Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3138342e302f32342d3234203d3e203131313732.roa
File:                     3134382e3234352e3138342e302f32342d3234203d3e203131313732.roa (raw, json)
Hash identifier:          7Z3r0h9eWuWC/tRR9/OtQJGsnBTjnvBmkuY+f4uMrLI=
Subject key identifier:   C2:09:EC:5D:30:76:C0:99:86:33:41:47:4C:A3:83:E9:73:BD:A9:56
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       2767669F8995C499EC2DBEE35A53A07754A716E2
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3138342e302f32342d3234203d3e203131313732.roa
Signing time:             Tue 05 Mar 2024 17:40:17 +0000
ROA not before:           Tue 05 Mar 2024 17:35:17 +0000
ROA not after:            Tue 04 Mar 2025 17:40:17 +0000
asID:                     11172
IP address blocks:        148.245.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:67:66:9f:89:95:c4:99:ec:2d:be:e3:5a:53:a0:77:54:a7:16:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:17 2024 GMT
            Not After : Mar  4 17:40:17 2025 GMT
        Subject: CN=C209EC5D3076C099863341474CA383E973BDA956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:0b:92:47:3f:68:a0:45:a4:20:15:dd:a2:
                    3f:c2:c7:97:5c:7e:ec:d7:c3:90:d5:7b:24:83:83:
                    c3:67:f9:84:c2:12:2b:03:9f:e6:a7:47:bd:cb:a7:
                    79:88:82:87:cf:ca:19:10:6b:a6:fa:75:5a:fb:b2:
                    0a:f5:69:b8:a7:9a:17:b0:07:6a:68:f1:54:04:44:
                    51:ad:e1:d6:6e:cb:4f:ef:cc:82:9e:3f:34:49:f2:
                    3c:39:1d:05:f0:61:71:1c:cd:73:c7:e6:17:8b:e4:
                    c2:d9:94:ce:7d:61:46:95:34:4a:68:bd:c4:d3:ff:
                    9f:06:33:a7:20:74:2a:08:8d:70:a6:e3:2c:31:08:
                    c7:8b:b3:46:ac:e9:9b:9d:62:00:cf:7f:bd:92:df:
                    a6:a0:93:b3:55:66:55:8f:a1:42:94:7d:cd:3b:fd:
                    35:9c:82:16:ca:f9:5e:a1:f1:1a:68:04:6c:89:06:
                    f4:d9:cd:25:78:44:46:ff:4e:20:6b:25:3e:c7:1d:
                    38:7b:6a:f2:32:ec:41:c9:91:54:65:11:b4:af:b4:
                    2a:e9:15:5a:f5:19:f5:e1:8e:11:ac:9e:53:5a:5b:
                    54:01:f7:eb:28:53:03:ef:7e:fb:54:e4:c1:c7:56:
                    75:91:e0:11:7c:5c:9b:36:c4:24:b2:57:8d:33:a7:
                    51:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:09:EC:5D:30:76:C0:99:86:33:41:47:4C:A3:83:E9:73:BD:A9:56
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3138342e302f32342d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:5a:06:4f:bb:50:62:20:12:41:45:0a:d4:17:77:01:13:11:
         99:3b:54:c4:3d:9e:9d:e9:ed:30:9e:06:21:fa:d4:99:72:75:
         27:27:bb:a0:a3:cf:71:2f:06:3a:38:4f:65:b0:5d:83:5c:d3:
