Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e302e302f31362d3234203d3e2036353033.roa
File:                     3134382e3234352e302e302f31362d3234203d3e2036353033.roa (raw, json)
Hash identifier:          8az9CN/yZ1ik4ps+MH5/itGgDT7GNsV8EvUx3le+Gxo=
Subject key identifier:   88:F7:8E:F3:0D:C7:92:36:65:57:D5:13:61:5C:A9:E7:79:48:09:82
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       2DCBC478049D4B5ED74938C595E4A9ECCC9B1BDA
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e302e302f31362d3234203d3e2036353033.roa
Signing time:             Tue 05 Mar 2024 17:40:12 +0000
ROA not before:           Tue 05 Mar 2024 17:35:12 +0000
ROA not after:            Tue 04 Mar 2025 17:40:12 +0000
asID:                     6503
IP address blocks:        148.245.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:cb:c4:78:04:9d:4b:5e:d7:49:38:c5:95:e4:a9:ec:cc:9b:1b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:12 2024 GMT
            Not After : Mar  4 17:40:12 2025 GMT
        Subject: CN=88F78EF30DC792366557D513615CA9E779480982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:37:18:b7:77:e8:af:c7:ef:f3:81:07:ed:
                    47:81:32:74:d9:68:97:76:bc:54:3b:bb:5f:5a:24:
                    1e:6a:12:70:f2:32:ed:af:9f:68:23:e7:62:b7:46:
                    88:b6:06:46:3a:f2:18:c9:4a:0a:85:ed:61:37:67:
                    83:7b:82:79:26:bb:67:4c:e1:3f:7e:ff:c7:ad:ab:
                    ee:0d:2a:8a:8e:1c:08:40:5f:d0:34:88:69:f6:b6:
                    12:9b:80:1f:90:2c:ee:2e:a3:5c:ac:08:07:2d:e5:
                    d9:84:6f:70:c1:37:79:89:34:e7:f0:83:1b:72:c3:
                    e7:d7:fd:83:3f:ab:0e:3c:c7:61:40:e4:d1:3e:e4:
                    d5:cb:86:4b:66:3c:ad:16:7b:7c:0c:9a:a6:48:33:
                    6c:56:a6:43:88:20:2e:dd:e8:a9:0a:95:5b:ce:7f:
                    fc:39:15:ee:6b:56:67:d5:11:56:8a:1b:1f:6b:f1:
                    e9:46:39:7b:c5:1f:bc:66:04:91:3a:5d:f1:1d:e9:
                    a0:d0:8a:8d:93:c2:68:d2:e2:2a:61:64:d3:29:4d:
                    a7:f2:37:8a:12:13:c4:51:19:9f:17:91:21:7a:9b:
                    5b:21:55:df:8d:3c:8b:e2:2e:03:83:89:49:9d:36:
                    79:29:50:5e:7b:07:53:7b:b5:67:ac:39:10:23:3b:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F7:8E:F3:0D:C7:92:36:65:57:D5:13:61:5C:A9:E7:79:48:09:82
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e302e302f31362d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:5b:d5:34:21:31:87:e1:c6:e8:d9:0e:e4:85:1f:01:d6:21:
         a7:0c:42:b3:18:6d:9d:28:65:e5:dd:bb:35:b5:bd:54:66:50:
         55:3a:63:15:2e:fc:0a:0c:fa:f2:8f:77:9f:c6:c6:4a:78:2d:
