Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3230312e3134382e3231322e302f32322d3234203d3e203631343636.roa
File:                     3230312e3134382e3231322e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier:          f/TVHxm6dXX6ByjGEwuzAZzbfW5K2C5Z0XzcqnCDjc8=
Subject key identifier:   CD:B2:24:96:50:08:B7:F2:FD:90:91:BD:4D:B3:1D:71:FF:BE:F4:FC
Certificate issuer:       /CN=B3AC8703592539ADD492A1BDC08E997B67459567
Certificate serial:       7BB2BE8DADE1C9A9A91AD54189E13220C41565B4
Authority key identifier: B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3230312e3134382e3231322e302f32322d3234203d3e203631343636.roa
Signing time:             Tue 04 Feb 2025 18:25:10 +0000
ROA not before:           Tue 04 Feb 2025 18:20:10 +0000
ROA not after:            Tue 03 Feb 2026 18:25:10 +0000
asID:                     61466
IP address blocks:        201.148.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b2:be:8d:ad:e1:c9:a9:a9:1a:d5:41:89:e1:32:20:c4:15:65:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3AC8703592539ADD492A1BDC08E997B67459567
        Validity
            Not Before: Feb  4 18:20:10 2025 GMT
            Not After : Feb  3 18:25:10 2026 GMT
        Subject: CN=CDB224965008B7F2FD9091BD4DB31D71FFBEF4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:c4:9a:bc:f7:da:ca:66:8a:15:c9:c8:b3:
                    8a:e5:48:ba:45:09:5b:f5:d5:dc:11:db:87:e0:68:
                    9a:d4:a6:cd:82:8f:d4:1c:36:8b:70:94:98:9b:e0:
                    ff:53:ce:77:b7:35:6c:96:31:3c:10:c4:f4:e0:ac:
                    24:39:f6:84:ee:b5:40:5e:9c:ef:b2:b4:a2:14:58:
                    db:22:f3:36:56:65:50:58:d0:30:dd:28:ba:dc:23:
                    ac:c0:e8:ea:ec:1c:b1:14:e6:b4:2f:68:93:8e:e2:
                    36:b3:6d:51:d8:10:0f:96:fa:d1:ce:77:aa:79:6d:
                    fd:95:3e:2e:02:9a:c6:0b:2b:c3:7b:29:bd:ae:9b:
                    cf:84:e6:79:f6:c9:fe:30:1f:5f:fe:a9:36:9d:a4:
                    75:64:93:c4:70:e4:6d:5e:2c:f0:f3:d4:bc:e1:d7:
                    d4:23:a8:cd:de:fc:79:ee:7b:df:b8:85:74:59:b7:
                    9d:af:4d:a5:18:54:59:f8:35:92:28:da:c4:d0:0c:
                    d5:8f:d2:6a:f3:31:07:de:b5:f2:40:ff:65:67:91:
                    8f:f8:52:5a:b4:b6:fd:72:66:fb:f2:e6:24:a4:45:
                    60:4d:be:67:e3:80:d5:0e:4a:99:a1:47:81:50:a5:
                    da:a3:83:67:da:9a:6a:c1:8d:69:c5:b7:b2:19:14:
                    fb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B2:24:96:50:08:B7:F2:FD:90:91:BD:4D:B3:1D:71:FF:BE:F4:FC
            X509v3 Authority Key Identifier:
                keyid:B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3230312e3134382e3231322e302f32322d3234203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:08:db:bc:b7:9a:b4:ec:ea:ee:95:0e:de:98:e2:00:5b:fa:
         39:e8:89:6e:d5:4f:fe:c8:fe:2d:2e:bd:fd:13:96:6c:ae:92:
         f1:2b:73:40:09:b7:98:11:57:ea:a0:c1:e0:6e:d8:59:34:00:
         fe:9d:5b:c3:ea:7a:1b:41:7a:13:88:6a:94:8f:b0:6b:63:02:
         f6:ef:85:9a:41:15:a1:46:6e:8e:01:19:b3:fb:f0:24:bc:d6:
         26:b7:df:35:33:9c:2c:af:0c:2c:38:02:d0:de:c7:62:70:99:
         07:05:38:64:10:8b:db:92:22:ea:d3:91:77:cc:70:33:0b:da:
         b9:2f:38:3d:93:b8:d5:01:3d:e8:0d:c8:52:d8:ad:29:39:19:
         44:af:c7:89:5c:68:45:a7:f5:6c:da:e6:b7:ca:30:16:76:a3:
         6c:13:f0:c6:11:76:e2:5e:6a:d8:c0:7f:41:7f:58:61:e4:d8:
         d2:e1:81:ac:82:15:d9:e9:de:9a:1c:9c:5d:92:9d:5c:93:fe:
         6e:e4:44:71:59:6a:7f:5e:d1:27:27:e4:75:65:ae:b0:97:09:
         d5:5d:e2:80:cc:b4:b2:26:f9:46:a0:22:45:67:ce:fe:f2:24:
         0a:6f:40:0b:9e:5f:d8:a8:3a:39:24:67:40:c7:d6:24:53:9f:
         52:ed:57:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:29 2025 by rpki-client