Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/3134382e3231382e302e302f31372d3234203d3e203238343737.roa
File:                     3134382e3231382e302e302f31372d3234203d3e203238343737.roa (raw, json)
Hash identifier:          mjZdq5+tPQRP73nF6jx8eeV5EjdUT/sjEBNIxFQz0g8=
Subject key identifier:   EF:6C:E6:01:F7:55:3D:C0:B8:B0:82:F4:54:72:AF:55:FC:7B:89:5D
Certificate issuer:       /CN=34E2948CC30C7F4DA3561CE920B46DD4615AD585
Certificate serial:       2828BBE12AEC661B3A17227910EAA629C14AD6C7
Authority key identifier: 34:E2:94:8C:C3:0C:7F:4D:A3:56:1C:E9:20:B4:6D:D4:61:5A:D5:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/3134382e3231382e302e302f31372d3234203d3e203238343737.roa
Signing time:             Tue 05 Mar 2024 18:18:07 +0000
ROA not before:           Tue 05 Mar 2024 18:13:07 +0000
ROA not after:            Tue 04 Mar 2025 18:18:07 +0000
asID:                     28477
IP address blocks:        148.218.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:28:bb:e1:2a:ec:66:1b:3a:17:22:79:10:ea:a6:29:c1:4a:d6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E2948CC30C7F4DA3561CE920B46DD4615AD585
        Validity
            Not Before: Mar  5 18:13:07 2024 GMT
            Not After : Mar  4 18:18:07 2025 GMT
        Subject: CN=EF6CE601F7553DC0B8B082F45472AF55FC7B895D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9f:1f:43:44:f7:c7:76:df:7c:60:3e:0f:54:
                    b0:a0:f9:f3:be:33:ca:34:4b:3b:ae:e2:e7:f1:68:
                    fa:4b:55:77:bc:3b:32:2d:25:29:11:c5:16:90:80:
                    9b:ee:2d:60:34:99:da:d1:61:c7:e2:88:65:6e:fb:
                    a1:e3:e0:c0:22:d1:62:67:f1:9d:2c:00:60:ff:9a:
                    5d:7e:44:e3:d1:0f:f8:b4:71:bc:16:93:b8:b2:3d:
                    c4:1b:73:4c:d7:fa:72:9f:1f:8a:0a:5d:ad:30:a9:
                    90:44:05:49:e7:a5:9a:83:4d:9d:e1:1c:a8:ed:bb:
                    56:58:0f:43:50:6a:89:50:e1:89:c7:8d:54:8d:cb:
                    dd:fb:0f:f5:ac:b9:f5:e8:ef:d5:5d:02:76:73:49:
                    3b:70:fc:74:76:40:86:51:51:e1:09:4e:7d:48:6a:
                    2f:42:28:59:00:34:89:62:84:72:7f:b0:8d:db:1b:
                    e7:7e:b1:be:df:25:02:b3:a3:24:ba:f7:78:1b:f3:
                    04:60:42:87:bc:30:19:f8:cd:a7:d6:bd:19:63:27:
                    b9:d8:03:54:ed:0a:31:04:bf:c9:d1:41:06:2b:3e:
                    a8:7f:42:d0:31:e9:c0:5f:99:c4:50:4a:6a:e9:c2:
                    e7:d9:50:63:90:0a:b7:39:56:e1:c6:9a:3f:f1:ad:
                    56:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6C:E6:01:F7:55:3D:C0:B8:B0:82:F4:54:72:AF:55:FC:7B:89:5D
            X509v3 Authority Key Identifier:
                keyid:34:E2:94:8C:C3:0C:7F:4D:A3:56:1C:E9:20:B4:6D:D4:61:5A:D5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34E2948CC30C7F4DA3561CE920B46DD4615AD585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD27A6CED1D1BD6B139D64CFF2982A094799180599CA1DC72230D2B9A774C466/0/3134382e3231382e302e302f31372d3234203d3e203238343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.218.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         62:37:13:f0:fa:7f:33:ad:f9:82:b4:1d:f6:40:16:a0:d1:2b:
         a3:ed:0d:24:aa:b7:46:2f:ca:30:a0:8e:68:ff:e0:c4:82:07:
         61:e1:da:9f:32:1d:cf:f1:d9:bf:34:ad:41:50:31:ab:ff:45:
         03:e4:86:7f:bd:17:9a:ce:c6:4f:c8:04:76:c0:5f:2a:6b:08:
         44:fb:44:ad:e5:89:98:e9:ec:2d:28:1d:27:c7:4f:a9:73:32:
         ac:bf:11:75:3c:57:20:00:74:cb:7c:ef:86:41:f1:ef:eb:1a:
         19:e5:da:f6:d3:20:05:bc:c5:96:c8:8f:08:3d:ae:6d:21:b3:
         33:78:36:e1:31:d6:38:0b:6f:9d:8a:81:71:61:f3:6b:ae:7a:
         8b:cb:be:86:7f:1a:e7:3c:2e:31:39:d6:84:b7:22:93:a4:12:
         87:3f:aa:74:16:3d:41:5f:f5:30:76:8a:4c:a0:ae:f1:e3:31:
         82:2e:2a:46:fa:08:c8:79:0e:e0:70:8f:af:ea:2b:a0:10:dd:
         2f:92:4e:a4:1a:93:c3:d3:d7:85:28:fc:19:e7:8c:02:1e:38:
         a1:a8:91:c3:1a:37:9a:09:66:c5:27:9a:aa:29:0b:16:93:42:
         08:eb:32:d9:26:6a:4d:a3:63:be:06:91:61:13:eb:51:2e:e2:
         1f:98:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org