Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37362e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e37362e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          uekk25J2lwE2WMUweYFKaflDZlceBSHmNh842rsrFGY=
Subject key identifier:   C1:A2:C9:A2:52:8E:77:18:2D:15:BC:0A:2A:C8:7D:3E:94:50:44:67
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       075141A709B4E44A5A013B4559DEBF991AD9E6FE
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37362e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 05 Mar 2024 17:40:14 +0000
ROA not before:           Tue 05 Mar 2024 17:35:14 +0000
ROA not after:            Tue 04 Mar 2025 17:40:14 +0000
asID:                     22011
IP address blocks:        148.243.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:51:41:a7:09:b4:e4:4a:5a:01:3b:45:59:de:bf:99:1a:d9:e6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:14 2024 GMT
            Not After : Mar  4 17:40:14 2025 GMT
        Subject: CN=C1A2C9A2528E77182D15BC0A2AC87D3E94504467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:93:41:a4:39:e7:52:7a:7b:b3:73:e9:7a:70:
                    d3:27:bf:cf:a6:83:bd:32:74:9e:18:c1:74:96:1a:
                    4c:ff:49:23:f9:05:61:d3:fa:44:40:e7:7e:1e:4b:
                    89:2e:4b:94:6c:61:37:3e:94:15:cf:04:56:b2:3e:
                    63:1f:98:52:bc:58:bb:4b:dc:f3:51:53:4f:0b:a7:
                    40:18:28:8f:11:46:3e:1e:d3:f8:ee:38:ca:4f:b5:
                    74:16:5c:d5:91:8b:88:b4:b4:14:75:1b:38:ff:dc:
                    4c:5a:ec:ff:59:68:bc:f8:02:24:3a:cf:ae:8e:4e:
                    2b:a8:43:25:de:20:7d:e2:68:2d:c1:ed:06:68:ec:
                    dd:6a:73:56:e2:24:03:da:5d:f6:e9:09:8d:15:6d:
                    28:f1:bd:13:d1:45:e8:bd:4c:43:c1:59:a9:c6:ad:
                    76:7c:86:8e:eb:e7:e4:fc:a9:26:9a:4f:88:4a:9b:
                    10:fa:79:e8:98:46:0e:97:cf:db:1a:c3:ca:73:35:
                    f9:92:58:c5:73:db:14:8a:9d:88:1f:8c:a5:30:a4:
                    b0:1a:8e:58:fb:cd:88:4c:5a:ec:3e:f6:6c:c2:0e:
                    e2:c2:2e:04:2e:bd:ba:12:99:fd:ea:9d:10:e1:0b:
                    d4:64:88:b4:a0:e8:07:4b:ec:8e:f7:89:41:96:c0:
                    67:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A2:C9:A2:52:8E:77:18:2D:15:BC:0A:2A:C8:7D:3E:94:50:44:67
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37362e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:9f:9a:fd:7f:aa:ef:60:b2:ff:dd:93:5d:f7:5b:32:ad:c4:
         a9:f7:8a:58:e8:11:86:60:d1:04:ac:89:db:43:92:d0:3e:14:
         10:50:2a:b8:b4:26:86:37:7f:11:c0:1a:5d:88:ef:84:57:d5:
         c8:88:75:04:1a:1e:5b:e3:13:54:11:67:fe:13:aa:2b:7c:5c:
         6c:63:ed:d9:bc:ec:50:ee:18:59:46:8e:5f:c5:b2:b5:34:aa:
         a8:c9:05:b6:1f:c9:f6:b2:e3:26:b7:4a:ff:f1:1e:43:ee:88:
         26:ef:9f:22:06:87:57:29:31:60:ba:c1:e3:38:9a:52:24:2e:
         e0:a2:9c:d5:90:c4:17:3c:d1:a2:ff:26:f3:a2:06:20:4d:a4:
         08:d4:74:64:2e:b9:62:98:f5:e4:f9:4f:a5:36:ea:c3:b9:02:
         39:38:83:f1:61:b6:7d:42:20:cc:63:6d:6b:8b:fe:1e:eb:d8:
         41:bf:2d:3d:42:d8:fd:f5:9a:26:4c:eb:41:36:cd:01:40:ec:
         4e:9b:b5:b6:dd:6a:7a:c2:33:8b:75:89:b2:56:e2:6a:41:d0:
         ff:b3:d6:db:1c:15:4b:d0:92:35:da:06:85:b4:78:52:9c:de:
         c0:65:3a:b0:69:20:65:f2:0a:ed:24:0c:67:16:ce:be:c5:d0:
         b4:ad:39:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:33 2024 by rpki-client on console-fra.rpki-client.org