Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37392e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e37392e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          FLPSuCuR4/3p0oOKkSFbDSD16OtF4MOVlz1pvjKylNw=
Subject key identifier:   26:A5:3C:F1:83:93:68:7A:91:D5:B7:95:7F:96:45:78:E9:0E:28:EC
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       5C6A3EBD44D183399C96A3090154447832024B76
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37392e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 05 Mar 2024 17:40:18 +0000
ROA not before:           Tue 05 Mar 2024 17:35:18 +0000
ROA not after:            Tue 04 Mar 2025 17:40:18 +0000
asID:                     22011
IP address blocks:        148.243.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6a:3e:bd:44:d1:83:39:9c:96:a3:09:01:54:44:78:32:02:4b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:18 2024 GMT
            Not After : Mar  4 17:40:18 2025 GMT
        Subject: CN=26A53CF18393687A91D5B7957F964578E90E28EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b7:0a:d1:e8:f7:f1:2f:3b:57:7c:65:b7:94:
                    cb:6c:c1:b2:78:c5:67:00:82:ab:2c:7a:f7:02:70:
                    ae:27:17:4a:db:2a:02:be:be:56:17:72:9a:8b:78:
                    b7:92:cb:e6:4e:12:da:db:79:67:79:f2:57:15:28:
                    ef:b3:ce:c0:84:93:1e:4f:a3:14:fb:23:24:c9:80:
                    af:8b:87:34:33:ba:b8:10:29:fb:4d:de:b9:40:f7:
                    45:7f:5c:3e:07:fe:91:9a:c5:f3:2c:88:eb:4f:83:
                    58:6e:74:5d:91:98:ec:02:53:be:ee:59:c1:3c:2c:
                    e7:1e:e3:74:29:c6:d8:0d:6d:57:8a:b5:0b:e1:3c:
                    de:6a:9a:00:61:86:93:fa:a4:e7:7c:8a:97:b5:c3:
                    b6:58:28:f8:c2:fd:67:89:ca:c1:f4:b5:45:55:3a:
                    7a:b5:e7:24:d1:88:28:94:1a:dc:de:74:dc:88:d4:
                    c6:b4:31:ce:97:86:61:fa:60:9f:9e:58:63:55:30:
                    ac:e0:b1:2e:6f:b7:05:e3:11:5e:bb:4e:29:38:0a:
                    ca:78:b7:7d:8a:32:a4:9b:5e:50:53:4a:5f:74:dd:
                    b8:6f:5d:5f:08:38:5c:02:19:ea:8e:76:24:a2:d8:
                    c6:ed:9c:a5:00:ce:bc:4a:8c:3b:39:a0:7a:a5:80:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A5:3C:F1:83:93:68:7A:91:D5:B7:95:7F:96:45:78:E9:0E:28:EC
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37392e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:82:18:2f:33:e1:f1:be:24:08:20:44:03:ee:1b:99:4e:8b:
         8c:eb:cc:40:f0:85:0a:e7:35:7d:a7:13:e0:2d:ad:7c:f3:cd:
         8b:59:50:b7:d4:f3:85:c5:a8:5b:b7:06:43:0e:02:5d:c7:db:
         f3:01:e8:b9:91:29:a7:02:8c:70:54:d6:3d:95:d6:70:4a:19:
         12:bf:73:2c:d9:18:e5:66:a5:22:87:cb:d5:eb:90:cd:92:d8:
         f6:b6:db:a3:d7:97:62:74:b5:30:a9:72:6b:87:c7:19:69:29:
         1e:76:c8:19:ef:b5:76:b7:15:66:34:60:6b:00:a3:7f:fb:05:
         a2:66:c4:19:3b:5f:24:e1:3d:a1:05:bc:ac:7d:05:fe:0f:0b:
         9e:0f:17:88:bb:41:1e:b1:9d:8a:36:1c:fc:6e:05:21:ae:ef:
         f0:51:46:02:04:b7:e6:b4:22:6b:22:57:3c:fb:12:52:46:f4:
         cb:85:e1:ce:48:30:4f:ea:86:1a:f8:b7:0c:9b:72:81:b2:9b:
         e9:35:e2:1b:c6:57:9b:46:f8:c0:43:ef:82:11:5b:4b:d0:4d:
         86:18:1b:e7:cc:6a:67:ef:b4:ef:2c:5e:c5:e1:f5:38:01:9a:
         11:22:99:4d:cc:83:f9:e8:dc:1b:74:57:8c:c5:06:af:15:76:
         3d:e1:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:25:24 2024 by rpki-client on console-fra.rpki-client.org