Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232372e302f32342d3234203d3e20323733303030.roa
File:                     3134382e3232322e3232372e302f32342d3234203d3e20323733303030.roa (raw, json)
Hash identifier:          a8qDX3UMVuPAbF2L/OMi+mhUYrEEP8+nNOrBhrhFyGc=
Subject key identifier:   9B:AE:44:19:B6:93:07:AC:C5:31:99:79:52:5D:2C:67:1F:CE:C5:F4
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       24E6638A7508528ACDF59551738EC0A43B757268
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232372e302f32342d3234203d3e20323733303030.roa
Signing time:             Tue 22 Oct 2024 01:30:00 +0000
ROA not before:           Tue 22 Oct 2024 01:25:00 +0000
ROA not after:            Tue 21 Oct 2025 01:30:00 +0000
asID:                     273000
IP address blocks:        148.222.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e6:63:8a:75:08:52:8a:cd:f5:95:51:73:8e:c0:a4:3b:75:72:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Oct 22 01:25:00 2024 GMT
            Not After : Oct 21 01:30:00 2025 GMT
        Subject: CN=9BAE4419B69307ACC5319979525D2C671FCEC5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:35:ba:f9:0b:0e:f9:50:e5:25:00:d2:70:
                    72:be:9a:92:ff:d2:be:8a:d4:d3:8f:80:10:4a:0f:
                    c1:a7:d4:e6:89:65:d3:c6:1e:ce:70:03:8d:34:87:
                    8f:fb:21:14:ce:0e:90:18:91:5d:b4:d2:73:9a:27:
                    ae:12:72:ef:f4:be:f6:2c:43:72:89:ae:99:28:a2:
                    10:b2:c6:47:3e:9f:6b:23:3c:a2:d8:4a:48:c1:e7:
                    2e:0c:09:ec:9f:7f:21:ad:d7:bf:4c:2b:66:68:63:
                    0d:74:bb:fc:98:4c:fa:6a:df:1c:95:bd:6e:fb:8f:
                    a7:bd:ec:7c:82:f4:65:5b:d1:9d:95:a5:23:70:ac:
                    d6:2a:b9:00:69:8d:ba:74:eb:bc:0c:4c:08:9d:54:
                    eb:85:7a:f3:43:38:ad:b0:3e:68:fd:0c:26:fc:51:
                    8b:1d:c3:e9:5a:dd:0e:f7:f2:21:cb:c5:61:8f:76:
                    48:dd:e8:77:75:3d:6a:6c:39:ad:46:43:c9:65:39:
                    40:55:48:5a:1c:02:ce:b4:ef:6b:7e:9e:7a:c8:50:
                    de:a0:bd:f8:83:c8:64:0b:3d:fc:10:0a:c4:34:2b:
                    8d:54:e2:d6:71:bd:4c:a4:fa:22:62:21:8b:f8:22:
                    2f:fe:b3:11:05:b3:db:91:4f:65:91:50:bb:f3:0a:
                    00:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AE:44:19:B6:93:07:AC:C5:31:99:79:52:5D:2C:67:1F:CE:C5:F4
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232372e302f32342d3234203d3e20323733303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:00:f9:b7:ff:e3:8e:e1:b2:1d:54:4a:3a:9f:5d:2b:67:a9:
         61:5f:00:7b:dd:f7:cc:4f:c8:32:65:dd:7c:1b:5c:3d:20:cb:
         3a:63:d0:12:27:bf:21:c5:ba:e6:de:c1:8a:be:f1:89:aa:2c:
         5d:e2:58:dd:6d:86:5f:5e:b3:4e:50:fe:71:56:6d:5d:94:bf:
         fc:01:37:24:c3:4f:28:6a:ff:83:61:8d:b9:e6:c4:31:ca:d5:
         7e:f5:12:6d:42:19:4f:27:ab:04:58:3c:47:27:66:1f:25:31:
         87:8b:aa:e1:91:0a:83:80:e5:67:30:6e:04:bc:29:ac:55:3b:
         e3:11:b8:a7:0e:aa:c7:f1:57:c3:c8:fb:03:c4:2e:5e:7c:1e:
         d1:f6:8b:0a:17:57:e4:dd:51:25:dc:e0:a1:f6:ff:ea:74:86:
         04:41:2d:68:ac:8f:03:97:bb:2d:28:a2:bb:76:6f:1c:18:85:
         8a:4b:be:67:56:db:f2:f1:bf:b6:33:21:96:7a:5a:81:9b:4e:
         f6:4f:26:64:7b:a5:b3:22:4f:9d:e5:35:e5:98:0e:e6:cd:5d:
         3b:a7:29:a7:ac:68:24:1f:90:b5:f5:dd:90:fa:26:37:9b:f9:
         86:de:1c:38:2b:3a:20:dd:aa:46:c3:0c:dd:cb:ac:7c:ab:4d:
         37:67:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org