Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e33372e302f32342d3234203d3e203238353036.roa
File:                     3134382e3234332e33372e302f32342d3234203d3e203238353036.roa (raw, json)
Hash identifier:          kjin8EKo24GohH0aXWSIrpm9iu8kAdh7kGaHlXv6ltE=
Subject key identifier:   97:3D:DF:3A:62:C4:16:C6:57:45:11:D1:FF:19:3C:4F:9C:DA:6D:05
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       620D1D4BE148C0355704F503B056F68D535B572E
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e33372e302f32342d3234203d3e203238353036.roa
Signing time:             Tue 05 Mar 2024 17:40:21 +0000
ROA not before:           Tue 05 Mar 2024 17:35:21 +0000
ROA not after:            Tue 04 Mar 2025 17:40:21 +0000
asID:                     28506
IP address blocks:        148.243.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0d:1d:4b:e1:48:c0:35:57:04:f5:03:b0:56:f6:8d:53:5b:57:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:21 2024 GMT
            Not After : Mar  4 17:40:21 2025 GMT
        Subject: CN=973DDF3A62C416C6574511D1FF193C4F9CDA6D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:ee:b0:6f:fe:02:a2:bd:89:b2:26:e5:12:
                    e0:a8:cb:bf:e0:c6:9a:52:c5:34:cd:3e:8b:e0:12:
                    2a:9b:01:f3:ef:d0:5b:04:d8:f8:87:2f:5c:d6:39:
                    30:db:52:6e:a0:e9:5e:a6:70:e0:d1:83:b1:61:8c:
                    00:4a:61:4e:e1:28:37:c3:27:14:f5:53:0f:51:e9:
                    7b:38:07:ac:d2:0c:98:30:19:94:43:6d:89:43:4e:
                    0f:70:a7:ab:f3:18:ad:b3:b0:dd:84:37:58:fb:8b:
                    df:90:46:ae:1b:e7:bd:80:28:1e:30:a7:dd:ca:4f:
                    3b:6d:11:49:f3:3a:f8:d2:95:de:fc:a6:3c:89:ba:
                    0a:4c:da:7d:99:6e:28:d4:08:70:17:cd:39:d5:f6:
                    66:c0:56:a0:c1:f2:8b:bb:d1:76:d8:34:4d:de:fb:
                    d9:e7:60:1d:ae:a4:51:0e:9c:31:e9:8e:b6:6b:98:
                    81:50:aa:d4:93:ac:79:10:ac:fc:3e:a5:fe:b7:92:
                    c5:52:bc:96:82:01:81:fd:d9:d5:b2:0e:21:8d:44:
                    7e:2d:13:07:09:0a:e6:67:db:2f:dc:2c:62:8a:aa:
                    8b:c1:14:27:9e:e8:8f:3c:76:33:7f:c4:6e:49:9e:
                    9b:85:db:46:3b:5d:a6:c1:d1:29:69:06:fc:dd:fc:
                    44:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3D:DF:3A:62:C4:16:C6:57:45:11:D1:FF:19:3C:4F:9C:DA:6D:05
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e33372e302f32342d3234203d3e203238353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:c8:a4:42:dd:9d:70:fd:5b:0d:90:bb:f5:d6:21:53:f5:3d:
         57:73:ca:f7:16:1f:05:af:29:5e:6d:90:5a:d5:da:ec:e2:04:
         f8:f0:49:f4:c7:5d:b7:4a:fa:70:64:3f:16:58:4f:a3:12:35:
         04:dc:29:ad:68:a9:7a:29:9b:04:fc:53:ab:fa:5f:3a:3f:60:
         e7:74:c4:2c:ce:a6:4f:3f:5f:53:9c:e2:a6:4c:78:13:d3:36:
         6d:1e:5f:f9:b0:69:a9:ee:6a:83:88:a6:d6:c1:c9:08:ee:0d:
         f3:ff:81:7e:ed:f1:07:08:01:4d:6b:e9:c0:6c:77:2a:bc:96:
         28:67:49:02:45:f2:ec:06:79:d1:f6:99:40:f7:90:1a:94:08:
         d4:6b:b5:30:cd:ec:5c:11:1f:48:78:85:9d:28:1a:d7:f2:20:
         cb:b4:e4:ea:73:13:4b:09:ac:29:37:11:b5:8f:66:eb:b5:08:
         be:1a:1c:9d:ef:5c:73:03:da:99:28:8a:a3:9a:35:ba:bc:39:
         8e:cd:79:03:9a:ac:66:8b:84:5d:34:d8:61:8a:5f:71:8c:a5:
         a7:46:a9:c1:95:db:de:2a:24:f3:39:a2:ab:26:7f:92:b3:32:
         e6:1d:b3:34:44:30:27:88:d7:01:a3:da:de:8b:bc:31:58:55:
         1b:29:f9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:42 2024 by rpki-client on console-ams.rpki-client.org