Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/3134382e3233302e302e302f32322d3234203d3e20383030.roa
File:                     3134382e3233302e302e302f32322d3234203d3e20383030.roa (raw, json)
Hash identifier:          w5iJVcypzrFLKmCPvlKnA9cgpWH+jpiQdmIYS0WXz6M=
Subject key identifier:   82:FE:CF:52:F8:AA:AD:8E:96:2D:D2:9A:B9:2D:40:B1:C0:66:15:2C
Certificate issuer:       /CN=A08DDD76E947B9C9F721B78022D9A4EAADAE46B1
Certificate serial:       47283437BDD600063F491220352F05D68AFFDE7F
Authority key identifier: A0:8D:DD:76:E9:47:B9:C9:F7:21:B7:80:22:D9:A4:EA:AD:AE:46:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/3134382e3233302e302e302f32322d3234203d3e20383030.roa
Signing time:             Wed 21 Aug 2024 10:00:00 +0000
ROA not before:           Wed 21 Aug 2024 09:55:00 +0000
ROA not after:            Wed 20 Aug 2025 10:00:00 +0000
asID:                     800
IP address blocks:        148.230.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:28:34:37:bd:d6:00:06:3f:49:12:20:35:2f:05:d6:8a:ff:de:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A08DDD76E947B9C9F721B78022D9A4EAADAE46B1
        Validity
            Not Before: Aug 21 09:55:00 2024 GMT
            Not After : Aug 20 10:00:00 2025 GMT
        Subject: CN=82FECF52F8AAAD8E962DD29AB92D40B1C066152C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:53:af:fe:e7:b3:ce:c3:82:cc:54:bf:3c:
                    e4:84:9d:3d:14:29:c7:f0:9e:a4:da:60:8c:fe:a9:
                    48:03:69:89:c4:13:8c:53:f1:79:3b:a5:10:ce:2a:
                    11:51:7e:ac:7f:9c:c5:56:01:e2:9e:fa:3b:33:c8:
                    76:98:61:93:7d:b0:0b:74:2f:6b:78:4c:fd:69:ae:
                    4d:37:d9:14:6b:11:5d:1d:a9:fd:83:4a:c6:77:31:
                    88:fc:af:9f:2a:ac:3a:bd:55:85:03:ee:2a:52:95:
                    bc:8f:c9:70:0c:76:76:c6:25:ce:e6:62:ec:68:fe:
                    f1:93:9d:0a:f2:1b:d0:d8:37:14:ab:2c:8e:88:ff:
                    63:2b:29:cb:5f:da:1a:f8:54:98:27:4a:dd:3d:52:
                    d0:3d:bd:d2:a6:f2:3d:92:f6:ec:b1:c7:43:d0:e3:
                    6f:2a:c7:5c:b8:1c:b7:af:05:62:1a:24:d4:49:0a:
                    0c:b5:12:02:d7:7e:93:93:7d:4b:4c:0d:d1:b7:df:
                    30:9b:8d:2e:6e:c6:a4:89:c9:bd:fb:4f:7a:b3:92:
                    a4:1c:91:4c:d2:d7:31:47:49:6f:7b:2d:0f:bc:3e:
                    ab:9a:1d:98:e9:06:d9:ce:b6:31:24:81:af:41:54:
                    e6:8d:67:7c:43:7f:dd:8e:e0:2e:18:61:a2:2e:3b:
                    e8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FE:CF:52:F8:AA:AD:8E:96:2D:D2:9A:B9:2D:40:B1:C0:66:15:2C
            X509v3 Authority Key Identifier:
                keyid:A0:8D:DD:76:E9:47:B9:C9:F7:21:B7:80:22:D9:A4:EA:AD:AE:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/3134382e3233302e302e302f32322d3234203d3e20383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.230.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:35:a7:ea:e9:25:6e:82:c3:c5:4d:2e:bc:5d:fc:aa:90:51:
         f5:77:92:3a:c9:b7:77:d4:de:b7:45:4b:d7:02:98:68:30:89:
         68:bb:7f:03:7b:fa:31:aa:24:99:88:e3:6d:30:79:2f:84:00:
         15:d3:58:f2:d0:7d:c0:da:20:78:6b:b3:c0:c0:e7:9b:84:48:
         56:e1:fb:17:05:a8:9c:88:36:52:aa:e4:69:0c:68:28:0c:2a:
         0c:50:c9:60:61:b1:8b:71:b5:f0:01:69:db:f6:d1:5a:df:75:
         47:75:3d:d1:cb:fe:55:a9:71:af:1f:0c:e9:e8:1a:3b:95:92:
         b5:c4:6a:5b:c5:38:e1:39:1e:94:1e:9c:93:97:50:34:1e:3d:
         bb:ed:b8:34:57:44:58:cf:1a:bd:f3:00:25:f6:92:dd:03:d4:
         70:03:7f:9c:41:12:44:44:43:23:40:b2:0d:44:c0:a8:a8:6a:
         37:79:c2:71:43:81:37:75:2d:8d:b0:90:9a:d3:7b:23:33:47:
         84:37:16:ad:24:59:28:38:d2:55:4d:a9:9d:72:a4:27:08:4e:
         8c:1c:f8:eb:de:3e:0a:65:93:6e:61:e0:33:9f:02:2c:e5:1c:
         45:6f:16:69:09:73:b4:ff:47:22:e8:4b:f7:95:9e:39:01:50:
         8d:1e:f7:37
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIURyg0N73WAAY/SRIgNS8F1or/3n8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA4RERENzZFOTQ3QjlDOUY3MjFCNzgwMjJEOUE0RUFB
REFFNDZCMTAeFw0yNDA4MjEwOTU1MDBaFw0yNTA4MjAxMDAwMDBaMDMxMTAvBgNV
BAMTKDgyRkVDRjUyRjhBQUFEOEU5NjJERDI5QUI5MkQ0MEIxQzA2NjE1MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCofVOv/uezzsOCzFS/POSEnT0U
KcfwnqTaYIz+qUgDaYnEE4xT8Xk7pRDOKhFRfqx/nMVWAeKe+jszyHaYYZN9sAt0
L2t4TP1prk032RRrEV0dqf2DSsZ3MYj8r58qrDq9VYUD7ipSlbyPyXAMdnbGJc7m
Yuxo/vGTnQryG9DYNxSrLI6I/2MrKctf2hr4VJgnSt09UtA9vdKm8j2S9uyxx0PQ
428qx1y4HLevBWIaJNRJCgy1EgLXfpOTfUtMDdG33zCbjS5uxqSJyb37T3qzkqQc
kUzS1zFHSW97LQ+8PquaHZjpBtnOtjEkga9BVOaNZ3xDf92O4C4YYaIuO+jBAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUgv7PUviqrY6WLdKauS1AscBmFSwwHwYDVR0j
BBgwFoAUoI3ddulHucn3IbeAItmk6q2uRrEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkU2Nzc0MjU5QkI4QzJFNDg0NTlFRjBEMDU4QjQ4OEZF
OTAwRkIzODJFNzJGMTI1RDdENTE1NzlGMkZFMkM0LzAvQTA4RERENzZFOTQ3QjlD
OUY3MjFCNzgwMjJEOUE0RUFBREFFNDZCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMDhEREQ3NkU5NDdCOUM5Rjcy
MUI3ODAyMkQ5QTRFQUFEQUU0NkIxLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZFNjc3NDI1OUJCOEMyRTQ4NDU5RUYwRDA1OEI0ODhGRTkwMEZCMzgy
RTcyRjEyNUQ3RDUxNTc5RjJGRTJDNC8wLzMxMzQzODJlMzIzMzMwMmUzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApTmADANBgkqhkiG
9w0BAQsFAAOCAQEALTWn6uklboLDxU0uvF38qpBR9XeSOsm3d9Tet0VL1wKYaDCJ
aLt/A3v6MaokmYjjbTB5L4QAFdNY8tB9wNogeGuzwMDnm4RIVuH7FwWonIg2Uqrk
aQxoKAwqDFDJYGGxi3G18AFp2/bRWt91R3U90cv+Valxrx8M6egaO5WStcRqW8U4
4TkelB6ck5dQNB49u+24NFdEWM8avfMAJfaS3QPUcAN/nEESRERDI0CyDUTAqKhq
N3nCcUOBN3UtjbCQmtN7IzNHhDcWrSRZKDjSVU2pnXKkJwhOjBz4694+CmWTbmHg
M58CLOUcRW8WaQlztP9HIuhL95WeOQFQjR73Nw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org