Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37382e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e37382e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          PXJ2Tz/aZoUhFT1H31KFk46V84E9lxD07zyI41LRd0w=
Subject key identifier:   CE:8C:5D:BF:BE:1A:03:C5:61:A2:91:66:9A:43:82:F4:A9:B3:8D:A6
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       37F243FFEC50FDF466585AE45CBCBB7BBE95D679
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37382e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 05 Mar 2024 17:40:18 +0000
ROA not before:           Tue 05 Mar 2024 17:35:18 +0000
ROA not after:            Tue 04 Mar 2025 17:40:18 +0000
asID:                     22011
IP address blocks:        148.243.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f2:43:ff:ec:50:fd:f4:66:58:5a:e4:5c:bc:bb:7b:be:95:d6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:18 2024 GMT
            Not After : Mar  4 17:40:18 2025 GMT
        Subject: CN=CE8C5DBFBE1A03C561A291669A4382F4A9B38DA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:22:a6:c1:7e:f5:83:cb:60:8f:96:b0:aa:
                    6e:12:10:6c:56:49:70:89:2a:97:b0:68:49:d0:32:
                    1c:97:be:68:2d:62:eb:21:9c:82:2a:7d:8c:56:cb:
                    19:44:4a:c6:fe:49:2e:c3:cd:21:fc:1f:68:04:bd:
                    d9:67:ec:42:dc:6d:1b:e3:9d:5e:ff:2e:27:26:84:
                    63:bf:ad:9c:d3:30:e9:ac:e0:34:cc:e4:21:0c:7f:
                    a0:63:ad:a8:17:d5:0f:2b:d2:fb:fa:28:79:cc:03:
                    ed:53:9c:d1:cf:55:56:82:f5:90:26:a1:87:58:b0:
                    5e:2c:47:d5:5b:24:cf:58:6d:79:c2:9a:b7:db:37:
                    80:3d:58:56:77:5e:f2:25:4e:cb:ff:78:f3:ff:60:
                    25:a3:d1:d8:3f:64:a3:ef:53:72:f7:0d:42:a4:b4:
                    da:f0:fd:a3:c6:c8:4f:da:8e:2a:4b:a7:69:e6:1a:
                    56:31:bc:7f:63:15:25:d8:0b:91:a6:d2:4b:04:25:
                    a6:99:42:16:15:5a:c5:c0:c4:73:8f:94:a7:3a:dc:
                    36:9a:a3:c7:45:03:23:a5:98:30:92:01:65:e3:9d:
                    b6:a5:ad:02:73:34:fa:fd:1b:d3:f2:6c:26:ab:95:
                    b2:96:f7:a4:be:ab:fa:e3:07:cb:a1:5f:93:71:0f:
                    87:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8C:5D:BF:BE:1A:03:C5:61:A2:91:66:9A:43:82:F4:A9:B3:8D:A6
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37382e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:a9:42:4b:6c:8d:84:c8:c6:fb:91:1a:8d:5c:8b:6f:45:b2:
         6b:29:09:23:6b:13:1e:2a:63:39:5f:be:b4:57:aa:1c:2d:3d:
         a2:c9:db:63:77:2e:74:d4:87:fd:27:8f:9f:95:0f:08:3c:69:
