Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/3134382e3232352e302e302f31362d3234203d3e2034343933.roa
File:                     3134382e3232352e302e302f31362d3234203d3e2034343933.roa (raw, json)
Hash identifier:          RWATRb4lQn1YvC86Fr64vCjuc6q4kI4IZpWO0qgrClk=
Subject key identifier:   89:CA:17:99:34:9E:85:D7:C2:97:A0:97:88:84:52:2F:1B:41:2F:18
Certificate issuer:       /CN=23465A56152FA1593E35DAA9CCBEAC1EBC37CF31
Certificate serial:       70D83CD8D1F338B43D3C539B169D4C5A4EA0A9C4
Authority key identifier: 23:46:5A:56:15:2F:A1:59:3E:35:DA:A9:CC:BE:AC:1E:BC:37:CF:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/3134382e3232352e302e302f31362d3234203d3e2034343933.roa
Signing time:             Tue 05 Mar 2024 18:09:59 +0000
ROA not before:           Tue 05 Mar 2024 18:04:59 +0000
ROA not after:            Tue 04 Mar 2025 18:09:59 +0000
asID:                     4493
IP address blocks:        148.225.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d8:3c:d8:d1:f3:38:b4:3d:3c:53:9b:16:9d:4c:5a:4e:a0:a9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23465A56152FA1593E35DAA9CCBEAC1EBC37CF31
        Validity
            Not Before: Mar  5 18:04:59 2024 GMT
            Not After : Mar  4 18:09:59 2025 GMT
        Subject: CN=89CA1799349E85D7C297A0978884522F1B412F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:a4:94:2a:f4:04:de:6b:09:89:38:4e:5d:
                    52:7d:63:79:78:bb:35:66:79:f4:f8:a1:d9:c1:7a:
                    ce:32:0e:44:89:10:68:13:b3:30:39:14:11:7a:04:
                    cc:f2:bf:c3:cb:bd:64:7d:cb:03:70:c5:d0:74:d7:
                    f6:ad:47:04:03:b0:d4:b3:cc:70:2e:1a:87:28:a9:
                    f8:ed:3f:8e:42:c8:5e:36:92:cb:50:a7:c4:e3:fe:
                    e5:f5:1d:50:45:bb:1c:50:8a:24:f7:8e:b8:46:d8:
                    bf:be:5f:76:6d:50:83:78:70:a3:21:6a:19:2e:f4:
                    10:b7:d0:e8:16:b3:1c:9b:7e:6b:65:05:63:d1:92:
                    4e:98:29:45:5d:b8:0a:0d:28:d3:98:29:7c:14:3c:
                    aa:16:3f:20:11:90:3f:90:9f:15:5d:a1:1f:a5:64:
                    33:44:25:76:7a:cc:8f:9d:95:cc:e2:43:84:2d:4e:
                    5c:2a:1f:19:53:f0:08:17:48:72:b1:5a:42:1c:21:
                    8e:3c:7a:fa:18:18:bc:72:3b:8d:28:2f:21:92:eb:
                    f3:21:a7:65:95:93:5f:9e:b5:c9:14:4c:0a:b3:9c:
                    a1:13:1d:23:61:17:73:98:4b:91:f6:cc:b4:00:f0:
                    0c:cf:c9:68:2a:00:86:2b:43:68:8b:be:c6:64:12:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CA:17:99:34:9E:85:D7:C2:97:A0:97:88:84:52:2F:1B:41:2F:18
            X509v3 Authority Key Identifier:
                keyid:23:46:5A:56:15:2F:A1:59:3E:35:DA:A9:CC:BE:AC:1E:BC:37:CF:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23465A56152FA1593E35DAA9CCBEAC1EBC37CF31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1A6D5BDECD9A965A014792D71E3E3DEB6DDF58CBCD7330428EB2CF9023BAC5F/0/3134382e3232352e302e302f31362d3234203d3e2034343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a8:b3:bf:13:23:c1:06:bd:38:de:22:27:1e:47:ab:2c:08:e4:
         b6:32:dc:54:64:53:d7:fc:2f:cd:e3:c4:5c:10:4d:96:ad:4a:
         61:1e:64:6b:df:a4:1e:1a:c8:0c:9d:15:4f:d1:17:db:09:7a:
         fe:71:f3:0d:20:c3:f2:cd:bf:19:a0:93:c8:98:3b:e0:7d:b1:
         f4:37:0e:16:09:63:01:1a:84:e9:51:f9:11:a6:15:48:ad:68:
         2d:61:4c:65:b3:e9:b2:a1:16:0e:be:98:3a:4f:69:4f:f8:04:
         d1:0f:14:b5:c9:c8:2b:18:6b:ee:c7:4e:c3:0a:3e:79:29:3d:
         85:fe:80:cc:b9:56:b7:b3:07:b6:7c:ae:d6:1e:d2:71:44:2e:
         0f:a5:08:df:25:a4:f7:3f:b5:a8:24:1b:03:0b:96:5c:6a:eb:
         f1:db:f0:d0:27:a4:5a:54:68:57:43:dc:24:df:2d:f0:8e:c3:
         66:9e:a0:6d:02:01:ee:cc:4e:00:3a:e5:b7:04:a3:7a:07:20:
         a4:79:5c:69:7e:2f:ae:cf:9d:d0:7b:c2:69:62:57:ae:24:40:
         fd:91:2c:a1:05:29:7a:30:f2:fd:ab:11:a5:f6:75:ca:8a:b8:
         09:19:31:40:8b:36:d9:a7:bb:65:ed:d8:83:78:b9:1a:f4:d1:
         19:4f:c9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:58 2024 by rpki-client on console-fra.rpki-client.org