Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131312e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e3131312e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          lxeHmG5tBh3AuOLXZq+O7XSY8lJkuXOUEicicVE6zow=
Subject key identifier:   C0:5A:BB:5B:6F:0E:67:90:DF:53:2E:4A:36:5D:D3:A2:6F:E3:F5:0B
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       6E62B9489DBE1591ACE0F9137E54298C6307244B
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131312e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 05 Mar 2024 18:20:14 +0000
ROA not before:           Tue 05 Mar 2024 18:15:14 +0000
ROA not after:            Tue 04 Mar 2025 18:20:14 +0000
asID:                     21575
IP address blocks:        148.102.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:62:b9:48:9d:be:15:91:ac:e0:f9:13:7e:54:29:8c:63:07:24:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Mar  5 18:15:14 2024 GMT
            Not After : Mar  4 18:20:14 2025 GMT
        Subject: CN=C05ABB5B6F0E6790DF532E4A365DD3A26FE3F50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:63:97:da:f1:3e:37:c2:54:10:d1:6d:b9:
                    99:44:83:db:da:eb:13:b5:21:b0:63:9f:4b:48:46:
                    bd:82:9a:d7:fb:d5:63:9b:0d:1f:5a:4d:9e:6a:55:
                    20:0c:a3:92:88:00:b2:c4:5e:38:39:a3:ff:d0:bc:
                    07:a7:fa:7d:b2:2d:b8:c9:3f:21:e1:18:80:af:d6:
                    60:1a:f4:28:15:27:a6:08:28:31:e1:27:ed:0c:1e:
                    94:91:14:c5:34:c3:16:aa:04:d6:12:bd:b8:9f:74:
                    f6:a4:f3:a7:0a:c7:9b:05:ce:18:c0:6f:56:f2:25:
                    0e:09:e9:ee:ae:08:90:b8:b3:c4:5f:16:53:76:4a:
                    9b:26:86:d2:35:18:88:98:90:3c:f8:9d:21:42:e9:
                    e2:55:45:e7:f4:1a:4b:2c:ba:1b:71:5f:ea:58:b6:
                    b9:14:dc:53:f3:77:69:3c:38:55:87:46:43:ad:9d:
                    cd:09:11:ea:a0:31:22:c6:fe:da:6e:07:3a:4b:b6:
                    83:ae:45:73:c2:1f:ed:b8:36:c5:77:0b:b1:4b:c0:
                    1d:cf:4a:ab:ee:c6:bc:bd:b4:87:8a:59:c6:2f:58:
                    66:4f:fb:48:97:4c:56:db:fb:42:ad:d8:39:9b:6f:
                    b6:23:cb:cf:50:9f:bb:58:96:59:20:47:1c:a9:e7:
                    d6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5A:BB:5B:6F:0E:67:90:DF:53:2E:4A:36:5D:D3:A2:6F:E3:F5:0B
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131312e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:db:d4:47:01:73:8a:84:34:79:6d:29:41:17:34:92:8b:e9:
         61:8c:5a:14:f3:8d:0b:3a:c3:d6:19:6a:97:36:c8:c2:16:b6:
         60:37:1a:1e:e3:d6:2a:37:0f:9e:1e:68:b0:ae:07:c6:6c:48:
         3d:ea:2c:d1:a3:2d:9b:71:33:b0:22:9b:aa:29:e1:8d:d5:77:
         a9:1d:6b:4a:89:8d:88:f4:9f:49:54:57:f8:7a:85:27:7f:81:
         8a:6c:16:3e:cc:88:8f:82:e8:b6:20:d8:95:02:fa:09:e7:e9:
         83:f4:ab:20:1d:0a:3d:ab:a8:a5:64:cc:fa:fe:07:02:fc:79:
         72:23:bf:c7:07:03:06:de:05:f8:f9:98:39:a4:4b:3b:94:23:
         3f:5b:68:e5:9a:dc:5a:77:da:28:ff:49:93:ae:98:06:75:09:
         4f:74:8b:40:dc:fc:48:7b:c4:a3:bd:92:91:8d:7c:06:59:af:
         4c:36:2a:76:0e:01:f8:97:17:9c:80:1e:70:88:8d:b9:6d:f0:
         a2:45:5d:68:5a:1c:6e:56:d6:d7:bf:2f:21:8b:f0:2f:09:ed:
         cf:59:d0:d0:31:b7:d2:ea:a7:84:6c:07:40:1c:c8:21:66:c3:
         40:cc:f3:7c:9c:91:7d:21:7f:ac:93:ce:7b:87:62:75:6e:3e:
         0e:f4:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:49 2024 by rpki-client on console-fra.rpki-client.org