Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31382d3138203d3e203135323336.roa
File:                     3134382e3231332e302e302f31382d3138203d3e203135323336.roa (raw, json)
Hash identifier:          EzlKTrhdGlv0e/VdHD1F9LpBYySZHw9p7sw1BVCNujs=
Subject key identifier:   5C:B7:33:82:02:29:8B:A6:0E:2D:2D:1A:B3:4D:6F:26:FA:AD:63:33
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       671F692A856B12819A95D28301745C71887F2A88
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31382d3138203d3e203135323336.roa
Signing time:             Tue 05 Mar 2024 18:17:51 +0000
ROA not before:           Tue 05 Mar 2024 18:12:51 +0000
ROA not after:            Tue 04 Mar 2025 18:17:51 +0000
asID:                     15236
IP address blocks:        148.213.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1f:69:2a:85:6b:12:81:9a:95:d2:83:01:74:5c:71:88:7f:2a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Mar  5 18:12:51 2024 GMT
            Not After : Mar  4 18:17:51 2025 GMT
        Subject: CN=5CB7338202298BA60E2D2D1AB34D6F26FAAD6333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6f:f3:37:81:70:c5:10:4b:0d:d4:49:ec:d5:
                    3e:4d:4d:4c:90:d4:b5:42:e1:4d:ca:d2:30:fe:44:
                    2a:03:0f:43:11:84:a4:3a:48:bd:93:98:51:24:b3:
                    66:f3:b7:4c:ee:ab:c6:88:75:be:19:14:6b:0c:20:
                    30:1c:77:75:2c:31:39:c8:93:0a:b9:e7:f2:5a:f8:
                    04:be:ed:8c:66:a9:5e:e3:02:6c:92:a9:a7:ef:f7:
                    06:f5:eb:29:7e:a3:43:e6:22:66:5d:fc:97:8a:b0:
                    09:b5:54:8c:4e:95:6a:51:b4:61:59:49:42:2c:8c:
                    4e:ca:b6:bd:bc:f0:8d:b5:a3:c3:c5:7b:c4:34:fd:
                    d3:9e:4e:5e:00:5f:32:57:cb:a7:78:a9:37:a8:73:
                    39:b4:94:44:61:52:66:1f:7c:c1:17:4d:e9:51:db:
                    36:d3:dc:68:8f:d3:13:4a:af:ae:d7:1f:af:26:9c:
                    b6:d8:27:d2:54:3c:ef:96:37:0f:e7:6d:5a:69:e3:
                    52:9a:60:5a:8f:08:16:52:8b:71:40:87:18:85:3c:
                    8b:fe:80:3c:50:bc:7d:d3:7b:f6:e2:79:9f:c3:fe:
                    d4:80:dc:2e:ed:13:9f:b2:89:0f:d0:07:89:23:c1:
                    9f:9a:aa:ff:79:f8:e9:13:90:a2:8d:98:90:e6:d5:
                    84:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B7:33:82:02:29:8B:A6:0E:2D:2D:1A:B3:4D:6F:26:FA:AD:63:33
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31382d3138203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:f6:c8:06:1e:20:3e:72:7d:7c:33:32:44:0c:7d:c0:19:ac:
         f5:0d:51:6e:ef:f8:b6:56:9c:56:73:b2:00:5e:04:e1:46:9c:
         7a:50:9e:8a:31:f1:aa:4e:a4:2f:f9:1c:f6:c0:cb:b7:1b:1b:
         1e:23:4f:78:fe:7b:01:11:0c:fb:7f:4b:6e:e7:78:d3:ee:03:
         2b:70:56:eb:57:ac:a1:4c:09:c4:f5:ac:d8:a8:1b:cb:59:2f:
         6f:54:bb:76:46:6f:c2:6a:6c:11:b7:a9:df:28:f2:b9:76:14:
         aa:ad:48:12:f7:dd:aa:82:4b:37:79:09:76:66:17:bb:68:52:
         50:3e:a4:04:4f:1a:00:cf:8c:19:23:4a:6c:62:7a:f8:8a:16:
         cc:2f:fe:ea:3a:0b:42:34:8b:c4:21:ef:3a:3f:64:78:47:7e:
         50:58:51:20:a4:7e:97:75:2b:29:9a:e0:01:5d:d9:3c:bf:fd:
         f2:4b:bc:ab:ec:e4:42:7b:70:bf:78:85:8f:e1:04:e9:a1:14:
         2d:69:7e:37:92:27:53:75:6d:18:6e:ef:2b:2c:5d:b4:c3:16:
         88:ad:27:18:82:d1:72:ce:ed:58:e1:bf:18:46:47:13:62:55:
         84:fb:53:55:f5:64:82:da:01:99:78:72:0f:48:c3:0e:79:59:
         6e:aa:18:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org