Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3134382e3230322e3132382e302f31372d3137203d3e2032353439.roa
File:                     3134382e3230322e3132382e302f31372d3137203d3e2032353439.roa (raw, json)
Hash identifier:          Y95A00ZilfhX6VbRTWJP6BaRg2vXvw5qwOUD8Bgj1Ls=
Subject key identifier:   30:83:FA:6C:90:9D:F6:FF:12:A1:6E:19:71:5A:2D:E8:DE:C8:63:CA
Certificate issuer:       /CN=50898D14E85F6BDE9012499897EB13E5874E5B62
Certificate serial:       3F53E3496B662590B410168768166038BC265992
Authority key identifier: 50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3134382e3230322e3132382e302f31372d3137203d3e2032353439.roa
Signing time:             Sat 08 Jun 2024 02:45:00 +0000
ROA not before:           Sat 08 Jun 2024 02:40:00 +0000
ROA not after:            Sat 07 Jun 2025 02:45:00 +0000
asID:                     2549
IP address blocks:        148.202.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:53:e3:49:6b:66:25:90:b4:10:16:87:68:16:60:38:bc:26:59:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50898D14E85F6BDE9012499897EB13E5874E5B62
        Validity
            Not Before: Jun  8 02:40:00 2024 GMT
            Not After : Jun  7 02:45:00 2025 GMT
        Subject: CN=3083FA6C909DF6FF12A16E19715A2DE8DEC863CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:c6:89:08:86:aa:e6:3a:5d:34:47:70:38:
                    e9:3a:ed:b8:f8:7d:9d:8c:3d:b1:94:eb:2c:ab:56:
                    0b:02:40:9a:de:b5:c4:8c:61:af:db:7b:1b:94:99:
                    f0:8e:8c:61:95:10:5a:dd:dd:71:be:5b:26:53:51:
                    43:e9:5d:cc:73:c8:49:28:5e:b5:16:12:34:e5:d0:
                    d5:dd:1b:fa:a7:0e:8a:96:5d:16:ef:92:1e:7d:ec:
                    fd:c9:14:75:6d:76:43:da:43:39:4f:9c:ea:6b:69:
                    fd:56:84:63:67:13:8e:62:24:7a:9e:b7:58:8b:01:
                    41:30:84:66:7c:83:1f:74:5f:cd:a0:67:0c:52:c5:
                    cb:1d:53:95:ac:4a:80:f4:a0:68:dd:4c:3b:de:18:
                    4d:3c:84:d4:85:dd:7e:75:44:2d:e9:af:b8:e8:4f:
                    26:a7:25:90:5b:60:4e:47:8e:3d:a5:a0:4f:75:00:
                    ec:3f:b6:34:db:9a:22:80:88:a7:7a:32:d5:0b:7a:
                    f2:2f:79:5e:5f:33:5b:0a:a9:33:96:59:75:84:b2:
                    5a:5c:09:50:35:f4:c8:b2:0c:7d:d5:a1:ee:fb:d2:
                    cc:4b:f1:1d:00:5d:6b:a5:15:4f:e6:50:aa:49:12:
                    13:be:71:70:05:e9:bb:67:57:5b:fd:bb:4b:d0:fc:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:83:FA:6C:90:9D:F6:FF:12:A1:6E:19:71:5A:2D:E8:DE:C8:63:CA
            X509v3 Authority Key Identifier:
                keyid:50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3134382e3230322e3132382e302f31372d3137203d3e2032353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.202.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:4d:8d:8d:7c:56:08:68:50:25:1d:25:fe:0d:3f:b6:a2:
         95:65:d7:2c:09:3e:20:ee:5b:12:28:ee:75:46:2d:69:df:ec:
         02:78:91:69:5c:2f:6b:34:d5:52:61:11:68:a9:32:e7:2d:23:
         df:c2:15:4d:a0:29:64:56:b9:32:dd:c2:6e:1d:c7:3d:5b:8b:
         bc:6c:19:e0:e5:67:65:63:52:db:f4:6c:4a:5d:e6:e8:5c:89:
         1d:9c:58:a5:85:cd:66:02:81:92:1c:a0:32:b4:d2:78:8e:4c:
         0f:fe:6f:c1:5d:c8:b8:d8:78:3e:6a:5b:f8:af:e0:fb:ae:c9:
         1b:7f:24:26:47:9e:75:26:a8:b8:cb:2f:01:3f:42:bf:29:2b:
         bb:e4:e3:d3:55:b0:a4:b1:ea:38:c7:cd:f8:51:21:2d:2a:68:
         2e:a7:02:73:e6:6f:9f:c1:92:93:1c:f2:42:1d:db:e4:cf:f9:
         e0:a9:a3:a5:62:b0:e8:db:41:3d:fd:3c:8b:3b:19:b5:a9:f5:
         6f:cb:10:15:c6:0e:e3:d4:d4:1b:59:c9:a8:ea:0e:ca:b9:f3:
         16:c3:e1:2e:1b:0e:bc:a5:f9:de:dc:f6:78:37:18:7d:1d:6e:
         61:f1:66:7d:bf:d4:0a:cb:eb:f9:6e:bb:f0:43:b7:f4:af:d3:
         e8:2e:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org