Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/3134382e3232322e3135322e302f32342d3234203d3e20323732343033.roa
File:                     3134382e3232322e3135322e302f32342d3234203d3e20323732343033.roa (raw, json)
Hash identifier:          ur7IPphDbNBeNsC1EyQ9d5M3I8JdE27lhPlIKOpjcLI=
Subject key identifier:   FA:8A:44:A0:06:AB:4E:11:69:41:5F:04:31:B0:D0:88:FA:67:E5:DF
Certificate issuer:       /CN=9F6F899DA067FC03FDE230388E44F7A4A92EC00B
Certificate serial:       05E646858E26C42067AC9BAB4E849685C19C7A93
Authority key identifier: 9F:6F:89:9D:A0:67:FC:03:FD:E2:30:38:8E:44:F7:A4:A9:2E:C0:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/3134382e3232322e3135322e302f32342d3234203d3e20323732343033.roa
Signing time:             Mon 27 Jan 2025 20:20:00 +0000
ROA not before:           Mon 27 Jan 2025 20:15:00 +0000
ROA not after:            Mon 26 Jan 2026 20:20:00 +0000
asID:                     272403
IP address blocks:        148.222.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 22:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e6:46:85:8e:26:c4:20:67:ac:9b:ab:4e:84:96:85:c1:9c:7a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6F899DA067FC03FDE230388E44F7A4A92EC00B
        Validity
            Not Before: Jan 27 20:15:00 2025 GMT
            Not After : Jan 26 20:20:00 2026 GMT
        Subject: CN=FA8A44A006AB4E1169415F0431B0D088FA67E5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a7:3d:62:0b:ef:d5:85:1b:d5:2f:0c:10:01:
                    42:46:6b:78:6e:8e:9a:e9:b7:61:88:ee:7b:b1:1e:
                    f4:f6:d8:56:90:09:c9:af:04:75:eb:4b:d4:75:2c:
                    86:b2:08:1f:28:b5:ec:47:46:86:78:2c:82:0e:e1:
                    38:6f:f6:22:64:af:92:e3:73:11:21:8d:60:9b:63:
                    90:19:47:48:f2:bc:66:81:93:cf:4e:40:6b:24:c6:
                    4b:04:26:cd:f8:de:38:d7:2c:5a:97:20:53:08:d2:
                    82:0c:a3:b2:23:4f:ef:57:45:a3:d8:a1:41:cd:18:
                    56:33:8a:f7:f2:ac:d4:e6:f4:37:73:23:17:03:e5:
                    b4:ba:6d:82:e7:2f:70:e0:9d:4f:7d:1e:21:0f:5b:
                    c2:21:74:e1:b7:6c:33:f2:51:b9:6b:e0:e9:8e:83:
                    5a:e8:65:4b:a6:1c:55:84:0b:d9:e3:24:17:53:4d:
                    90:f5:0d:f3:6e:ff:16:89:22:33:de:24:e6:62:38:
                    ad:16:9d:6e:bb:3c:f6:d1:9c:b0:b3:f6:a2:99:b9:
                    cd:bb:f8:a9:60:db:5c:03:c4:3c:c8:73:de:49:2c:
                    da:c3:fa:52:d6:9d:02:4c:b8:d7:f8:35:9b:e1:3b:
                    d5:d4:d4:5b:d8:31:60:f8:a4:de:31:0d:f2:ca:15:
                    dd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8A:44:A0:06:AB:4E:11:69:41:5F:04:31:B0:D0:88:FA:67:E5:DF
            X509v3 Authority Key Identifier:
                keyid:9F:6F:89:9D:A0:67:FC:03:FD:E2:30:38:8E:44:F7:A4:A9:2E:C0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6F899DA067FC03FDE230388E44F7A4A92EC00B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07F7E70533B53DEB460E345785342E0ED22DD2C75131E2C43F4624E1A2435ADA/0/3134382e3232322e3135322e302f32342d3234203d3e20323732343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:9e:4b:f6:3b:57:81:06:f4:ec:c9:39:9c:26:fd:12:15:e4:
