Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134382e3232372e36342e302f31382d3234203d3e203134353933.roa
File:                     3134382e3232372e36342e302f31382d3234203d3e203134353933.roa (raw, json)
Hash identifier:          Fp8JkPrtP9qA7d32u0aU4QYu+twe11vJduBhWxFEriw=
Subject key identifier:   2F:CE:08:64:05:73:9E:61:8B:AF:20:CE:34:91:30:07:A6:3D:0E:86
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       1DEA42AA258E807E5BB3B6725527978382A0ADB2
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134382e3232372e36342e302f31382d3234203d3e203134353933.roa
Signing time:             Wed 25 Jun 2025 20:05:00 +0000
ROA not before:           Wed 25 Jun 2025 20:00:00 +0000
ROA not after:            Wed 24 Jun 2026 20:05:00 +0000
asID:                     14593
IP address blocks:        148.227.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 21:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ea:42:aa:25:8e:80:7e:5b:b3:b6:72:55:27:97:83:82:a0:ad:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Jun 25 20:00:00 2025 GMT
            Not After : Jun 24 20:05:00 2026 GMT
        Subject: CN=2FCE086405739E618BAF20CE34913007A63D0E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:de:d7:1d:a3:95:27:05:25:58:ba:ba:f8:10:
                    e5:38:2b:07:d6:d9:5d:5c:e9:b4:db:1b:6f:50:7d:
                    9d:23:07:db:89:33:61:5d:25:ba:93:52:f0:9f:1f:
                    41:a1:7b:c0:a2:ea:0a:fd:6e:6b:31:95:7d:64:80:
                    c6:a1:d4:a6:4e:c8:61:68:53:63:10:0d:2b:43:c2:
                    3f:ea:5e:fc:6a:f2:ca:0c:56:58:ed:e3:8d:e2:e0:
                    4c:be:16:7e:c8:f5:d8:62:7d:ae:d1:2c:cf:cf:fd:
                    c8:67:fe:50:7a:eb:9e:09:11:ac:d6:67:8d:29:31:
                    c8:9a:01:c6:a9:9f:62:cc:b2:0f:a5:bd:bf:99:c5:
                    92:4a:6f:e0:a4:dd:21:7e:1f:11:d6:11:44:7f:d2:
                    21:26:71:e3:61:2b:bd:3b:fe:03:6c:49:c0:ff:7a:
                    d1:a2:cb:db:2d:a9:7d:5f:e3:13:02:e2:05:4e:71:
                    40:a7:98:25:a3:3d:9c:5c:50:ed:54:31:ac:55:45:
                    2d:bd:c8:f4:3d:af:af:7a:cd:fc:cd:25:20:f0:9a:
                    63:4b:09:d5:ff:99:47:a7:a0:70:59:45:4b:bb:d8:
                    33:ef:a8:9a:93:29:f1:9b:ff:dc:35:22:5d:6d:34:
                    b2:1f:c7:ec:91:94:d1:f9:8e:da:44:66:fd:89:62:
                    15:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CE:08:64:05:73:9E:61:8B:AF:20:CE:34:91:30:07:A6:3D:0E:86
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134382e3232372e36342e302f31382d3234203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.227.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         61:f8:21:08:1c:2e:e6:37:3d:e7:3d:e6:fa:68:9d:a5:ec:8c:
         77:d0:76:95:d0:4c:69:ee:2e:74:3f:6d:40:89:2c:4e:81:fa:
         98:73:24:b3:3f:8c:2a:ce:57:ba:fd:87:bd:40:90:f7:87:b8:
         5c:ba:30:83:c4:2b:64:1c:36:e4:0c:8d:bb:ca:84:96:24:ec:
         ec:cc:51:f0:e1:d4:f4:20:ff:34:b6:1c:be:ca:0b:5f:81:36:
         45:ad:66:b4:de:3b:62:ab:59:82:33:b4:37:f7:51:16:9f:14:
         0a:76:f2:29:99:df:89:18:6d:04:0d:42:77:15:5e:6c:ea:8a:
         b6:f1:c8:60:03:9e:85:b4:89:9c:79:a4:d1:a5:d9:60:13:06:
         29:7a:61:f1:9f:fb:88:53:99:0c:65:ff:17:f2:69:4f:04:0c:
         02:9d:88:a4:2b:9f:47:cc:56:83:82:56:72:7a:9a:dd:11:bc:
         fd:65:12:14:fa:70:05:f5:a6:01:40:bd:4d:40:51:ac:d3:95:
         3f:57:fd:fe:44:c3:70:28:21:98:ca:87:07:9f:3e:6b:24:b9:
         a0:52:12:05:93:e5:91:76:de:b1:d7:de:fc:50:b2:f2:00:e9:
         17:39:47:54:ff:64:a6:2f:13:70:0b:0a:04:19:8a:a3:4a:94:
         b4:66:b0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:27:24 2025 by rpki-client