Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39372e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e39372e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          FqiHwoTQOncUQ2lwM1IPGxjFLjAf6/8cZD2M4iqHpfA=
Subject key identifier:   8C:AE:B7:02:48:5D:14:16:A8:2C:98:D8:0F:9F:73:C7:EE:36:17:A6
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       3FA02453A793A78F487B3E77E1A1AFFA747787F0
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39372e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 05 Mar 2024 18:20:12 +0000
ROA not before:           Tue 05 Mar 2024 18:15:12 +0000
ROA not after:            Tue 04 Mar 2025 18:20:12 +0000
asID:                     21575
IP address blocks:        148.102.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a0:24:53:a7:93:a7:8f:48:7b:3e:77:e1:a1:af:fa:74:77:87:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Mar  5 18:15:12 2024 GMT
            Not After : Mar  4 18:20:12 2025 GMT
        Subject: CN=8CAEB702485D1416A82C98D80F9F73C7EE3617A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:08:c9:5e:7d:da:f1:d0:27:10:58:42:68:
                    a8:78:97:82:d4:43:74:72:c0:00:e8:ff:a2:98:c0:
                    74:80:18:f8:47:cb:d8:1d:cd:da:aa:9c:ed:ef:d4:
                    05:d2:f3:42:e9:9e:72:1f:1c:0c:50:54:f1:09:6f:
                    20:d6:34:67:a5:b9:12:82:f2:79:4f:be:66:02:8c:
                    82:4e:c9:00:52:19:68:a5:b5:f0:6d:5c:f6:33:e1:
                    a7:18:f4:38:16:8a:57:57:8e:3e:ed:4a:96:b7:f9:
                    6f:30:f5:de:98:2a:8d:99:ab:2b:1a:b0:90:06:2b:
                    e6:4b:24:7b:10:96:1b:6b:9f:1b:63:83:b4:be:b5:
                    08:b9:a7:23:41:e3:d6:ad:0c:5a:13:f0:27:e1:71:
                    c3:4e:85:ef:fb:50:3d:b1:80:85:4b:7b:77:46:5e:
                    65:34:7d:3c:2c:8d:71:1f:1e:9f:61:b0:a9:8c:ab:
                    69:8d:48:9d:5b:56:8d:6f:37:44:a4:58:61:63:40:
                    30:21:87:d8:7f:e1:61:fb:62:02:64:11:a6:da:5b:
                    68:18:f6:5d:f6:ab:b7:38:bf:65:4f:13:39:67:38:
                    e0:95:cc:92:c7:11:e5:b8:28:e7:3c:1f:c2:74:97:
                    c8:dc:74:ea:29:54:67:cb:3f:39:48:4b:4d:7a:18:
                    69:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AE:B7:02:48:5D:14:16:A8:2C:98:D8:0F:9F:73:C7:EE:36:17:A6
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e39372e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:01:ca:40:07:12:6e:8f:cb:bb:b1:5d:ed:91:e5:1a:ee:c4:
         a7:77:0a:d1:f9:8a:94:f2:5c:b0:a4:93:28:6a:6f:7e:e2:55:
         ce:d1:a2:f6:d8:1b:13:39:51:69:9f:5e:cc:e7:0f:27:1e:01:
         79:a6:4d:d3:ec:25:5b:14:3f:7e:54:84:98:66:92:6b:c3:29:
         f9:74:bc:d5:09:cf:8d:3f:50:54:62:e1:36:f9:59:6f:b6:e9:
         b2:a0:6f:aa:70:81:90:51:91:df:28:6b:5a:0a:e3:99:1f:e1:
         f1:7e:e9:50:52:85:e9:01:ed:4d:7d:f5:12:5b:e4:a7:6d:d3:
         e3:b8:35:b9:bc:77:ef:ec:a0:f7:e3:0c:b6:f1:9c:c9:be:a6:
         b9:b1:11:0f:a6:81:11:37:3d:62:ef:9f:ff:98:ec:07:fd:a4:
         c9:64:24:2d:c7:ee:6d:a2:f8:c9:f1:2b:b9:5b:52:0c:80:ca:
         51:12:e6:dd:d3:5c:5a:1b:51:57:87:60:ce:02:9f:0c:a6:75:
         a6:6b:98:4b:12:5e:b8:9a:52:19:d8:7d:d1:17:ed:79:d9:ff:
         b0:83:03:9b:3b:69:f8:aa:2b:94:57:6d:05:a7:36:5b:d5:24:
         26:5b:91:6a:db:a5:a9:82:59:9d:bc:be:38:42:55:86:9a:05:
         01:96:57:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org