5f:9d:0d:42:68:e3:be:6a:77:a9:cd:
                    12:f7:cc:cd:6d:aa:eb:32:fe:04:0f:aa:3e:85:7b:
                    e4:b9:17:c4:b1:3d:7e:61:73:df:6b:fb:d4:d3:05:
                    d6:ba:59:5c:bd:21:0a:0e:44:e8:cd:be:17:66:a7:
                    6f:80:2a:c0:78:e1:30:52:ac:87:41:1e:a3:a0:81:
                    2f:2a:e9:02:90:4b:84:c8:8a:b5:1f:52:d0:16:ba:
                    cc:f4:4d:9b:ce:c8:79:7f:b9:06:a7:63:18:e3:4b:
                    1f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FE:A8:EF:5E:53:74:E9:9D:18:5D:8D:5B:45:B7:9C:39:29:DE:FE
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e38342e302f32322d3232203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:65:05:e5:38:48:56:29:1f:1c:9e:09:12:ed:24:2b:f9:aa:
         9f:a7:2f:cc:47:0b:8a:42:84:1a:08:ca:e5:3f:33:44:5a:05:
         78:c3:39:42:06:34:98:be:d7:cc:12:83:af:40:3d:62:58:71:
         5a:2b:2b:72:6f:17:6a:b5:0a:8c:f3:c0:6f:20:d0:46:98:cd:
         ff:0f:7a:9d:33:bc:20:2c:b9:32:f6:b8:b8:db:3a:52:0b:a5:
         d2:c4:5e:3e:7b:d6:d1:44:0a:b9:fd:f5:b5:eb:4f:29:cc:4e:
         18:d2:58:88:12:5f:95:e3:b7:af:69:9f:2d:b5:40:32:7d:93:
         e6:8b:a0:77:fb:13:12:f4:d4:d7:17:69:ca:66:47:9d:67:64:
         21:48:f1:c6:c2:fa:59:7d:71:ba:7d:45:a0:0b:ad:67:9c:83:
         7e:d2:a0:b5:b3:c9:3a:52:e6:5f:fd:9e:3a:6b:21:a8:fd:73:
         cc:c4:32:ed:8f:11:7b:57:38:d4:3d:dc:d1:07:19:f3:ab:4d:
         85:50:da:8c:7a:b4:a8:2a:8a:8d:91:2c:b9:64:24:a3:ac:1a:
         96:5c:53:3e:bd:5a:2f:0d:bb:d3:f7:fa:83:03:c9:ed:4b:28:
         38:c6:0e:b7:9e:98:49:c0:1a:e2:96:cb:54:7b:40:42:5c:94:
         72:15:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:58 2024 by rpki-client on console-ams.rpki-client.org