Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130342e302f32322d3234203d3e20323635383339.roa
File:                     3230312e3134382e3130342e302f32322d3234203d3e20323635383339.roa (raw, json)
Hash identifier:          bXhHwzeJwXypFDMW4r+mFB4ZeVrKX4PnShDqIyJvx1Y=
Subject key identifier:   1A:B0:55:03:1A:A7:82:F3:BA:DA:CF:60:57:9F:1E:42:6D:31:B2:3E
Certificate issuer:       /CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
Certificate serial:       6AC1907851A689A36621B380567C7BA68C8A9D32
Authority key identifier: B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130342e302f32322d3234203d3e20323635383339.roa
Signing time:             Tue 05 Mar 2024 17:54:33 +0000
ROA not before:           Tue 05 Mar 2024 17:49:33 +0000
ROA not after:            Tue 04 Mar 2025 17:54:33 +0000
asID:                     265839
IP address blocks:        201.148.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c1:90:78:51:a6:89:a3:66:21:b3:80:56:7c:7b:a6:8c:8a:9d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
        Validity
            Not Before: Mar  5 17:49:33 2024 GMT
            Not After : Mar  4 17:54:33 2025 GMT
        Subject: CN=1AB055031AA782F3BADACF60579F1E426D31B23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:22:ef:19:50:f4:64:fd:62:7b:31:ca:41:
                    f0:a0:75:88:96:ce:91:d2:2f:f6:74:3b:9d:34:f1:
                    fd:e4:ed:b7:4c:b2:0c:26:6e:2b:6f:62:ed:ca:28:
                    99:a6:01:50:ec:60:64:d2:58:4a:1a:81:27:12:a1:
                    5a:21:38:7d:61:a9:b2:93:48:b8:4d:c0:3e:39:24:
                    7c:8a:86:2c:36:a3:7c:36:a6:ea:eb:87:e0:15:b3:
                    ba:aa:15:f1:ef:62:63:e8:ed:18:68:aa:82:13:d8:
                    99:b5:a3:e6:90:8f:65:4a:d4:db:1a:fc:0f:e7:89:
                    42:5d:1c:3f:e4:d9:63:26:bb:c2:73:9a:b1:3f:58:
                    4a:d3:3c:23:b5:4a:64:a1:ec:69:ef:d2:72:d0:d0:
                    e1:56:ce:45:a8:fb:ed:16:50:b7:96:4d:c6:1e:2f:
                    c2:d4:27:02:df:07:59:87:27:b7:0a:b5:e9:86:23:
                    92:e8:c4:b2:1d:b3:79:3e:fa:c6:47:7e:f7:89:bf:
                    72:88:90:1c:11:5d:bf:5a:02:48:c3:ae:8b:b2:9b:
                    48:29:b3:f5:42:9f:02:89:58:b9:28:0a:ba:eb:7f:
                    9b:67:14:1a:37:c8:68:d4:3d:22:82:9a:2b:3e:92:
                    2a:44:ef:57:ee:34:8f:66:1e:12:bd:d0:90:9d:f8:
                    d1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B0:55:03:1A:A7:82:F3:BA:DA:CF:60:57:9F:1E:42:6D:31:B2:3E
            X509v3 Authority Key Identifier:
                keyid:B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130342e302f32322d3234203d3e20323635383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c2:74:ad:ef:65:f5:75:78:b7:3b:01:e4:6e:44:ab:a6:e3:
         16:f8:32:61:91:18:68:6d:db:3a:fc:20:3c:fe:73:02:95:2d:
         d1:65:7d:7a:1a:aa:35:3d:0b:1a:8d:49:55:34:4b:86:09:6a:
         c9:ec:31:1e:c1:43:fd:ba:b1:95:89:bb:b5:40:f4:83:22:e8:
         bb:80:1e:31:52:92:d3:9a:74:3a:a0:53:b6:b9:4a:bb:87:c9:
         dc:ee:bd:60:c0:bc:75:66:0d:4e:1b:f0:22:ed:58:46:15:c0:
         e7:73:50:b7:dc:e8:04:c5:51:52:c7:0f:f7:91:d3:58:50:fc:
         e5:e6:a1:9b:d9:5e:b6:a2:0e:1a:36:b5:5b:3c:28:6e:25:23:
         8a:6d:87:43:e7:b8:97:34:69:bb:b5:ad:f5:7b:f4:f0:1e:98:
         79:f0:e9:f5:ce:f9:00:68:a4:52:43:91:09:4a:51:8e:71:7f:
         8a:44:57:e0:fb:37:91:7f:24:7a:dc:81:98:d1:9f:c1:07:16:
         bf:64:57:81:82:21:5c:ac:ae:68:83:fd:ae:a3:aa:df:03:5d:
         8e:da:94:7d:be:3d:27:a9:c2:62:83:21:0c:c9:a8:c6:2b:95:
         c7:e9:b3:f0:20:8d:5b:38:fb:fd:ce:99:e0:20:9a:3a:8e:25:
         bc:d6:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:51:03 2024 by rpki-client on console-ams.rpki-client.org