Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e39392e302f32342d3234203d3e203238353039.roa
File:                     3134382e3234332e39392e302f32342d3234203d3e203238353039.roa (raw, json)
Hash identifier:          VzWxLzpfwj9v8Aj6g12B7TRpu0x5mWdJMvArzab1A/U=
Subject key identifier:   80:FD:99:A0:66:27:BA:11:90:EE:BB:AF:D2:97:8F:EB:09:FA:D5:71
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       401FE6E84879445CE137DB40173F5C3A92EFAF1D
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e39392e302f32342d3234203d3e203238353039.roa
Signing time:             Tue 05 Mar 2024 17:40:15 +0000
ROA not before:           Tue 05 Mar 2024 17:35:15 +0000
ROA not after:            Tue 04 Mar 2025 17:40:15 +0000
asID:                     28509
IP address blocks:        148.243.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1f:e6:e8:48:79:44:5c:e1:37:db:40:17:3f:5c:3a:92:ef:af:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:15 2024 GMT
            Not After : Mar  4 17:40:15 2025 GMT
        Subject: CN=80FD99A06627BA1190EEBBAFD2978FEB09FAD571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:30:4e:36:90:75:2a:1e:c6:be:8a:1c:2b:
                    fa:00:1f:7f:0d:30:4c:ea:4c:99:cc:ef:c9:a8:32:
                    5b:35:37:54:ee:76:54:5d:09:6d:1b:db:56:ec:64:
                    a0:bb:70:23:eb:f5:8d:5f:72:1b:13:10:2a:d8:c4:
                    14:44:b8:80:10:77:96:f0:4e:5a:f6:18:67:76:81:
                    45:86:2a:1a:cd:24:25:64:fc:85:5e:9c:8b:99:de:
                    27:26:76:cd:38:5b:6e:cb:f2:c3:e4:d5:ba:fd:ac:
                    38:9b:0c:63:4f:0a:bd:87:7f:81:a9:20:df:ac:7f:
                    9e:ed:45:fb:13:9c:ee:19:11:a9:27:88:e0:24:a2:
                    c0:7b:fb:ac:99:b1:87:36:15:82:f0:70:0c:df:c6:
                    a3:f9:be:91:16:3c:6c:48:8a:d6:2c:d8:6c:38:d4:
                    90:5b:bd:a5:1d:9c:09:07:71:2e:b2:54:42:30:9b:
                    59:bd:25:5f:a7:bf:8c:cb:09:9c:a6:fc:06:60:c5:
                    31:ea:42:7c:b7:1e:79:0a:8d:2d:57:31:d3:32:2f:
                    57:35:69:49:09:69:f7:8c:c0:21:75:a7:18:da:9b:
                    cd:15:ff:81:f7:86:1a:cf:6c:65:ec:e1:fb:9b:97:
                    a4:da:44:e1:8e:5f:65:2a:92:da:8d:41:42:d4:13:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FD:99:A0:66:27:BA:11:90:EE:BB:AF:D2:97:8F:EB:09:FA:D5:71
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e39392e302f32342d3234203d3e203238353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b5:af:87:ac:22:0f:f6:71:cc:eb:2f:3f:bc:39:18:3a:f7:
         3d:a7:14:08:80:72:7a:2d:a6:25:68:8b:b9:3c:eb:c9:13:5b:
         9c:7a:86:23:b5:5a:c1:67:2f:ae:0e:5c:d7:d6:08:ef:d9:05:
         9a:71:be:c0:81:e2:46:89:f2:32:d6:25:52:ff:de:17:c4:fd:
         68:68:75:a5:de:a2:36:3a:3c:9d:d8:34:7c:37:cd:18:3e:3f:
         be:7e:e4:0b:e6:3e:62:de:f7:5c:f8:22:47:11:f9:0b:5b:58:
         53:4a:5a:d3:76:6f:d6:ea:62:a7:16:f8:98:0f:9c:f8:fb:11:
         d4:85:6d:71:9f:8b:bf:0b:d7:74:95:02:94:c1:57:2a:8e:d4:
         99:eb:8a:20:a4:b4:12:6f:fb:e2:26:d0:4b:9b:91:98:c3:2c:
         37:4f:a5:37:66:98:03:6a:59:f3:d3:39:c6:77:37:53:77:4b:
         0c:05:62:60:05:0d:ca:54:bd:54:96:c7:f9:21:05:41:aa:d4:
         93:be:36:a4:11:32:ec:48:0d:23:23:16:47:8e:db:06:eb:34:
         cf:5d:9a:5e:aa:b4:77:77:d4:1b:b1:f1:11:82:cf:ee:14:f8:
         f3:df:8f:77:a1:47:a6:17:dc:1d:77:02:16:bd:05:6a:22:58:
         92:12:ba:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:33 2024 by rpki-client on console-fra.rpki-client.org