Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233312e302f32342d3234203d3e20323730303037.roa
File:                     3134382e3232322e3233312e302f32342d3234203d3e20323730303037.roa (raw, json)
Hash identifier:          HBthjMI8fQAT89WOFlLb4mAme3kpFH4yDUohggh0H2I=
Subject key identifier:   54:D0:DC:DE:2E:51:41:99:9C:B5:32:78:8C:8D:F7:F2:DB:59:9D:99
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       6109F35DBFE5FCE4011FA2D5935EFB9E1A552510
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233312e302f32342d3234203d3e20323730303037.roa
Signing time:             Mon 08 Jul 2024 18:15:01 +0000
ROA not before:           Mon 08 Jul 2024 18:10:01 +0000
ROA not after:            Mon 07 Jul 2025 18:15:01 +0000
asID:                     270007
IP address blocks:        148.222.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:09:f3:5d:bf:e5:fc:e4:01:1f:a2:d5:93:5e:fb:9e:1a:55:25:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Jul  8 18:10:01 2024 GMT
            Not After : Jul  7 18:15:01 2025 GMT
        Subject: CN=54D0DCDE2E5141999CB532788C8DF7F2DB599D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d5:ec:77:99:c1:ee:c0:02:97:51:fa:42:7d:
                    ce:b5:9c:b3:db:1d:7f:9e:d7:47:a4:09:26:3d:df:
                    16:2c:36:82:bf:80:a4:c3:9f:af:c6:10:06:36:7c:
                    bb:6b:63:e9:bd:f5:ef:da:ca:4f:b1:02:dc:56:60:
                    86:08:fa:d6:bb:eb:aa:e5:71:e9:a7:0c:a6:87:6e:
                    0f:4b:67:cb:01:06:4c:2d:2b:a7:36:98:66:cb:c2:
                    22:95:17:5a:d7:83:6d:ec:c7:ba:86:b1:a0:b8:fd:
                    5d:95:ab:8f:81:b4:29:6a:ec:4b:92:51:79:f7:39:
                    0c:c7:f3:c8:b6:79:9b:5c:83:19:55:7e:b9:fd:f9:
                    3a:3c:b0:7c:0a:1f:a9:bd:35:c0:d8:e9:15:0e:a3:
                    0d:3f:0a:af:8b:5b:98:e8:2b:4d:8d:ad:71:66:2e:
                    f2:89:98:50:48:dc:81:11:7a:28:88:4c:93:95:1b:
                    27:ff:27:79:79:6f:54:ba:5e:a4:aa:df:6c:85:9e:
                    34:67:dd:52:da:a4:8e:6e:e8:47:86:97:87:89:19:
                    0b:c5:97:01:cd:60:f5:e4:dc:f7:95:de:50:28:a0:
                    d6:42:5d:55:86:a7:96:e4:d7:61:37:91:93:cf:4e:
                    62:7e:fa:50:fe:4e:76:49:eb:54:1b:4b:d8:9d:f2:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D0:DC:DE:2E:51:41:99:9C:B5:32:78:8C:8D:F7:F2:DB:59:9D:99
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233312e302f32342d3234203d3e20323730303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:9f:d6:05:85:28:be:3a:e2:ca:21:f3:3c:5e:83:95:9b:c0:
         f8:3e:d1:33:8d:b7:bd:27:71:3a:cf:6f:8a:29:7a:f3:50:ab:
         1f:b0:a6:5c:b2:f1:07:0b:c0:3a:38:dd:16:59:ad:a9:db:65:
         1d:0a:43:bf:fd:72:db:2b:8b:75:22:d4:f9:4f:ae:ec:e5:01:
         4d:6c:df:c6:de:10:10:6f:38:50:f5:73:37:5b:90:84:a8:c5:
         f4:d7:ed:70:a2:d3:55:53:ee:df:c7:1d:9d:a2:f6:fb:ac:ac:
         b1:98:e4:11:35:49:df:fb:00:17:8c:ee:a8:80:d2:5d:3d:f3:
         fd:cc:50:f2:8d:28:f8:88:50:6f:b0:04:7f:93:43:2b:c3:bf:
         93:08:46:53:d7:ab:25:5f:5c:1e:83:d8:c5:c9:16:ff:7e:92:
         b9:40:54:10:67:43:fa:39:8d:db:59:c2:0c:db:94:c4:21:ed:
         74:be:ec:2f:e1:bd:5e:73:5e:bd:75:39:80:13:54:fd:e5:70:
         83:d3:1c:93:30:61:8d:76:c9:68:10:98:25:e0:29:0f:79:d6:
         bb:00:a3:f4:f2:25:e2:c8:0e:a9:43:37:d4:13:51:52:69:d0:
         6b:a7:83:54:b4:12:7d:c8:7c:17:a0:15:7b:b1:8b:89:b1:b4:
         70:6a:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:25 2024 by rpki-client on console-ams.rpki-client.org