Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/3134382e3233342e302e302f31362d3136203d3e2033343534.roa
File:                     3134382e3233342e302e302f31362d3136203d3e2033343534.roa (raw, json)
Hash identifier:          m8hPwurNBcDKJ74nw6AHaN9wwiZqMAj6YPCnaav9wNk=
Subject key identifier:   BE:90:9D:E7:56:69:CA:DA:27:AE:0C:9B:88:07:F2:EA:05:44:E3:3C
Certificate issuer:       /CN=505673F92F9F900BC9EBDFFB3B022EDD77EC55F1
Certificate serial:       68DDDB56AE3549EE329DA490893E9B6C9ED88AA4
Authority key identifier: 50:56:73:F9:2F:9F:90:0B:C9:EB:DF:FB:3B:02:2E:DD:77:EC:55:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/3134382e3233342e302e302f31362d3136203d3e2033343534.roa
Signing time:             Tue 05 Mar 2024 18:06:10 +0000
ROA not before:           Tue 05 Mar 2024 18:01:10 +0000
ROA not after:            Tue 04 Mar 2025 18:06:10 +0000
asID:                     3454
IP address blocks:        148.234.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:dd:db:56:ae:35:49:ee:32:9d:a4:90:89:3e:9b:6c:9e:d8:8a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505673F92F9F900BC9EBDFFB3B022EDD77EC55F1
        Validity
            Not Before: Mar  5 18:01:10 2024 GMT
            Not After : Mar  4 18:06:10 2025 GMT
        Subject: CN=BE909DE75669CADA27AE0C9B8807F2EA0544E33C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e4:bf:ea:a3:77:81:29:90:f3:c6:5b:cd:98:
                    03:fd:b1:95:6e:39:55:89:cc:d1:c3:ec:15:27:c3:
                    42:37:7a:41:a0:bf:c3:63:3f:a2:28:4e:3d:44:2d:
                    13:6b:8d:d8:65:f6:5a:05:6b:c8:87:de:ff:46:12:
                    76:9b:14:7e:0c:07:14:d3:6f:54:a8:74:e4:5e:59:
                    48:43:c0:aa:59:60:31:00:da:7f:8b:ec:e2:23:8a:
                    ed:c6:88:7e:00:63:4a:38:91:c7:a4:1e:77:f5:00:
                    b5:f8:3a:6b:e0:f6:3f:25:64:b9:b8:d8:80:9c:e4:
                    9c:b9:58:a8:27:62:57:d5:7e:a0:56:a4:1d:71:d6:
                    ed:84:e1:ec:c6:ca:23:07:11:7e:42:05:cd:1e:ed:
                    65:c0:71:43:09:fc:f7:2e:db:31:af:ee:57:59:4f:
                    94:ea:1d:80:c0:29:ad:c5:fa:6c:4e:a4:75:1c:ba:
                    0d:0f:ac:36:8c:4c:24:53:70:6f:d4:47:f8:f8:6c:
                    de:8c:f1:4e:9f:82:a3:4f:ca:88:63:7d:82:a5:0e:
                    09:ab:e2:31:02:d8:64:e7:49:0b:ab:68:2a:17:f3:
                    68:b4:c0:b2:2c:8c:d4:7e:bd:3b:b7:5b:2e:05:b6:
                    04:e4:e4:cc:5d:6c:a5:95:a8:59:c4:42:92:5b:1d:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:90:9D:E7:56:69:CA:DA:27:AE:0C:9B:88:07:F2:EA:05:44:E3:3C
            X509v3 Authority Key Identifier:
                keyid:50:56:73:F9:2F:9F:90:0B:C9:EB:DF:FB:3B:02:2E:DD:77:EC:55:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/505673F92F9F900BC9EBDFFB3B022EDD77EC55F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC4B766897AD663C320DCE4DA07F1D81EBC20A2B292938C0D3CF84EF0C5FCEFA/0/3134382e3233342e302e302f31362d3136203d3e2033343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:70:ff:90:13:07:35:69:02:f1:71:ae:cd:9d:75:6b:03:d0:
         bf:d0:07:d1:58:11:eb:98:bc:24:4f:28:ac:83:f1:21:2a:97:
         4a:1a:2d:2e:b3:c5:ce:87:fe:3b:7e:77:6c:ae:29:9f:0b:f8:
         ad:d1:b0:a8:7c:2c:84:26:bf:cf:f6:19:d5:d0:0f:5b:13:f7:
         7c:78:b0:b6:58:b0:c8:bc:01:2f:c6:67:3e:71:ae:4d:0f:61:
         f9:1f:af:a7:d2:0d:4a:ab:d7:92:31:b9:ce:f3:9a:fa:94:fd:
         c1:25:47:ec:d1:7e:e6:21:cc:06:ff:cd:ef:17:92:5c:63:48:
         cc:4f:3c:c4:66:ec:ff:56:e7:62:c4:f3:38:5b:43:ee:62:6c:
         c0:e5:15:af:f2:8c:d0:e7:3b:db:19:3e:65:8f:39:eb:ae:2d:
         d6:0d:4f:0f:72:13:c9:4a:b4:85:7c:9a:14:1a:bc:21:dc:58:
         97:65:9a:13:57:0d:41:4b:d2:7f:33:43:87:98:c5:1f:18:5e:
         84:1e:fb:75:70:dc:b3:32:11:dd:cf:02:c2:e7:7a:88:16:08:
         55:8a:35:f9:fb:bf:0b:ec:65:25:a2:2b:f7:1f:5d:ff:ef:32:
         44:84:e4:62:e9:dd:96:37:9f:4e:0a:9d:fd:df:d8:80:6e:cb:
         77:4f:4a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:02 2024 by rpki-client on console-ams.rpki-client.org