Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3134382e3130332e302e302f31362d3234203d3e203238313138.roa
File:                     3134382e3130332e302e302f31362d3234203d3e203238313138.roa (raw, json)
Hash identifier:          zEpEqt3mPYJZ3SovINi7X63CSrSkdwHJsYZQYbKUgoE=
Subject key identifier:   D7:C3:E1:00:94:8B:5A:31:82:A8:16:DD:87:79:9E:60:53:4F:87:1B
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       685CDBAA380519F9298414986B109CB95382FA55
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3134382e3130332e302e302f31362d3234203d3e203238313138.roa
Signing time:             Tue 05 Mar 2024 18:09:17 +0000
ROA not before:           Tue 05 Mar 2024 18:04:17 +0000
ROA not after:            Tue 04 Mar 2025 18:09:17 +0000
asID:                     28118
IP address blocks:        148.103.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5c:db:aa:38:05:19:f9:29:84:14:98:6b:10:9c:b9:53:82:fa:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:17 2024 GMT
            Not After : Mar  4 18:09:17 2025 GMT
        Subject: CN=D7C3E100948B5A3182A816DD87799E60534F871B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:30:6d:b0:a0:07:ba:23:f0:38:3c:9d:e8:
                    c3:ca:df:90:c8:a8:47:93:7d:24:53:05:a3:3e:fd:
                    87:cc:f3:b1:58:ee:63:61:1f:d0:bc:a4:e5:1b:4e:
                    2c:3b:f6:d0:af:4e:b0:04:83:b8:18:70:6e:bf:37:
                    bb:de:9d:5d:34:96:ac:75:6e:4e:0d:f3:c9:20:7e:
                    53:34:cd:db:33:dc:27:89:6a:33:50:86:96:13:e2:
                    b8:6a:b4:e3:48:4b:c0:41:63:8c:a2:b9:98:4e:58:
                    53:ba:d3:d4:2a:9b:17:5c:21:49:a9:81:7c:b1:39:
                    d8:26:cb:c7:28:c5:98:06:50:eb:54:8e:51:7c:60:
                    cd:9f:8d:4a:88:4d:f9:33:8c:03:a8:46:ff:a5:e3:
                    a6:f6:46:e3:17:24:d0:a9:a2:8a:97:1b:50:f2:1f:
                    c3:51:39:e8:9e:cd:96:ad:15:dc:87:cb:56:e3:0c:
                    1d:71:a3:bd:67:2e:35:8a:32:d3:47:ec:49:c0:6d:
                    7c:f4:9b:b3:16:0c:ca:4d:bb:8a:cd:26:d6:aa:26:
                    1e:c1:29:e9:2f:d6:e6:d1:f6:ab:00:1a:ff:34:89:
                    a3:69:a3:20:e6:70:3f:c4:31:07:05:b0:49:3e:dd:
                    e6:e9:07:d4:f8:85:a9:92:52:3d:7b:15:7d:ea:e6:
                    f3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C3:E1:00:94:8B:5A:31:82:A8:16:DD:87:79:9E:60:53:4F:87:1B
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3134382e3130332e302e302f31362d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8f:ca:0b:9e:dd:01:ad:4b:1c:95:42:57:94:90:5a:0c:9b:f4:
         68:c9:b9:67:df:cc:3d:55:92:b2:15:00:87:cf:74:ac:18:ee:
         59:3a:b0:87:2c:a8:7c:03:76:60:8a:d1:7b:ea:88:95:f2:b6:
         58:71:bd:e3:d1:13:94:a2:68:f7:b1:83:2e:7c:d7:7a:f8:3f:
         73:e3:a9:71:75:68:dc:73:e5:7f:87:ef:f4:20:81:9a:3c:d1:
         b4:77:e6:de:8a:40:48:09:55:75:65:94:51:9d:dc:76:6d:62:
         f0:84:a1:4e:51:57:eb:10:5f:55:5d:38:e6:2b:c8:13:3d:6f:
         a9:80:5e:0d:68:f4:6e:a3:a6:1c:66:6b:b4:f1:35:18:52:2a:
         fd:47:f5:4f:9e:41:0c:1a:69:6f:d2:78:2f:77:aa:e5:93:89:
         71:ee:44:bd:cc:e1:32:2f:63:3e:51:4d:39:c7:07:8c:46:ec:
         6d:3a:ae:fa:54:e9:12:94:64:e7:17:56:61:a5:04:f0:41:6f:
         aa:84:e7:b1:5b:d3:99:43:50:46:7e:62:47:8a:b8:e3:bf:0d:
         a4:33:95:78:e7:af:24:e6:20:36:fe:32:ac:34:15:4b:2f:3c:
         1f:2a:71:66:15:8b:98:9e:87:76:31:8d:81:6f:87:9d:47:7b:
         7c:22:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:18 2024 by rpki-client on console-ams.rpki-client.org