         dc:70:0b:f4:3a:0f:d0:30:a7:34:6d:3d:34:f0:c6:08:59:77:
         c5:14:8a:43:61:94:59:64:38:3f:b8:c5:31:b5:1b:5b:72:9a:
         bf:9b:8a:15:77:df:79:ed:f3:76:7b:fd:79:a9:4e:d8:32:a8:
         13:c0:2b:c1:bb:69:5f:6c:22:5e:3b:7c:2f:0f:8b:87:2a:26:
         42:76:8e:d3:5f:93:4a:eb:46:fb:70:11:bc:7e:dc:3b:10:97:
         72:c7:c4:c5:80:26:01:39:f1:00:18:29:a0:8f:96:2b:16:9b:
         1a:05:17:6e:33:b8:f7:36:af:70:15:ae:14:16:c3:72:25:3a:
         68:5c:43:7b:42:23:22:8c:bf:b5:a7:7a:54:86:44:43:4e:d7:
         71:37:e6:bf:6f:f2:88:cf:98:b8:c8:2a:90:ee:62:6b:a3:84:
         ab:c4:b8:61:d9:ae:50:5d:23:94:b6:62:76:64:c5:01:51:4f:
         b5:ff:39:79:81:79:a0:5d:c3:22:ed:9f:fd:7b:d5:31:ca:ce:
         54:aa:af:92
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUN/JD/+xQ/fRmWFrkXLy7e76V1nkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NzUwNzA2MzRGRkRGM0Q4RDFDNzE5OTUyMDkzNTk0
QTU0Qzc2RTAeFw0yNDAzMDUxNzM1MThaFw0yNTAzMDQxNzQwMThaMDMxMTAvBgNV
BAMTKENFOEM1REJGQkUxQTAzQzU2MUEyOTE2NjlBNDM4MkY0QTlCMzhEQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKCKmwX71g8tgj5awqm4SEGxW
SXCJKpewaEnQMhyXvmgtYushnIIqfYxWyxlESsb+SS7DzSH8H2gEvdln7ELcbRvj
nV7/LicmhGO/rZzTMOms4DTM5CEMf6BjragX1Q8r0vv6KHnMA+1TnNHPVVaC9ZAm
oYdYsF4sR9VbJM9YbXnCmrfbN4A9WFZ3XvIlTsv/ePP/YCWj0dg/ZKPvU3L3DUKk
tNrw/aPGyE/ajipLp2nmGlYxvH9jFSXYC5Gm0ksEJaaZQhYVWsXAxHOPlKc63Daa
o8dFAyOlmDCSAWXjnbalrQJzNPr9G9PybCarlbKW96S+q/rjB8uhX5NxD4fFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUzoxdv74aA8VhopFmmkOC9KmzjaYwHwYDVR0j
BBgwFoAUpXdQcGNP/fPY0ccZlSCTWUpUx24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTZCODQ0NTg4OUIxQTE3NzlDMzI0NkZBQ0QwNDYyREIy
RjNEMTRBOTU1RUMyQ0VDM0ZDNTVEQURDRUNENTYxLzAvQTU3NzUwNzA2MzRGRkRG
M0Q4RDFDNzE5OTUyMDkzNTk0QTU0Qzc2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTc3NTA3MDYzNEZGREYzRDhE
MUM3MTk5NTIwOTM1OTRBNTRDNzZFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU2Qjg0NDU4ODlCMUExNzc5QzMyNDZGQUNEMDQ2MkRCMkYzRDE0QTk1
NUVDMkNFQzNGQzU1REFEQ0VDRDU2MS8wLzMxMzQzODJlMzIzNDMzMmUzNzM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjMwMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJTzTjAN
BgkqhkiG9w0BAQsFAAOCAQEAsalCS2yNhMjG+5EajVyLb0WyaykJI2sTHipjOV++
tFeqHC09osnbY3cudNSH/SePn5UPCDxp3HAL9DoP0DCnNG09NPDGCFl3xRSKQ2GU
WWQ4P7jFMbUbW3Kav5uKFXffee3zdnv9ealO2DKoE8ArwbtpX2wiXjt8Lw+Lhyom
QnaO01+TSutG+3ARvH7cOxCXcsfExYAmATnxABgpoI+WKxabGgUXbjO49zavcBWu
FBbDciU6aFxDe0IjIoy/tad6VIZEQ07XcTfmv2/yiM+YuMgqkO5ia6OEq8S4Ydmu
UF0jlLZidmTFAVFPtf85eYF5oF3DIu2f/XvVMcrOVKqvkg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:54 2024 by rpki-client on console-ams.rpki-client.org