         df:b0:99:97:bb:44:01:c4:6e:ca:2a:a6:a4:b7:dc:66:6f:98:
         12:85:87:3b:07:a2:96:f1:31:ff:93:79:9b:fb:c3:6b:8d:f5:
         5f:00:b4:9d:07:cb:ea:dc:47:4d:0f:c7:2e:2a:5b:65:39:72:
         2c:dc:cc:27:cf:6e:c3:30:75:32:ac:b0:77:f8:a5:85:c8:6a:
         da:15:dd:cb:10:37:c7:f8:44:d4:77:0c:70:b6:2a:68:8f:94:
         ba:a3:1c:45:ee:af:09:56:b3:77:96:58:b9:4c:da:fc:ad:00:
         1b:e4:cb:de:c3:1c:45:54:d6:cc:d1:8e:ea:2a:ab:38:76:d1:
         e6:89:73:1e:b3:83:6a:90:38:d0:44:28:2d:e9:0d:63:b6:af:
         f4:13:e6:91:03:05:b0:a4:bd:53:1c:ef:33:49:8e:a2:2d:13:
         99:cd:cd:06:c0:b6:dd:cc:56:87:4c:e2:47:1c:79:4f:7a:d4:
         38:11:88:0d:12:be:87:9f:d3:d9:06:a5:f7:9f:d2:13:cf:bb:
         97:f9:40:4b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJ2dmn4mVxJnsLb7jWlOgd1SnFuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NzUwNzA2MzRGRkRGM0Q4RDFDNzE5OTUyMDkzNTk0
QTU0Qzc2RTAeFw0yNDAzMDUxNzM1MTdaFw0yNTAzMDQxNzQwMTdaMDMxMTAvBgNV
BAMTKEMyMDlFQzVEMzA3NkMwOTk4NjMzNDE0NzRDQTM4M0U5NzNCREE5NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BguSRz9ooEWkIBXdoj/Cx5dc
fuzXw5DVeySDg8Nn+YTCEisDn+anR73Lp3mIgofPyhkQa6b6dVr7sgr1abinmhew
B2po8VQERFGt4dZuy0/vzIKePzRJ8jw5HQXwYXEczXPH5heL5MLZlM59YUaVNEpo
vcTT/58GM6cgdCoIjXCm4ywxCMeLs0as6ZudYgDPf72S36agk7NVZlWPoUKUfc07
/TWcghbK+V6h8RpoBGyJBvTZzSV4REb/TiBrJT7HHTh7avIy7EHJkVRlEbSvtCrp
FVr1GfXhjhGsnlNaW1QB9+soUwPvfvtU5MHHVnWR4BF8XJs2xCSyV40zp1EvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUwgnsXTB2wJmGM0FHTKOD6XO9qVYwHwYDVR0j
BBgwFoAUpXdQcGNP/fPY0ccZlSCTWUpUx24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTZCODQ0NTg4OUIxQTE3NzlDMzI0NkZBQ0QwNDYyREIy
RjNEMTRBOTU1RUMyQ0VDM0ZDNTVEQURDRUNENTYxLzAvQTU3NzUwNzA2MzRGRkRG
M0Q4RDFDNzE5OTUyMDkzNTk0QTU0Qzc2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTc3NTA3MDYzNEZGREYzRDhE
MUM3MTk5NTIwOTM1OTRBNTRDNzZFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU2Qjg0NDU4ODlCMUExNzc5QzMyNDZGQUNEMDQ2MkRCMkYzRDE0QTk1
NUVDMkNFQzNGQzU1REFEQ0VDRDU2MS8wLzMxMzQzODJlMzIzNDM1MmUzMTM4MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMxMzEzNzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlPW4
MA0GCSqGSIb3DQEBCwUAA4IBAQBFWgZPu1BiIBJBRQrUF3cBExGZO1TEPZ6d6e0w
ngYh+tSZcnUnJ7ugo89xLwY6OE9lsF2DXNPfsJmXu0QBxG7KKqakt9xmb5gShYc7
B6KW8TH/k3mb+8NrjfVfALSdB8vq3EdND8cuKltlOXIs3Mwnz27DMHUyrLB3+KWF
yGraFd3LEDfH+ETUdwxwtipoj5S6oxxF7q8JVrN3lli5TNr8rQAb5MvewxxFVNbM
0Y7qKqs4dtHmiXMes4NqkDjQRCgt6Q1jtq/0E+aRAwWwpL1THO8zSY6iLROZzc0G
wLbdzFaHTOJHHHlPetQ4EYgNEr6Hn9PZBqX3n9ITz7uX+UBL
-----END CERTIFICATE-----
Generated at Sat May 18 15:25:24 2024 by rpki-client on console-fra.rpki-client.org