Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3234362e302f32342d3234203d3e203238353039.roa
File:                     3134382e3234352e3234362e302f32342d3234203d3e203238353039.roa (raw, json)
Hash identifier:          69UpE0ghCC5p3PkmvB/rwDPnlvqnVtcx1Sk07z9M870=
Subject key identifier:   D9:4A:10:CE:BB:CB:1B:E2:9A:C7:64:88:6B:61:50:A1:7F:5C:74:AF
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       6A6966446724A863DF4FE0B6C7E5278B06F23DA6
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3234362e302f32342d3234203d3e203238353039.roa
Signing time:             Tue 05 Mar 2024 17:40:17 +0000
ROA not before:           Tue 05 Mar 2024 17:35:17 +0000
ROA not after:            Tue 04 Mar 2025 17:40:17 +0000
asID:                     28509
IP address blocks:        148.245.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:69:66:44:67:24:a8:63:df:4f:e0:b6:c7:e5:27:8b:06:f2:3d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:17 2024 GMT
            Not After : Mar  4 17:40:17 2025 GMT
        Subject: CN=D94A10CEBBCB1BE29AC764886B6150A17F5C74AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:d0:12:59:94:1c:86:c3:39:fc:fd:37:a5:
                    6d:e7:ce:af:33:2a:be:87:dd:7a:62:99:0f:e1:ec:
                    97:1e:5b:e1:a9:91:f0:b0:f3:5c:11:7b:a9:32:99:
                    72:02:59:45:cd:ec:a3:9a:7a:13:1d:9d:21:90:ec:
                    8a:bf:aa:e4:cb:93:19:07:27:21:6c:0d:dc:4d:f9:
                    70:48:9e:99:b4:9a:b3:7d:34:36:41:be:d4:ce:8f:
                    5a:7a:c4:f5:60:e0:61:32:20:0f:35:4b:d1:78:74:
                    d4:f5:02:65:2a:e8:0d:d5:82:e6:68:7c:6c:21:2d:
                    51:87:3a:63:50:46:f0:c8:e6:4a:6c:bf:32:39:b8:
                    58:7f:ed:69:ae:55:5f:ee:32:00:3f:aa:8e:96:9c:
                    4c:33:48:e3:60:4a:b2:d5:dd:66:95:c7:3f:93:f9:
                    f6:da:65:23:12:7c:69:65:39:7c:0a:20:e4:44:ac:
                    24:1f:56:1d:b0:04:24:c7:10:cc:06:b8:29:e9:32:
                    9a:49:9d:34:80:e6:dd:80:38:85:f9:73:94:02:a9:
                    94:0e:25:9b:07:ff:0c:01:95:58:2f:8b:b4:98:6a:
                    79:42:1e:27:f9:dd:ef:8c:89:05:e0:60:a7:30:83:
                    39:73:83:dc:af:0c:53:b6:f2:84:86:a8:39:05:a3:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4A:10:CE:BB:CB:1B:E2:9A:C7:64:88:6B:61:50:A1:7F:5C:74:AF
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3234362e302f32342d3234203d3e203238353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b6:c3:32:49:d6:38:e6:8c:01:54:50:c4:e3:96:4d:94:b0:
         83:f7:6c:91:95:20:eb:49:af:da:df:7e:29:48:18:6f:d0:49:
         4d:46:7f:8a:dc:e6:bf:6f:00:3b:d8:97:5f:52:51:25:a4:a5:
         21:8c:5c:2a:ad:7a:6d:3d:47:63:6b:5f:0d:9f:c0:77:d7:05:
         40:de:32:57:06:ed:28:02:c1:be:79:5a:06:64:3c:7e:05:30:
         d3:57:2b:be:c0:92:82:46:82:9b:4a:da:02:0d:58:3b:8d:66:
         9b:cd:c9:07:f5:4e:60:bc:91:8a:ed:55:13:ab:f4:aa:ce:59:
         bf:5c:58:f3:74:81:c4:c1:d0:b9:1c:45:a7:d9:9a:00:b4:e5:
         93:66:28:48:04:32:7a:10:8e:19:b4:9c:d3:76:2d:d6:f2:f5:
         27:6c:c3:1a:ce:f1:94:4d:76:2b:bc:6b:73:10:81:eb:2d:b2:
         c8:ca:18:c8:a1:7a:66:6a:a9:96:26:8b:92:c7:d4:2c:d2:a2:
         87:1a:72:5f:98:54:38:a3:c3:80:6d:a4:90:0a:fd:e8:8f:ef:
         7c:dd:a2:c6:95:23:19:30:36:a6:68:dc:e9:0c:71:42:91:40:
         de:23:6f:6e:28:ef:dc:26:e8:28:95:b8:8e:fd:a9:cf:c2:fc:
         3b:58:a1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:38 2024 by rpki-client on console-ams.rpki-client.org