         a0:97:7f:d8:19:fa:22:74:99:fb:d7:15:21:b5:fa:d8:a8:76:
         06:37:4d:55:6e:70:53:c6:00:7f:67:be:c6:68:06:8b:cb:bd:
         53:b5:46:bb:1d:b8:1b:89:00:7d:bd:1d:3b:b4:76:b8:8a:42:
         48:90:b8:c4:a9:ed:7f:4a:52:ac:b4:a7:43:1a:44:ac:b6:92:
         a2:0b:0d:52:eb:c0:58:c1:df:69:79:ad:8c:cf:ec:d5:a1:d7:
         d9:7e:a2:77:4d:29:dd:d2:82:47:a8:9f:b6:35:4b:1b:8c:ff:
         af:f8:b7:ed:7d:c9:37:f5:2f:5f:48:2e:d9:8a:d0:de:cf:47:
         30:82:a3:c7:1c:ef:d1:d7:be:3a:06:fd:f2:8b:92:d2:6c:61:
         c1:06:87:94:4e:9a:74:2a:ff:55:44:72:f5:6f:20:22:25:b1:
         81:f2:78:4b:01:a2:61:79:70:c6:d7:7e:ae:ce:65:43:83:19:
         14:fa:95:f1:a8:35:93:da:55:25:8b:3f:3a:0e:68:0d:53:73:
         23:57:06:56:0f:bf:ef:ed:8e:9e:be:f4:21:f6:67:f3:bc:29:
         07:9e:39:f6:48:20:fc:d1:9f:b7:89:7d:24:32:be:a4:6b:68:
         06:16:fb:9c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUBeZGhY4mxCBnrJurToSWhcGcepMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY2Rjg5OURBMDY3RkMwM0ZERTIzMDM4OEU0NEY3QTRB
OTJFQzAwQjAeFw0yNTAxMjcyMDE1MDBaFw0yNjAxMjYyMDIwMDBaMDMxMTAvBgNV
BAMTKEZBOEE0NEEwMDZBQjRFMTE2OTQxNUYwNDMxQjBEMDg4RkE2N0U1REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXpz1iC+/VhRvVLwwQAUJGa3hu
jprpt2GI7nuxHvT22FaQCcmvBHXrS9R1LIayCB8otexHRoZ4LIIO4Thv9iJkr5Lj
cxEhjWCbY5AZR0jyvGaBk89OQGskxksEJs343jjXLFqXIFMI0oIMo7IjT+9XRaPY
oUHNGFYzivfyrNTm9DdzIxcD5bS6bYLnL3DgnU99HiEPW8IhdOG3bDPyUblr4OmO
g1roZUumHFWEC9njJBdTTZD1DfNu/xaJIjPeJOZiOK0WnW67PPbRnLCz9qKZuc27
+Klg21wDxDzIc95JLNrD+lLWnQJMuNf4NZvhO9XU1FvYMWD4pN4xDfLKFd0tAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU+opEoAarThFpQV8EMbDQiPpn5d8wHwYDVR0j
BBgwFoAUn2+JnaBn/AP94jA4jkT3pKkuwAswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wN0Y3RTcwNTMzQjUzREVCNDYwRTM0NTc4NTM0MkUwRUQy
MkREMkM3NTEzMUUyQzQzRjQ2MjRFMUEyNDM1QURBLzAvOUY2Rjg5OURBMDY3RkMw
M0ZERTIzMDM4OEU0NEY3QTRBOTJFQzAwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjZGODk5REEwNjdGQzAzRkRF
MjMwMzg4RTQ0RjdBNEE5MkVDMDBCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDdGN0U3MDUzM0I1M0RFQjQ2MEUzNDU3ODUzNDJFMEVEMjJERDJDNzUx
MzFFMkM0M0Y0NjI0RTFBMjQzNUFEQS8wLzMxMzQzODJlMzIzMjMyMmUzMTM1MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzNDMwMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
3pgwDQYJKoZIhvcNAQELBQADggEBAKaeS/Y7V4EG9OzJOZwm/RIV5KCXf9gZ+iJ0
mfvXFSG1+tiodgY3TVVucFPGAH9nvsZoBovLvVO1RrsduBuJAH29HTu0driKQkiQ
uMSp7X9KUqy0p0MaRKy2kqILDVLrwFjB32l5rYzP7NWh19l+ondNKd3Sgkeon7Y1
SxuM/6/4t+19yTf1L19ILtmK0N7PRzCCo8cc79HXvjoG/fKLktJsYcEGh5ROmnQq
/1VEcvVvICIlsYHyeEsBomF5cMbXfq7OZUODGRT6lfGoNZPaVSWLPzoOaA1TcyNX
BlYPv+/tjp6+9CH2Z/O8KQeeOfZIIPzRn7eJfSQyvqRraAYW+5w=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:13:44 2025 by rpki-client