Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134382e3234342e3131342e302f32342d3234203d3e20323635353034.roa
File:                     3134382e3234342e3131342e302f32342d3234203d3e20323635353034.roa (raw, json)
Hash identifier:          doXdZjshL3KHXT4HrIsqtuj9IfSVpZ/oz3F+2B7dHgE=
Subject key identifier:   FB:08:7A:81:92:57:D0:C4:B7:6C:CE:CF:83:A5:61:48:51:EF:23:7D
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       6D902E2E0547E8531D925FEE358D696FC2856996
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134382e3234342e3131342e302f32342d3234203d3e20323635353034.roa
Signing time:             Tue 05 Mar 2024 17:54:32 +0000
ROA not before:           Tue 05 Mar 2024 17:49:32 +0000
ROA not after:            Tue 04 Mar 2025 17:54:32 +0000
asID:                     265504
IP address blocks:        148.244.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:90:2e:2e:05:47:e8:53:1d:92:5f:ee:35:8d:69:6f:c2:85:69:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Mar  5 17:49:32 2024 GMT
            Not After : Mar  4 17:54:32 2025 GMT
        Subject: CN=FB087A819257D0C4B76CCECF83A5614851EF237D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:72:b4:a6:7f:18:a0:96:0b:7e:f0:fa:4b:
                    fb:1d:09:de:70:a1:55:db:b3:cf:0c:c6:2d:1e:70:
                    9d:66:b4:f7:ad:51:a4:cc:c3:8b:f6:6b:23:9a:43:
                    58:c9:e6:2f:ab:72:e3:9e:01:45:f2:c3:a0:21:c4:
                    23:ca:5f:9e:4a:40:8c:c7:23:64:98:46:96:22:e7:
                    e7:f1:b9:6b:9d:fa:b1:c9:d4:9c:ce:0a:c8:4e:0c:
                    99:de:7c:23:c2:db:d6:2f:68:35:f3:f6:d7:11:7b:
                    6b:94:86:8f:39:c2:5b:c7:ac:dc:dd:22:0b:22:c0:
                    cd:9f:ea:06:cf:f6:67:9f:b3:ca:58:63:10:59:e5:
                    3b:72:ad:fc:34:72:36:75:65:c5:85:b1:8d:27:2d:
                    10:fa:3b:0a:38:f5:29:38:f1:0c:b8:d3:db:e6:af:
                    75:59:ae:d7:1c:09:c3:07:75:4c:02:dd:e2:a7:df:
                    76:6a:8b:91:cf:83:86:a8:a7:dd:c9:a9:6f:8e:f9:
                    51:e8:43:15:5e:5a:23:8e:4b:28:33:8f:de:68:7e:
                    b7:09:8e:20:b7:8d:0f:7d:48:a4:93:4e:1c:74:6e:
                    5f:ee:bf:aa:56:93:c7:51:93:a8:f3:78:d4:5f:ef:
                    0d:61:69:71:ff:ea:31:d0:5a:18:02:72:22:57:dc:
                    db:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:08:7A:81:92:57:D0:C4:B7:6C:CE:CF:83:A5:61:48:51:EF:23:7D
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134382e3234342e3131342e302f32342d3234203d3e20323635353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.244.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:fb:7a:1d:85:dc:c1:37:60:aa:d5:cd:4c:fc:f6:a5:27:a7:
         de:de:bd:16:c4:05:35:1f:d0:e4:64:45:12:17:34:35:54:a2:
         ed:a1:cc:28:0b:0b:16:d3:2b:99:d6:f3:d7:a0:24:4c:ab:97:
         c9:ed:a7:35:dd:cd:08:7a:5e:37:ae:30:eb:ab:0a:7e:0f:bf:
         e2:cc:ec:1e:c7:2e:ca:d9:24:8e:0a:ef:7d:4c:45:f5:06:56:
         6a:a9:2f:86:3b:4d:ad:d8:dc:30:72:af:d3:a4:7e:c1:64:25:
         4e:60:05:d5:76:94:5e:79:6b:43:93:3c:0d:be:eb:59:2b:27:
         37:95:99:b3:a0:31:9f:30:ec:df:8c:b5:45:0a:57:f9:ea:bf:
         c1:d9:de:e6:0c:0c:90:a9:e9:70:1d:10:fb:2d:6a:1f:7c:06:
         a2:d3:fe:05:97:f7:2a:e1:1b:ab:d5:92:27:2e:e5:47:9b:38:
         4a:dd:32:fb:0a:ce:38:af:b3:e5:66:75:2d:e0:01:ad:d9:98:
         dd:f7:eb:18:88:5d:0a:d2:23:82:e4:ca:52:71:ae:a3:bb:94:
         1c:e5:6c:ed:b3:69:3d:01:d3:16:4d:b6:2a:f2:d5:a3:d7:7e:
         b9:0b:d4:47:9c:5e:09:88:bd:3c:d1:06:ad:f8:63:8b:e5:ac:
         75:f3:60:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:06:39 2024 by rpki-client on console-ams.rpki-client.org