Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132382e302f31392d3139203d3e203135323336.roa
File:                     3134382e3231332e3132382e302f31392d3139203d3e203135323336.roa (raw, json)
Hash identifier:          GbMBuu8Cgioy/RtuYDJvhc0TBecYNOqX5CP59B/S7dw=
Subject key identifier:   9B:2D:3B:59:68:B1:04:58:B8:F1:05:71:32:74:D2:7F:6D:22:5F:44
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       4AC6B79909244488F8E04536E3A54451B98705D2
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132382e302f31392d3139203d3e203135323336.roa
Signing time:             Tue 05 Mar 2024 18:17:50 +0000
ROA not before:           Tue 05 Mar 2024 18:12:50 +0000
ROA not after:            Tue 04 Mar 2025 18:17:50 +0000
asID:                     15236
IP address blocks:        148.213.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c6:b7:99:09:24:44:88:f8:e0:45:36:e3:a5:44:51:b9:87:05:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Mar  5 18:12:50 2024 GMT
            Not After : Mar  4 18:17:50 2025 GMT
        Subject: CN=9B2D3B5968B10458B8F105713274D27F6D225F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:88:f3:37:3d:96:b4:a9:c5:71:d2:25:ff:
                    34:ae:1f:94:b0:0f:7c:75:2e:a2:4b:22:7e:25:86:
                    f3:11:46:ba:0e:2d:d0:c2:37:6c:ad:41:48:ed:40:
                    fb:7c:28:f9:3d:0d:60:62:c2:e7:92:cf:81:0b:2a:
                    f5:f0:b7:52:20:11:ea:54:6b:51:81:b2:ff:df:32:
                    28:29:8a:38:6b:62:7a:50:5f:9e:05:37:0e:6e:92:
                    c3:69:2b:d4:aa:10:37:a8:db:66:28:21:cd:2c:32:
                    c4:90:67:2c:2e:38:52:2c:db:44:b1:e8:59:53:cc:
                    14:81:88:7e:04:77:f5:a6:52:39:28:cf:92:0f:34:
                    1e:93:5b:13:f9:9e:23:b0:7d:39:ef:ee:61:f6:06:
                    76:17:2b:02:52:05:a5:48:b8:64:ed:05:3c:11:15:
                    89:48:00:ac:d9:d1:ee:87:b6:1a:6b:7e:88:2c:b7:
                    33:e7:40:80:78:d2:2c:dd:60:4c:29:d9:13:1e:7a:
                    48:a4:e5:d2:82:05:65:83:6f:35:24:33:84:61:92:
                    45:84:f0:e0:0d:08:36:9c:f6:39:4d:32:fa:37:8a:
                    62:a1:9d:83:12:5b:dc:4e:dd:ba:af:ed:7c:ff:ce:
                    a4:82:37:68:82:2d:c5:2c:60:48:4a:7b:36:d6:4d:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2D:3B:59:68:B1:04:58:B8:F1:05:71:32:74:D2:7F:6D:22:5F:44
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e3132382e302f31392d3139203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:24:39:f3:22:91:57:2b:52:c7:15:e7:89:ec:c9:61:38:d8:
         d1:10:9e:e6:0a:a5:48:b9:b1:94:cb:45:5a:41:6d:74:8f:c1:
         44:cf:3e:1d:16:b3:e3:0c:d6:92:b9:5e:7e:7f:56:f0:3e:70:
         21:32:84:98:64:a3:95:38:a4:05:eb:49:ec:f5:6c:d2:d4:c4:
         a0:c5:e1:d1:6e:fc:da:86:1d:67:ee:cf:c3:6a:6b:c1:e1:f1:
         9f:4c:f0:61:19:07:64:aa:3c:fc:65:4a:8a:30:51:7d:d8:a0:
         ed:bc:f4:f1:da:d2:52:b7:32:a0:3f:72:71:9b:f6:ce:4b:2a:
         64:e2:4e:46:54:fc:ad:95:ed:99:1b:f5:22:23:1f:7d:ab:99:
         ae:ed:7d:69:a9:20:22:fa:af:1a:7c:39:e5:5e:dd:5e:a9:43:
         00:da:41:0a:57:b8:22:2f:1d:7c:09:d0:59:19:97:01:b8:82:
         c7:94:5a:9a:5a:ac:c6:28:62:05:4a:f1:55:e7:b4:e4:ee:dd:
         60:ea:4f:b5:49:47:f3:23:f7:e4:b9:0f:2f:16:63:6a:ce:9a:
         bd:a7:a0:29:67:03:e7:e1:59:d8:c3:d5:42:32:f0:96:93:64:
         7d:ec:e9:50:1e:c1:4b:23:30:1a:3a:30:21:5f:b1:3c:ae:8f:
         0f:99:9d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org