Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132372e302f32342d3234203d3e203135323336.roa
File:                     3134382e3231332e3132372e302f32342d3234203d3e203135323336.roa (raw, json)
Hash identifier:          e8GalpspAP72onqPtETqU8k31aKuw4HFs5M04fLMOac=
Subject key identifier:   E7:C6:09:A1:5D:F6:AB:B4:70:10:E7:C5:52:84:84:31:95:7F:93:B5
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       600F90A36CE1E4657074DBED3F4564550CAE3B78
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132372e302f32342d3234203d3e203135323336.roa
Signing time:             Tue 05 Mar 2024 18:17:52 +0000
ROA not before:           Tue 05 Mar 2024 18:12:52 +0000
ROA not after:            Tue 04 Mar 2025 18:17:52 +0000
asID:                     15236
IP address blocks:        148.213.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0f:90:a3:6c:e1:e4:65:70:74:db:ed:3f:45:64:55:0c:ae:3b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Mar  5 18:12:52 2024 GMT
            Not After : Mar  4 18:17:52 2025 GMT
        Subject: CN=E7C609A15DF6ABB47010E7C552848431957F93B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:4d:c6:e4:3b:7b:94:6f:c8:9d:2d:ec:a4:
                    d8:ec:43:da:5a:e1:48:0f:de:b3:ea:8f:f2:53:74:
                    33:66:27:8d:07:e2:cb:66:40:f6:91:f4:c1:7d:13:
                    97:9e:af:e1:25:bd:18:e8:ed:2d:b3:35:41:b7:ac:
                    d7:89:79:c3:87:d9:6c:50:23:bf:34:8e:29:0b:2e:
                    d3:e8:94:37:ae:eb:ed:1b:e0:1c:5e:ad:13:30:39:
                    7e:e7:bd:eb:bc:05:02:b0:51:7c:fe:5e:44:fe:3d:
                    76:a2:18:1b:0c:7e:97:9f:b6:38:94:96:d7:3d:52:
                    67:84:6b:61:f9:ad:59:a9:0a:cc:e6:49:ef:60:de:
                    e7:5d:c3:f3:38:88:dc:2f:8c:71:56:4b:5b:d2:ca:
                    22:8d:d2:63:35:71:86:82:ab:be:39:b7:3d:43:7d:
                    db:b8:c6:53:d9:f5:f3:82:cc:2d:67:f7:9b:47:76:
                    7d:d3:bb:22:66:9c:13:a4:55:e9:a6:49:ad:c7:e8:
                    db:9f:6e:40:bc:bd:b6:ad:d2:8f:23:95:be:31:a1:
                    bd:b7:f6:a5:4d:b8:16:e8:87:31:f2:ab:70:57:e1:
                    38:84:b5:fc:79:28:c6:1d:e0:5e:88:c7:93:64:ff:
                    2e:0d:c8:9f:25:9f:ef:be:e9:fc:a6:f2:b3:61:5f:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C6:09:A1:5D:F6:AB:B4:70:10:E7:C5:52:84:84:31:95:7F:93:B5
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132372e302f32342d3234203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:96:5d:a0:94:09:9d:32:a7:31:01:37:0b:57:e4:85:d1:b4:
         dc:a7:9b:60:47:a0:7d:6a:fc:39:28:ce:19:1f:39:5f:31:f9:
         8d:00:9f:ec:2e:9e:29:be:cc:91:7b:53:63:37:7c:5d:a5:81:
         75:da:8c:32:87:31:15:18:18:91:06:d3:5f:69:33:9d:2a:ff:
         48:7c:30:d8:38:51:0e:70:b5:c9:33:58:72:3c:07:35:63:23:
         a3:4d:3e:a3:45:f3:91:ab:4e:88:96:5d:c0:67:d3:03:31:68:
         ac:c8:76:2d:b2:ff:e5:2d:67:ab:2a:77:47:a7:f2:cb:f0:2d:
         4f:e8:4e:8a:e3:30:7d:d7:ad:c7:0b:7d:5e:b3:75:76:ea:ac:
         03:66:48:af:ba:35:6b:c7:74:11:17:14:91:df:81:c9:6e:41:
         b0:03:c9:9b:71:e0:7f:5f:bf:f2:b6:ea:61:5c:07:bc:f2:4d:
         77:b2:41:a0:0f:ff:76:83:23:af:7c:a1:17:73:db:04:a0:d2:
         26:6b:c8:2b:7e:fe:b9:76:93:d4:3b:4e:f9:59:83:04:ec:b4:
         ce:c5:a5:8e:2c:2d:58:93:5d:4a:30:91:a5:d0:99:79:fb:8e:
         0d:5b:c0:ed:5a:76:aa:33:7c:21:80:ee:0f:53:2a:e4:18:56:
         fe:45:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org