Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3131322e302f32302d3230203d3e203135323336.roa
File:                     3134382e3231332e3131322e302f32302d3230203d3e203135323336.roa (raw, json)
Hash identifier:          5UqsxIQp97srOVMqANuBDeFHLoZ6WqtsSEn578ji5R0=
Subject key identifier:   A6:0B:94:6A:8D:12:08:A7:7A:4B:B1:DC:88:F5:49:5E:A4:9B:DE:48
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       0B956D44D3E153B0CF6944958AF2D95318E8E80D
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3131322e302f32302d3230203d3e203135323336.roa
Signing time:             Tue 05 Mar 2024 18:17:51 +0000
ROA not before:           Tue 05 Mar 2024 18:12:51 +0000
ROA not after:            Tue 04 Mar 2025 18:17:51 +0000
asID:                     15236
IP address blocks:        148.213.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:95:6d:44:d3:e1:53:b0:cf:69:44:95:8a:f2:d9:53:18:e8:e8:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Mar  5 18:12:51 2024 GMT
            Not After : Mar  4 18:17:51 2025 GMT
        Subject: CN=A60B946A8D1208A77A4BB1DC88F5495EA49BDE48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:52:e3:1e:70:dd:4a:65:5b:cb:db:c0:13:31:
                    6e:80:6c:a2:15:3a:a7:46:f9:fe:68:e1:15:13:12:
                    6d:d2:69:73:4c:dd:2a:22:41:ad:c9:55:28:66:f6:
                    b2:b6:7c:ad:68:07:2f:5e:2b:df:e0:a8:ca:cb:52:
                    d5:8a:31:3f:cb:39:f8:3d:b2:1c:22:87:1a:b7:b7:
                    0b:b5:f9:ec:2c:8a:5d:32:78:bd:15:98:66:c8:1a:
                    bf:a9:7c:44:c8:9f:e7:8c:61:ba:1d:d9:05:13:01:
                    7f:c7:b0:68:d2:0a:4c:d2:59:a6:2a:18:e4:fb:d3:
                    f3:60:53:58:e9:f8:70:ba:53:7a:79:6d:5d:02:15:
                    64:5c:43:ef:41:52:c9:3d:fb:41:63:24:25:b9:82:
                    17:c5:d1:e5:ba:d0:1d:34:9d:e7:bf:7f:cf:e1:e9:
                    41:98:9c:11:f4:51:5d:99:60:5f:e7:03:fa:99:4b:
                    52:6c:90:7e:28:8e:1b:56:2d:17:50:53:c0:e8:e6:
                    7a:8b:d6:32:c2:04:80:80:b3:a8:18:97:2f:55:1f:
                    12:ea:7b:88:9d:3b:a0:c1:1e:5b:46:e1:c5:e5:1e:
                    e2:70:df:89:10:b3:6f:39:3e:cd:71:93:ff:11:57:
                    1c:22:51:fb:30:f5:f4:82:38:65:c7:79:a5:df:71:
                    a6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0B:94:6A:8D:12:08:A7:7A:4B:B1:DC:88:F5:49:5E:A4:9B:DE:48
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3131322e302f32302d3230203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:a7:99:52:f2:c1:05:c0:e9:5c:5e:f0:57:eb:c2:ae:f2:43:
         09:f0:8d:d3:12:41:f7:e5:5c:98:53:65:cd:17:81:92:81:0f:
         e6:9a:93:e5:39:17:cb:dd:d7:25:2e:46:cc:52:d6:ef:37:75:
         f7:c1:50:ed:bf:82:ce:3c:51:3b:f3:ac:aa:1d:58:09:3b:67:
         03:73:58:98:e7:da:a1:65:26:cb:b7:f1:26:76:41:18:98:3d:
         be:c8:57:8b:74:9a:43:6e:f0:97:cb:0d:3b:89:2c:c6:a7:8c:
         25:3d:51:ba:8c:10:91:81:a2:14:40:80:4b:d1:92:97:43:c8:
         25:fc:6e:bb:94:6a:c1:fd:d9:7d:c8:80:fb:3d:4f:53:85:8c:
         b0:97:17:31:32:89:3e:3f:e1:c1:10:94:6a:90:d2:f2:fa:76:
         7c:cb:96:e3:73:ba:91:c6:b3:d5:a2:0d:c3:44:cf:1f:d0:70:
         97:73:37:c7:d8:3d:08:e5:24:cb:08:b7:a6:62:c2:29:bc:ee:
         cb:95:cf:65:6c:54:36:ab:c8:45:51:06:1c:3e:73:fa:5d:5a:
         98:e9:b6:48:cf:ad:dd:95:4f:7d:a1:6b:90:f9:b7:4b:f9:83:
         4b:43:0b:88:a1:d2:9a:68:59:93:19:6e:97:25:32:de:0f:31:
         8d:fc:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org