Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3135382e302f32342d3234203d3e20323730313439.roa
File:                     3134382e3230382e3135382e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier:          dGrR2QSX6Ha/sqTHqH20qAFGFOH4XpKSOjD+dBCIjiw=
Subject key identifier:   94:A3:75:44:06:0A:8C:80:1E:C0:7C:26:AC:A5:1F:8A:99:7B:8F:3B
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       4537543D920D1AAB471CEA0732B7D67BC49E22A7
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3135382e302f32342d3234203d3e20323730313439.roa
Signing time:             Fri 29 Aug 2025 00:41:45 +0000
ROA not before:           Fri 29 Aug 2025 00:36:45 +0000
ROA not after:            Fri 28 Aug 2026 00:41:45 +0000
asID:                     270149
IP address blocks:        148.208.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Sep 2025 12:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:37:54:3d:92:0d:1a:ab:47:1c:ea:07:32:b7:d6:7b:c4:9e:22:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Aug 29 00:36:45 2025 GMT
            Not After : Aug 28 00:41:45 2026 GMT
        Subject: CN=94A37544060A8C801EC07C26ACA51F8A997B8F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:21:f9:08:f2:fa:a4:41:d4:5b:1f:6c:be:42:
                    24:a3:77:8c:c3:cc:c1:b3:63:aa:ae:e7:f8:9c:2f:
                    ce:cd:9a:87:97:76:f3:f5:15:2b:19:85:35:9e:72:
                    c2:a8:9e:71:bc:7e:50:af:38:b1:d3:20:ee:d3:a5:
                    c1:a9:eb:26:b5:42:cf:c0:fa:77:e0:84:77:19:13:
                    5a:dd:9a:a7:12:49:79:48:ec:64:02:63:ca:66:56:
                    52:19:39:04:a6:37:56:5a:4d:41:30:93:d7:9c:da:
                    84:ff:cc:08:60:67:d5:a7:e1:4d:37:bf:c1:74:57:
                    a9:0b:b2:45:91:4d:43:44:f7:f6:8e:04:42:36:6a:
                    de:c8:3b:10:2d:19:5b:6d:be:bf:a6:5a:e9:3a:6c:
                    8e:92:d4:15:72:af:ba:7d:cf:34:c8:b1:73:b8:58:
                    0d:78:24:1a:ac:94:81:da:0a:18:ab:f9:7a:96:2b:
                    b8:61:ba:e7:f9:43:d8:b7:da:1a:dd:eb:30:f0:02:
                    32:03:a4:6f:1b:2c:ef:04:01:2f:af:e2:40:7d:ae:
                    df:c4:d1:bf:91:3b:45:da:b9:ca:93:d1:d2:33:e2:
                    80:cc:e5:d2:cd:a4:00:c0:82:d6:fe:16:e2:2e:d8:
                    f8:5a:85:9f:3a:cc:90:f4:5a:7e:86:50:67:84:8d:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A3:75:44:06:0A:8C:80:1E:C0:7C:26:AC:A5:1F:8A:99:7B:8F:3B
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3135382e302f32342d3234203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ca:cb:9b:ba:6e:82:47:5c:f8:d8:f8:35:59:a2:4d:06:bf:
         46:5a:4c:6c:e5:24:79:38:f7:3c:06:9f:ac:c4:1d:78:4e:45:
         6a:da:ce:2d:9e:9e:74:8f:15:b0:0f:c2:5f:d3:af:b2:13:eb:
         30:4e:57:f6:e8:2f:09:34:a8:93:47:db:d0:e3:69:56:ff:49:
         e9:7f:43:ff:87:86:e7:43:f3:8b:c2:74:cc:40:4c:8e:19:a3:
         21:ec:36:8e:b2:a4:df:34:fd:ba:55:27:74:82:ee:a5:f5:8f:
         85:65:72:40:31:f3:a8:79:85:b3:83:db:23:7d:d3:3a:95:5d:
         62:dc:95:da:d8:85:1c:c7:df:78:d3:ce:49:e5:d9:e1:d7:60:
         f8:94:03:5e:d3:ad:90:55:61:4f:64:86:e5:a6:89:63:bb:39:
         d2:c4:94:0f:5a:4c:1e:9c:74:31:42:23:14:44:74:fd:3a:9c:
         b2:7d:6a:41:a2:a0:d6:8e:b8:af:92:a1:2a:0d:aa:40:6f:2b:
         81:6a:ac:61:27:40:08:1f:2d:3e:cd:21:e0:74:ab:e9:16:f1:
         cc:9c:ca:a7:f1:3d:cb:1b:fb:ab:bc:8e:26:26:19:41:38:62:
         00:53:b1:13:aa:19:9a:7f:50:64:66:30:2b:cb:67:18:e5:04:
         f8:bf:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:56:56 2025 by rpki-client