         01:fe:63:ab:45:24:69:c7:03:b6:f2:d8:f4:97:c0:71:f1:68:
         46:8f:a0:bb:89:10:af:54:61:54:fd:f2:4e:db:78:59:48:a6:
         bc:57:8f:ea:10:f1:57:1c:6d:33:1c:37:48:ef:eb:45:c5:69:
         c6:fb:1f:c2:7f:62:29:5d:8a:07:01:fe:8a:4f:8e:ff:78:d8:
         6e:45:b2:0c:ca:2f:79:76:51:88:9d:3a:be:ac:d9:d9:f6:0c:
         c2:49:28:03:cc:fb:9a:d0:2b:de:37:15:a8:8d:85:6a:39:9b:
         78:9f:be:38:57:46:20:65:b6:17:69:6a:c2:13:9d:de:f8:1c:
         ce:53:07:0c:ee:f8:a3:cc:85:bb:5f:b2:bc:5c:1e:e3:27:99:
         49:6a:e9:67:64:73:31:ef:28:48:f7:41:d5:06:5e:66:8a:6e:
         b8:88:6e:60:2a:a7:79:85:50:2b:9c:73:01:63:f6:21:53:5f:
         1c:9c:58:50:5b:eb:82:5f:43:dc:d2:70:9e:b4:2f:44:46:1f:
         04:b9:c8:71
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIULcvEeASdS17XSTjFleSp7MybG9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NzUwNzA2MzRGRkRGM0Q4RDFDNzE5OTUyMDkzNTk0
QTU0Qzc2RTAeFw0yNDAzMDUxNzM1MTJaFw0yNTAzMDQxNzQwMTJaMDMxMTAvBgNV
BAMTKDg4Rjc4RUYzMERDNzkyMzY2NTU3RDUxMzYxNUNBOUU3Nzk0ODA5ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERjcYt3for8fv84EH7UeBMnTZ
aJd2vFQ7u19aJB5qEnDyMu2vn2gj52K3Roi2BkY68hjJSgqF7WE3Z4N7gnkmu2dM
4T9+/8etq+4NKoqOHAhAX9A0iGn2thKbgB+QLO4uo1ysCAct5dmEb3DBN3mJNOfw
gxtyw+fX/YM/qw48x2FA5NE+5NXLhktmPK0We3wMmqZIM2xWpkOIIC7d6KkKlVvO
f/w5Fe5rVmfVEVaKGx9r8elGOXvFH7xmBJE6XfEd6aDQio2TwmjS4iphZNMpTafy
N4oSE8RRGZ8XkSF6m1shVd+NPIviLgODiUmdNnkpUF57B1N7tWesORAjOwMNAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUiPeO8w3HkjZlV9UTYVyp53lICYIwHwYDVR0j
BBgwFoAUpXdQcGNP/fPY0ccZlSCTWUpUx24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTZCODQ0NTg4OUIxQTE3NzlDMzI0NkZBQ0QwNDYyREIy
RjNEMTRBOTU1RUMyQ0VDM0ZDNTVEQURDRUNENTYxLzAvQTU3NzUwNzA2MzRGRkRG
M0Q4RDFDNzE5OTUyMDkzNTk0QTU0Qzc2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTc3NTA3MDYzNEZGREYzRDhE
MUM3MTk5NTIwOTM1OTRBNTRDNzZFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU2Qjg0NDU4ODlCMUExNzc5QzMyNDZGQUNEMDQ2MkRCMkYzRDE0QTk1
NUVDMkNFQzNGQzU1REFEQ0VDRDU2MS8wLzMxMzQzODJlMzIzNDM1MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM2MzUzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlPUwDQYJKoZI
hvcNAQELBQADggEBAGtb1TQhMYfhxujZDuSFHwHWIacMQrMYbZ0oZeXduzW1vVRm
UFU6YxUu/AoM+vKPd5/Gxkp4LQH+Y6tFJGnHA7by2PSXwHHxaEaPoLuJEK9UYVT9
8k7beFlIprxXj+oQ8VccbTMcN0jv60XFacb7H8J/YildigcB/opPjv942G5FsgzK
L3l2UYidOr6s2dn2DMJJKAPM+5rQK943FaiNhWo5m3ifvjhXRiBlthdpasITnd74
HM5TBwzu+KPMhbtfsrxcHuMnmUlq6WdkczHvKEj3QdUGXmaKbriIbmAqp3mFUCuc
cwFj9iFTXxycWFBb64JfQ9zScJ60L0RGHwS5yHE=
-----END CERTIFICATE-----
Generated at Sat May 18 15:25:24 2024 by rpki-client on console-fra.rpki-client.org