Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e302e302f31372d3234203d3e203139313830.roa
File:                     3134382e3130322e302e302f31372d3234203d3e203139313830.roa (raw, json)
Hash identifier:          ecq3EQ4ItpFQwF17CBJNAA0+6SA+Wjms1ZKqFX3HqRE=
Subject key identifier:   E4:DB:E7:2A:C1:5B:60:23:C1:14:45:A9:45:BB:4A:AA:20:A7:4F:FC
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       3650191D319C79AF934F738B813147A24B7B7C21
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e302e302f31372d3234203d3e203139313830.roa
Signing time:             Tue 05 Mar 2024 18:20:20 +0000
ROA not before:           Tue 05 Mar 2024 18:15:20 +0000
ROA not after:            Tue 04 Mar 2025 18:20:20 +0000
asID:                     19180
IP address blocks:        148.102.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:50:19:1d:31:9c:79:af:93:4f:73:8b:81:31:47:a2:4b:7b:7c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Mar  5 18:15:20 2024 GMT
            Not After : Mar  4 18:20:20 2025 GMT
        Subject: CN=E4DBE72AC15B6023C11445A945BB4AAA20A74FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:b5:4e:ee:78:71:84:e3:82:6f:4b:43:35:
                    1b:69:c9:42:f2:20:3f:9b:9c:df:48:d7:3b:d7:df:
                    4e:69:87:db:88:9d:ea:ff:6d:9f:e8:63:01:ce:b0:
                    c4:13:93:b8:8d:f2:f4:52:1c:bc:7a:b6:1f:64:2a:
                    50:3e:47:1e:f6:08:fd:85:dd:ce:b5:b6:38:93:2e:
                    63:08:7f:fd:7f:60:ff:a4:f4:ae:29:4b:2c:18:ea:
                    ae:9d:6b:f2:b4:b9:90:e9:c5:c9:76:5a:58:1e:95:
                    95:ac:df:c5:05:0f:ca:8a:e8:e8:40:24:59:52:95:
                    2a:be:8d:04:43:5e:d5:d3:dc:30:2a:d1:83:2f:01:
                    0e:fb:8f:ba:93:19:4f:c0:f9:44:4e:a7:a6:a6:26:
                    a9:ca:08:87:2a:ed:46:c8:64:9c:ca:7b:65:da:21:
                    37:af:ab:76:7e:e8:84:56:97:c9:ba:bd:5a:18:af:
                    d4:36:73:7e:ce:d5:e7:47:da:ca:70:17:21:b6:1b:
                    d9:53:0a:c0:76:4b:b1:88:63:f2:c0:fa:c1:9f:86:
                    d8:7c:ef:47:2a:f3:e7:14:64:c1:d7:6a:46:64:32:
                    5d:ba:fd:9d:2b:36:ba:eb:f1:5a:51:43:1f:41:28:
                    4d:36:e2:41:bb:f6:bb:01:b4:9c:17:37:0d:e7:f5:
                    f0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DB:E7:2A:C1:5B:60:23:C1:14:45:A9:45:BB:4A:AA:20:A7:4F:FC
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e302e302f31372d3234203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         64:31:9a:3a:d8:c7:d1:21:04:8d:97:9d:6c:6d:db:20:b3:d1:
         88:22:f3:e9:c1:b1:16:af:68:8a:85:0f:2c:60:d2:8f:9b:31:
         0c:ce:4a:ec:d7:35:58:6f:7e:5e:78:c2:59:f3:68:57:9d:22:
         7e:b0:2a:06:28:e6:2d:1c:1e:03:49:14:9b:74:0c:07:04:3a:
         8c:39:60:ac:71:a8:61:ee:2f:fd:7c:67:5d:16:45:64:55:e9:
         da:66:c7:ee:f3:ee:fa:74:00:69:f5:19:75:a8:46:7d:48:af:
         a8:05:64:79:6d:ba:20:5b:96:b4:e6:51:5e:dc:48:ec:e8:e7:
         99:ec:fa:d6:77:b6:42:48:c9:8e:c9:ee:76:72:15:33:18:f0:
         87:cf:b8:2e:31:72:34:cf:7f:0a:4e:0c:0a:0d:3f:da:54:d8:
         eb:20:ac:b1:9c:91:69:b3:63:23:cc:60:3d:10:9c:3a:bb:2c:
         6b:d0:03:c2:0d:a1:cc:a2:92:b5:5d:48:1d:9c:49:48:c9:88:
         a3:01:c0:58:12:99:41:c5:83:48:56:36:3e:02:f8:7c:23:1e:
         9b:35:fd:fb:ef:63:6e:07:78:3d:5d:b2:be:dc:6b:a6:3e:25:
         f3:13:b6:77:cd:99:cb:5f:a8:d4:3e:ef:d2:a4:40:3a:b1:4d:
         6e:a1:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org