Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3132322e302f32342d3234203d3e203238343932.roa
File:                     3134382e3234352e3132322e302f32342d3234203d3e203238343932.roa (raw, json)
Hash identifier:          1kQAZt8TSCynOLpPv6gIaN6Ddew2xOzKx86sKU3HmF0=
Subject key identifier:   EA:84:26:EC:6F:3F:1C:29:6C:42:4F:D6:84:2B:D3:44:79:BC:62:E1
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       577F9A0657FDFC5D4B1B143379021E76F1E7A48D
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3132322e302f32342d3234203d3e203238343932.roa
Signing time:             Tue 05 Mar 2024 17:40:13 +0000
ROA not before:           Tue 05 Mar 2024 17:35:13 +0000
ROA not after:            Tue 04 Mar 2025 17:40:13 +0000
asID:                     28492
IP address blocks:        148.245.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7f:9a:06:57:fd:fc:5d:4b:1b:14:33:79:02:1e:76:f1:e7:a4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:13 2024 GMT
            Not After : Mar  4 17:40:13 2025 GMT
        Subject: CN=EA8426EC6F3F1C296C424FD6842BD34479BC62E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:74:44:55:1f:cf:54:4a:1f:66:d7:52:9e:06:
                    a2:1b:e1:7f:5e:97:06:90:89:f8:11:53:34:1f:86:
                    f5:c0:48:83:94:d0:b0:46:fc:04:70:a7:42:cf:56:
                    a1:90:49:ef:18:e6:fe:94:63:39:7a:bd:aa:d3:da:
                    7d:54:61:d0:50:20:70:aa:ac:07:7e:58:6b:a9:69:
                    93:30:b0:69:8c:8f:42:86:d7:20:65:4d:bc:49:1d:
                    ce:47:18:c5:18:05:9f:3c:86:1d:32:36:44:9c:a7:
                    f4:20:17:73:61:66:e5:3b:79:df:56:61:ff:6a:36:
                    07:45:56:9f:af:7f:b2:81:28:ce:c4:81:07:f3:f9:
                    83:ed:4a:8b:88:1b:6a:42:11:f0:51:bc:5d:23:b6:
                    88:d9:47:52:68:02:07:cc:ee:5c:34:52:91:ed:ea:
                    35:a4:d5:46:25:c3:dd:fd:96:fd:1f:60:4a:e2:62:
                    1a:3e:e4:9c:01:e7:3c:bc:ad:ff:f5:62:b0:e3:87:
                    b1:42:e4:29:f9:ce:d8:b0:b5:f0:25:f8:f6:1b:41:
                    c4:37:8d:02:59:e5:01:69:9e:74:18:2e:32:ea:76:
                    67:eb:0f:9a:99:51:70:67:9a:f1:82:58:e4:3f:05:
                    1f:e5:ec:9d:40:95:8e:3e:5a:ae:ea:9e:06:c3:2b:
                    65:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:84:26:EC:6F:3F:1C:29:6C:42:4F:D6:84:2B:D3:44:79:BC:62:E1
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3132322e302f32342d3234203d3e203238343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:9a:4e:e6:77:ac:82:e7:fd:19:01:41:01:b1:e4:29:56:0a:
         22:dd:85:e3:ca:b2:bb:51:19:ce:4c:a0:b1:9d:e3:78:de:45:
         29:67:07:24:69:15:c9:6b:ec:72:02:c0:86:74:a6:48:ce:3a:
         2c:c7:d9:4b:5c:0a:d5:c0:84:b0:df:69:a2:01:60:dc:e7:11:
         56:e1:21:6e:80:7a:c1:a7:85:c3:0d:37:a8:b2:ea:7a:5d:6e:
         8f:01:77:0c:ff:f1:18:5e:c2:f8:c8:13:f8:5e:8d:06:89:98:
         83:09:12:bf:3a:b9:d9:48:e2:6f:6f:27:16:93:c6:77:9f:4b:
         0c:f1:6a:9d:6c:9c:5d:e1:81:43:e8:62:44:b1:bf:b6:bc:63:
         a3:e6:b4:bd:ef:91:6b:9c:54:6d:81:2b:dc:7a:74:b2:59:49:
         72:14:e4:ba:e3:0f:c9:20:8b:28:31:8c:93:a1:f0:c7:cb:66:
         d3:c4:47:98:6d:20:94:b2:fc:4f:a5:74:4f:3d:35:81:4d:c3:
         8f:44:5b:80:f0:e5:48:fe:39:fd:08:1f:80:f9:11:9b:3a:51:
         ea:60:3d:5f:a6:b5:d6:bb:11:55:64:48:a6:30:0c:af:44:39:
         ba:6f:b7:be:16:4b:32:83:f3:db:47:47:d4:b8:ac:43:99:21:
         ad:7c:02:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:38 2024 by rpki-client on console-ams.rpki-client.org