Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232342e302f32342d3234203d3e203634313532.roa
File:                     3134382e3232322e3232342e302f32342d3234203d3e203634313532.roa (raw, json)
Hash identifier:          AuAzyOVv+k9ExsjooTbIpcs2w4SYm5Rt4J97cyEmxBc=
Subject key identifier:   0E:09:04:F4:A9:DF:C1:FC:C6:6D:74:F2:6A:B5:72:F7:E4:BA:69:36
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       6A5176491FAB3F9656AF129BF34479AC5B2AA323
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232342e302f32342d3234203d3e203634313532.roa
Signing time:             Thu 30 May 2024 23:20:00 +0000
ROA not before:           Thu 30 May 2024 23:15:00 +0000
ROA not after:            Thu 29 May 2025 23:20:00 +0000
asID:                     64152
IP address blocks:        148.222.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:51:76:49:1f:ab:3f:96:56:af:12:9b:f3:44:79:ac:5b:2a:a3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: May 30 23:15:00 2024 GMT
            Not After : May 29 23:20:00 2025 GMT
        Subject: CN=0E0904F4A9DFC1FCC66D74F26AB572F7E4BA6936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7d:0e:1d:98:fd:4e:fd:98:dd:ec:c2:bf:07:
                    24:30:2b:29:c2:2c:a8:f1:59:ff:c2:81:29:8d:e6:
                    b1:1e:66:8c:ef:10:b6:a6:71:24:16:7c:84:f0:60:
                    a5:79:90:64:b2:08:5c:9e:be:c7:b1:0a:89:96:06:
                    07:bd:fa:9e:d5:12:8e:f0:9d:f1:0e:81:ac:7f:9b:
                    59:a9:c0:37:1f:f8:ad:05:fc:41:48:42:64:a4:4a:
                    ed:cf:ab:ae:5d:fc:37:2a:13:0c:c2:57:b1:63:e8:
                    e1:42:26:b7:7e:57:f5:b1:1b:93:7b:a4:61:7f:3e:
                    6a:f8:3c:e1:96:62:d2:1e:55:0f:34:ac:e2:01:68:
                    0a:75:a3:70:f0:c3:9e:1b:eb:0a:9f:24:1b:73:d7:
                    31:9f:ec:a1:83:7d:6b:a1:3a:1f:87:fe:75:ec:bc:
                    c2:a6:1a:e3:c1:da:32:50:99:cb:7a:2a:04:1d:6e:
                    41:3d:b9:1f:ff:1d:70:6b:b5:67:26:2a:2c:50:ba:
                    b9:49:97:8f:1f:2d:35:2b:2c:dd:90:44:0a:6c:e8:
                    da:5e:fa:7f:ba:2e:df:b8:a3:ae:f8:8d:9d:1a:08:
                    4b:36:e4:9e:fc:31:47:e1:a5:9f:78:8d:b5:55:77:
                    98:0b:31:86:db:79:64:2a:2c:46:be:89:91:6f:7c:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:09:04:F4:A9:DF:C1:FC:C6:6D:74:F2:6A:B5:72:F7:E4:BA:69:36
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232342e302f32342d3234203d3e203634313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:87:31:27:1d:93:6f:a1:33:39:a2:db:8f:c6:88:97:39:69:
         9b:b5:e6:e2:b0:38:75:dc:d2:02:81:28:80:cc:a4:28:45:f4:
         1a:cf:69:8a:ed:88:99:ac:96:cf:e5:2c:44:11:66:ed:ca:5b:
         45:13:09:f7:13:9b:87:bf:d3:f3:31:34:4a:06:d4:bd:15:09:
         4a:14:4e:b2:bd:48:15:d5:43:91:e9:85:44:44:5f:a3:b1:fd:
         6f:3d:8d:26:ce:1a:da:eb:ca:15:03:9c:de:1a:ce:88:a7:9e:
         1b:28:ef:b5:25:be:a9:56:9e:6d:0c:42:12:71:70:28:a5:5c:
         f4:ec:51:0d:91:05:40:29:75:69:6e:ba:95:3f:64:e3:94:30:
         ab:3c:48:bf:ae:bb:28:31:cb:6b:2b:fe:28:c6:51:3e:30:a5:
         80:c5:7c:5c:67:76:8f:ba:56:2f:99:ce:91:79:1d:b0:8a:d5:
         3e:bd:75:a8:f7:ef:7b:07:15:ed:ce:10:fe:af:53:51:89:4f:
         96:14:eb:25:71:51:be:f0:af:f9:4e:f7:23:96:af:5c:75:0d:
         e1:76:e7:f8:06:07:4e:d1:84:e8:0c:cd:94:27:f1:a5:45:59:
         4b:54:6b:88:6f:ea:16:b0:e6:01:6c:5f:f0:c7:3a:c0:7a:fc:
         fd:e2:bf:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org