Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134382e3234342e302e302f31362d3234203d3e203131313732.roa
File:                     3134382e3234342e302e302f31362d3234203d3e203131313732.roa (raw, json)
Hash identifier:          eGXOuJZifd5Gi6FvPq3pYAYDI5yx9fdD06EK0lrQzKQ=
Subject key identifier:   CC:78:82:F6:99:5F:BE:C1:89:F1:8A:6D:33:91:F0:9B:EB:67:6E:93
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       4B5BD3E1C3E0E0E7B5720BA0289EDDB03ADE52EE
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134382e3234342e302e302f31362d3234203d3e203131313732.roa
Signing time:             Tue 05 Mar 2024 17:54:32 +0000
ROA not before:           Tue 05 Mar 2024 17:49:32 +0000
ROA not after:            Tue 04 Mar 2025 17:54:32 +0000
asID:                     11172
IP address blocks:        148.244.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5b:d3:e1:c3:e0:e0:e7:b5:72:0b:a0:28:9e:dd:b0:3a:de:52:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:32 2024 GMT
            Not After : Mar  4 17:54:32 2025 GMT
        Subject: CN=CC7882F6995FBEC189F18A6D3391F09BEB676E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c7:8a:68:e5:0f:1b:8a:a2:74:a9:79:c5:5b:
                    d5:f7:9d:c5:d7:b7:63:50:92:3e:8a:00:94:b5:06:
                    2d:8c:09:70:38:27:58:a0:b9:55:8c:d2:1c:8f:08:
                    76:80:fc:00:ba:ff:35:d8:5f:74:51:94:44:14:41:
                    3a:9e:ff:f5:af:26:79:53:9a:6b:6e:95:38:19:fb:
                    10:bf:a2:cc:de:f6:c4:cb:52:d1:f4:9e:a6:78:14:
                    6f:45:80:f9:6f:39:a4:17:e1:cc:43:77:61:b2:f8:
                    6e:eb:53:f6:72:de:4b:52:49:62:7b:7d:63:b1:09:
                    69:72:b9:21:7f:92:a5:1b:34:6f:f5:8c:72:4a:55:
                    7d:42:e0:89:70:56:60:f0:56:dd:b9:ae:2b:99:56:
                    e2:3e:78:d7:b5:8c:a6:90:b4:0b:9b:90:9a:63:c7:
                    c1:db:66:0d:3f:09:68:5c:d9:15:74:22:e6:61:3c:
                    c8:01:c9:c1:3b:82:30:c0:2b:63:6a:fa:8e:6d:0a:
                    fc:67:90:26:ea:34:c5:ad:3e:0a:e5:a7:44:73:63:
                    a3:be:5b:67:75:67:9e:fc:49:96:3b:e8:3c:00:7c:
                    19:31:67:38:62:63:5e:f7:e7:a7:9a:f7:37:3a:2e:
                    5b:43:c8:fe:63:05:5a:ef:d4:c3:da:b0:97:51:b7:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:78:82:F6:99:5F:BE:C1:89:F1:8A:6D:33:91:F0:9B:EB:67:6E:93
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134382e3234342e302e302f31362d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:a3:9b:d8:19:e2:64:d7:ce:47:1b:24:29:7a:db:45:91:77:
         59:8f:30:b1:1b:0f:66:77:5e:85:fc:bb:63:de:12:49:05:35:
         99:05:73:8f:56:f3:7e:5c:00:b5:bb:af:6d:71:65:af:d9:6f:
         99:86:b2:04:3e:e0:76:39:44:1b:33:34:05:f7:2e:4e:9e:b7:
         56:38:dc:11:ed:5c:c0:a6:d9:01:a4:da:ec:4f:21:d5:27:09:
         1a:59:8b:60:82:38:8f:b1:10:34:4f:86:85:6d:dd:24:26:61:
         2b:d0:24:bc:66:0f:3c:1e:30:12:ac:a1:d9:52:7a:4c:d0:2d:
         8a:8e:8d:43:6f:ce:4a:9b:13:8b:a8:39:35:55:65:b3:a1:2d:
         08:e9:64:fe:8c:a0:de:ab:1d:cf:89:84:37:49:fe:08:34:09:
         3d:9a:d0:b8:08:16:2d:83:27:0e:d3:75:41:e4:36:e0:59:43:
         f4:8b:a1:a6:f6:95:58:2c:6e:48:c2:1b:42:50:75:06:91:ba:
         4a:a6:da:18:89:3c:55:c5:de:e6:a8:89:6e:99:d8:06:13:cd:
         f5:ee:24:53:79:8a:99:62:39:b1:bf:00:10:84:da:b5:a5:8b:
         30:3f:25:d3:5e:3f:67:a3:6e:e0:07:a5:d7:2b:30:ff:af:27:
         7a:9d:a5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org