Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa
File:                     3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa (raw, json)
Hash identifier:          /Z7LPAsuTjZ5cwTBvnVpQcKSEa9rH/diyzx0Hq8W+6o=
Subject key identifier:   81:AF:DC:9E:E4:5F:F8:93:53:94:69:17:B5:3E:7A:34:D6:4F:8E:0C
Certificate issuer:       /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial:       2385552F93AFD99C6E6DF9DD40EDDA5D0E0EEA3E
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa
Signing time:             Tue 25 Feb 2025 19:45:01 +0000
ROA not before:           Tue 25 Feb 2025 19:40:01 +0000
ROA not after:            Tue 24 Feb 2026 19:45:01 +0000
asID:                     61451
IP address blocks:        148.222.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:85:55:2f:93:af:d9:9c:6e:6d:f9:dd:40:ed:da:5d:0e:0e:ea:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
        Validity
            Not Before: Feb 25 19:40:01 2025 GMT
            Not After : Feb 24 19:45:01 2026 GMT
        Subject: CN=81AFDC9EE45FF89353946917B53E7A34D64F8E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:91:cd:b0:94:f7:c6:a2:fe:b2:c8:17:1c:f9:
                    6f:ec:1f:8b:b1:6b:9b:c8:55:24:8e:63:3d:ea:9b:
                    11:d5:a2:a3:05:16:9d:ba:66:ac:83:4f:03:f5:b6:
                    f2:e9:0e:3f:0f:a4:49:56:e5:3c:7a:37:af:72:ce:
                    16:23:7b:4e:06:b4:a6:ba:48:5c:71:86:d2:24:64:
                    f9:08:be:bd:3a:99:33:92:68:16:a2:6b:17:2e:45:
                    b1:78:77:28:d0:19:45:97:b8:c7:3b:cb:a4:42:d8:
                    7e:3b:11:8e:a8:71:f0:86:50:50:29:4f:3b:61:6e:
                    34:81:bd:a4:21:69:15:ba:1c:6e:b0:1a:7a:52:8c:
                    d0:ee:54:8c:80:3a:8c:ac:8b:81:c5:fc:83:fe:5f:
                    35:36:27:e9:0f:bf:5d:89:da:03:d9:8b:3b:75:db:
                    06:5b:d7:a4:8c:86:cc:59:de:7f:f3:15:e5:9c:ae:
                    61:b0:32:3d:41:5e:e2:1c:5e:03:8a:ed:7b:42:de:
                    8d:78:10:e7:7e:a1:56:f2:5b:11:8d:35:3f:8f:c2:
                    90:03:0d:62:9a:9b:fb:77:96:2b:30:57:71:27:4a:
                    a7:1c:44:fd:18:29:e2:89:33:e5:b6:b4:98:f3:d4:
                    11:b8:35:bd:4c:09:db:14:88:5b:38:19:0f:77:72:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:DC:9E:E4:5F:F8:93:53:94:69:17:B5:3E:7A:34:D6:4F:8E:0C
            X509v3 Authority Key Identifier:
                keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/3134382e3232322e3135362e302f32332d3234203d3e203631343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:fe:12:68:38:16:41:94:70:8c:e5:fe:e6:62:b3:8a:e0:6e:
         67:88:63:2f:36:8c:5f:2e:6a:a5:7d:e8:23:9a:ac:bf:b8:fd:
         d9:83:fd:12:43:e0:0d:74:8f:de:b2:ad:8f:1c:0a:eb:4c:9f:
         2c:3d:c5:37:d1:16:a9:1c:83:50:6d:a7:8f:50:4f:20:c0:82:
         88:a9:91:19:01:9d:77:bf:37:78:e4:21:56:09:9d:fd:4b:27:
         81:1c:fe:61:ca:5d:7e:0d:58:b6:fd:27:98:7f:69:55:13:d9:
         9a:05:55:95:ba:f8:4e:30:7f:cc:f5:47:d0:8c:83:85:64:21:
         cc:8f:ba:ee:ed:0b:39:9f:5e:8e:10:e4:86:6b:ad:10:fc:74:
         ce:12:c6:32:2d:2f:34:4b:43:ee:c1:87:44:99:1c:74:73:23:
         ec:fe:8b:15:9b:dc:ce:92:cb:b7:32:30:00:6d:3d:5b:ba:83:
         9d:b9:5b:bd:00:0c:da:03:dd:e9:5e:d5:33:ec:68:37:e0:25:
         16:5c:1b:5e:10:d3:71:1e:0f:46:ac:b5:27:98:63:27:a7:84:
         a0:73:43:4f:71:59:d1:c2:37:48:bc:e6:86:4a:04:36:d3:5a:
         04:2c:a3:9a:be:94:7a:40:ff:80:bc:02:08:10:cb:62:a8:48:
         9e:30:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:54 2025 by rpki-client