Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3234382e302f32342d3234203d3e203238353036.roa
File:                     3134382e3234352e3234382e302f32342d3234203d3e203238353036.roa (raw, json)
Hash identifier:          2fCmK1mJYEmDeepElj+1MEDddy3fjp4ZqssObj9eC1U=
Subject key identifier:   D1:97:1C:75:52:F3:26:32:B8:FF:2D:BB:10:7A:C6:77:79:C4:8D:9C
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       5AF7824A4F8311FED7D4B7B4566F92E670AAC263
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3234382e302f32342d3234203d3e203238353036.roa
Signing time:             Tue 05 Mar 2024 17:40:17 +0000
ROA not before:           Tue 05 Mar 2024 17:35:17 +0000
ROA not after:            Tue 04 Mar 2025 17:40:17 +0000
asID:                     28506
IP address blocks:        148.245.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 12:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f7:82:4a:4f:83:11:fe:d7:d4:b7:b4:56:6f:92:e6:70:aa:c2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Mar  5 17:35:17 2024 GMT
            Not After : Mar  4 17:40:17 2025 GMT
        Subject: CN=D1971C7552F32632B8FF2DBB107AC67779C48D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d2:19:52:60:e9:46:33:86:0e:0b:e3:25:b8:
                    c7:67:b3:7f:3a:80:bb:4e:1b:92:1a:b2:fd:fd:0b:
                    d8:eb:35:4f:7c:d6:3c:a4:de:a8:b7:de:72:cd:2e:
                    60:bd:89:45:6c:18:78:62:9b:bd:cc:dd:7e:f4:dc:
                    f4:01:46:b7:40:d4:9e:25:32:73:f5:a2:77:67:7b:
                    13:5d:7f:96:ca:62:7e:77:5b:92:d7:42:a3:c4:51:
                    8c:9a:5c:54:56:ca:01:c0:00:a5:ba:90:0d:b7:42:
                    57:f7:06:1d:1d:f2:67:93:f3:eb:d3:b7:5b:81:19:
                    65:95:ab:fe:89:51:81:d2:15:d0:63:16:eb:e4:b2:
                    f4:16:2e:0b:96:7b:6b:6b:de:f4:db:b5:68:3e:f1:
                    d0:9f:1d:31:be:9a:65:66:fe:f4:4e:8b:80:87:2a:
                    f8:47:c4:8f:d6:bf:5e:18:14:9e:db:96:01:6f:b9:
                    b9:15:3b:f6:c4:15:63:de:04:4a:60:fb:4c:d0:07:
                    82:bb:10:75:0c:e8:b0:98:cb:39:ce:de:57:96:2b:
                    6f:7b:34:e5:c1:6c:7a:fd:35:45:06:93:40:ea:e0:
                    e1:b4:49:36:cf:84:3e:0e:f0:20:d3:f0:0d:43:be:
                    b9:f9:c7:3f:be:b1:fa:33:e9:c7:ca:04:14:9c:73:
                    9d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:97:1C:75:52:F3:26:32:B8:FF:2D:BB:10:7A:C6:77:79:C4:8D:9C
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234352e3234382e302f32342d3234203d3e203238353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.245.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3e:a0:8c:ea:0c:64:fa:64:92:76:52:70:0a:30:5b:d7:92:
         9e:6c:f6:4c:27:d8:05:a9:21:5c:34:9e:20:37:68:66:19:63:
         b1:9f:d9:51:46:30:54:f2:16:9a:0f:71:b3:41:ab:7b:76:0a:
         5d:07:bf:50:ae:2f:a1:c9:13:de:bd:07:07:79:8f:8c:dd:34:
         7b:34:bf:2e:cd:97:7e:65:40:22:22:6d:02:aa:a3:8a:a7:83:
         31:89:c6:c4:ed:42:56:5b:1e:1d:5f:41:19:11:9c:4a:0d:57:
         e0:f7:0e:f2:50:fe:54:88:80:b3:99:82:f1:24:d0:a1:b7:02:
         09:65:81:4b:5e:24:5d:70:c0:39:f9:0b:ff:59:3e:3e:44:97:
         48:0f:a4:a9:70:9f:6a:97:a9:87:c3:28:80:a1:95:6c:6d:04:
         1a:97:44:7e:9e:83:f8:ff:3b:7a:32:a6:96:90:01:f4:6f:28:
         a8:e1:6f:f2:98:ae:c8:df:03:b4:89:d3:3f:aa:21:18:46:4d:
         50:dd:25:d8:ed:d3:66:4e:38:b2:cf:30:3f:f7:93:3c:3f:fd:
         a9:fb:4b:52:f2:f1:5c:01:2f:ca:5e:06:59:36:1c:da:47:cc:
         d6:d2:9c:08:90:72:4f:87:d3:9e:6b:6d:9d:81:bd:16:03:58:
         92:c7:2a:61
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWveCSk+DEf7X1Le0Vm+S5nCqwmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NzUwNzA2MzRGRkRGM0Q4RDFDNzE5OTUyMDkzNTk0
QTU0Qzc2RTAeFw0yNDAzMDUxNzM1MTdaFw0yNTAzMDQxNzQwMTdaMDMxMTAvBgNV
BAMTKEQxOTcxQzc1NTJGMzI2MzJCOEZGMkRCQjEwN0FDNjc3NzlDNDhEOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ0hlSYOlGM4YOC+MluMdns386
gLtOG5Iasv39C9jrNU981jyk3qi33nLNLmC9iUVsGHhim73M3X703PQBRrdA1J4l
MnP1ondnexNdf5bKYn53W5LXQqPEUYyaXFRWygHAAKW6kA23Qlf3Bh0d8meT8+vT
t1uBGWWVq/6JUYHSFdBjFuvksvQWLguWe2tr3vTbtWg+8dCfHTG+mmVm/vROi4CH
KvhHxI/Wv14YFJ7blgFvubkVO/bEFWPeBEpg+0zQB4K7EHUM6LCYyznO3leWK297
NOXBbHr9NUUGk0Dq4OG0STbPhD4O8CDT8A1Dvrn5xz++sfoz6cfKBBScc52pAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0ZccdVLzJjK4/y27EHrGd3nEjZwwHwYDVR0j
BBgwFoAUpXdQcGNP/fPY0ccZlSCTWUpUx24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTZCODQ0NTg4OUIxQTE3NzlDMzI0NkZBQ0QwNDYyREIy
RjNEMTRBOTU1RUMyQ0VDM0ZDNTVEQURDRUNENTYxLzAvQTU3NzUwNzA2MzRGRkRG
M0Q4RDFDNzE5OTUyMDkzNTk0QTU0Qzc2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTc3NTA3MDYzNEZGREYzRDhE
MUM3MTk5NTIwOTM1OTRBNTRDNzZFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU2Qjg0NDU4ODlCMUExNzc5QzMyNDZGQUNEMDQ2MkRCMkYzRDE0QTk1
NUVDMkNFQzNGQzU1REFEQ0VDRDU2MS8wLzMxMzQzODJlMzIzNDM1MmUzMjM0Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzUzMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlPX4
MA0GCSqGSIb3DQEBCwUAA4IBAQA/PqCM6gxk+mSSdlJwCjBb15KebPZMJ9gFqSFc
NJ4gN2hmGWOxn9lRRjBU8haaD3GzQat7dgpdB79Qri+hyRPevQcHeY+M3TR7NL8u
zZd+ZUAiIm0CqqOKp4MxicbE7UJWWx4dX0EZEZxKDVfg9w7yUP5UiICzmYLxJNCh
twIJZYFLXiRdcMA5+Qv/WT4+RJdID6SpcJ9ql6mHwyiAoZVsbQQal0R+noP4/zt6
MqaWkAH0byio4W/ymK7I3wO0idM/qiEYRk1Q3SXY7dNmTjiyzzA/95M8P/2p+0tS
8vFcAS/KXgZZNhzaR8zW0pwIkHJPh9Oea22dgb0WA1iSxyph
-----END CERTIFICATE-----
Generated at Wed May 29 10:41:20 2024 by rpki-client on console-ams.rpki-client.org