Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3133352e302f32342d3234203d3e203131313732.roa
File:                     3134382e3234352e3133352e302f32342d3234203d3e203131313732.roa (raw, json)
Hash identifier:          7hP3LlNoruwiqFC1Q6v5yHa7qFBfvSnEjK9AA7VDuLc=
Subject key identifier:   8D:5F:CB:6F:1D:3D:6F:59:04:74:24:07:68:A6:F8:C7:DC:E7:C4:D1
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       0DACF0D505DE70213758FD5130A031179DDC9A9D
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3133352e302f32342d3234203d3e203131313732.roa
Signing time:             Tue 05 Mar 2024 17:40:19 +0000
ROA not before:           Tue 05 Mar 2024 17:35:19 +0000
ROA not after:            Tue 04 Mar 2025 17:40:19 +0000
asID:                     11172
IP address blocks:        148.245.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ac:f0:d5:05:de:70:21:37:58:fd:51:30:a0:31:17:9d:dc:9a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:19 2024 GMT
            Not After : Mar  4 17:40:19 2025 GMT
        Subject: CN=8D5FCB6F1D3D6F590474240768A6F8C7DCE7C4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:f0:61:5b:76:45:e1:b4:d1:43:09:24:bd:
                    28:5a:e4:5f:7d:ce:d1:5d:75:f2:2d:af:a0:e2:30:
                    7a:af:76:fc:2b:0d:c7:26:0e:52:31:80:3f:18:68:
                    da:4b:ee:ae:c5:b5:dc:96:cc:f0:a1:82:5a:09:c0:
                    0b:8a:df:11:ec:70:75:09:7e:cb:3a:93:5c:ee:8e:
                    44:bf:4f:be:09:5b:0e:e4:99:f3:ba:5a:6a:2b:9a:
                    7d:ee:ad:ff:67:b9:03:cd:58:d3:be:30:c2:63:12:
                    b9:7a:0e:22:72:13:7b:a0:7a:f0:0f:a4:95:72:2f:
                    8f:8b:29:15:ee:bf:0c:86:30:59:a0:2c:9d:8b:f2:
                    47:43:d3:e0:cc:01:56:ae:60:a0:96:5a:d1:46:9c:
                    a3:72:fe:da:ff:8b:46:ca:82:94:60:80:f3:5c:10:
                    55:bb:a1:35:72:82:29:78:00:d2:ce:8f:b8:25:70:
                    62:29:e5:ed:45:c1:64:15:55:f0:d4:85:40:03:c9:
                    51:b1:8e:b5:1d:dd:c3:d3:8f:54:37:76:ea:eb:ba:
                    34:81:ed:2c:22:fc:08:4d:f0:c9:a8:12:b9:16:a9:
                    2e:a5:f7:5b:76:54:6b:3c:62:e1:21:e6:b3:7f:08:
                    ca:86:9c:65:57:60:b1:35:ed:32:5e:dd:bf:9c:2a:
                    ad:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5F:CB:6F:1D:3D:6F:59:04:74:24:07:68:A6:F8:C7:DC:E7:C4:D1
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3133352e302f32342d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:b6:8f:02:ae:c5:7d:49:9a:f2:55:4b:09:09:f6:04:21:dd:
         2d:55:96:36:aa:e0:97:5e:58:55:c7:e7:6f:5e:c8:46:aa:44:
         98:28:79:41:99:66:b4:99:f5:86:4f:84:bb:83:ad:44:51:9e:
         ba:4b:04:fa:d3:43:be:13:81:73:a4:ce:0e:8c:f3:93:c3:5d:
         0b:f2:4c:4b:34:bf:4a:3d:a4:90:d8:89:da:1c:6d:a9:ed:13:
         21:ab:6b:fa:11:b0:62:ec:47:05:4b:ee:e3:1f:86:b0:3b:ae:
         13:7a:75:32:d1:c5:d5:47:f0:09:02:03:63:fa:21:8c:e8:26:
         35:62:e0:2c:c3:0f:ac:2d:f2:57:f3:aa:ec:54:91:cc:3f:04:
         09:20:e4:8c:7f:33:44:16:b8:a9:2b:8c:92:ce:b0:d7:5d:4c:
         97:86:f3:14:f5:15:88:74:76:5c:bb:03:2d:18:87:1d:fe:57:
         c3:6c:3f:a2:f2:8a:20:2c:10:68:59:3e:e7:53:21:4e:a1:89:
         5c:66:05:cb:f9:37:64:67:dd:56:63:e6:be:67:b7:9e:f6:65:
         a1:6a:1f:a9:2a:16:5a:32:23:12:f9:37:ff:f9:de:29:f3:97:
         81:64:c3:fc:d8:be:e5:c5:58:1b:ce:aa:e1:9d:0d:28:d7:a7:
         e4:dd:37:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 21:41:22 2024 by rpki-client on console-ams.rpki-client.org