Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AE0975595A7E20CBA689C661AC2A3747D870C2A8CF08F9F223D942E40F70C73/0/3230302e312e3134382e302f32342d3332203d3e2038303438.roa
File:                     3230302e312e3134382e302f32342d3332203d3e2038303438.roa (raw, json)
Hash identifier:          gjJEDSRYpkWITPMNL1b6xc/OJvfeIt8FGqdCEfHwkQk=
Subject key identifier:   36:C7:63:5B:2F:8D:86:66:06:45:5B:7E:7A:BF:72:89:ED:47:26:E5
Certificate issuer:       /CN=9F86AA463B2D9774971AFAFA0E549C35F3743BB9
Certificate serial:       53EE15EB6FD270E9AED026C759E9B3ACED1C7BCE
Authority key identifier: 9F:86:AA:46:3B:2D:97:74:97:1A:FA:FA:0E:54:9C:35:F3:74:3B:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F86AA463B2D9774971AFAFA0E549C35F3743BB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AE0975595A7E20CBA689C661AC2A3747D870C2A8CF08F9F223D942E40F70C73/0/3230302e312e3134382e302f32342d3332203d3e2038303438.roa
Signing time:             Tue 04 Feb 2025 18:02:11 +0000
ROA not before:           Tue 04 Feb 2025 17:57:11 +0000
ROA not after:            Tue 03 Feb 2026 18:02:11 +0000
asID:                     8048
IP address blocks:        200.1.148.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AE0975595A7E20CBA689C661AC2A3747D870C2A8CF08F9F223D942E40F70C73/0/9F86AA463B2D9774971AFAFA0E549C35F3743BB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AE0975595A7E20CBA689C661AC2A3747D870C2A8CF08F9F223D942E40F70C73/0/9F86AA463B2D9774971AFAFA0E549C35F3743BB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F86AA463B2D9774971AFAFA0E549C35F3743BB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 08:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ee:15:eb:6f:d2:70:e9:ae:d0:26:c7:59:e9:b3:ac:ed:1c:7b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F86AA463B2D9774971AFAFA0E549C35F3743BB9
        Validity
            Not Before: Feb  4 17:57:11 2025 GMT
            Not After : Feb  3 18:02:11 2026 GMT
        Subject: CN=36C7635B2F8D866606455B7E7ABF7289ED4726E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:11:3a:5b:ef:34:ac:cc:13:d8:6f:3c:a8:
                    3c:6b:41:30:6a:db:08:94:af:7c:74:d1:4e:ff:6c:
                    b4:4d:5e:64:7a:f2:17:1e:d4:23:99:2b:71:d2:f3:
                    f2:9d:e9:af:ed:19:87:7e:3e:7c:2f:6e:dc:d3:28:
                    93:ab:c0:e7:b7:b3:2d:5c:6a:5a:fd:99:7b:95:5c:
                    b8:fb:f7:80:1a:0c:bd:60:a1:63:e9:03:0c:94:b0:
                    92:21:0a:f1:4a:7d:39:f7:c2:b0:e7:25:19:d1:d9:
                    0a:10:b7:df:b9:d5:12:86:c9:29:58:ea:ed:6a:52:
                    8e:d9:d2:0a:4c:48:47:22:dc:32:32:85:0e:e7:b9:
                    02:fd:c2:98:bb:11:1c:75:b0:be:44:ed:c0:bf:82:
                    0d:14:46:47:ec:29:4e:64:ca:42:22:29:92:ca:8b:
                    19:4d:af:c9:99:73:a9:e4:1f:1f:d6:7b:91:b0:78:
                    53:0d:fd:06:43:17:f2:b6:1c:7e:d2:1c:d2:2a:59:
                    ca:4a:af:dc:89:90:99:8c:29:0f:ee:92:12:26:f9:
                    07:68:1c:1d:7d:a2:98:11:4b:d9:d1:41:8c:d0:a6:
                    6d:8c:8a:e9:f0:16:79:24:f0:35:72:d0:89:25:ba:
                    23:90:01:80:89:25:27:b1:c1:eb:a9:7a:af:c6:44:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C7:63:5B:2F:8D:86:66:06:45:5B:7E:7A:BF:72:89:ED:47:26:E5
            X509v3 Authority Key Identifier:
                keyid:9F:86:AA:46:3B:2D:97:74:97:1A:FA:FA:0E:54:9C:35:F3:74:3B:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AE0975595A7E20CBA689C661AC2A3747D870C2A8CF08F9F223D942E40F70C73/0/9F86AA463B2D9774971AFAFA0E549C35F3743BB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F86AA463B2D9774971AFAFA0E549C35F3743BB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AE0975595A7E20CBA689C661AC2A3747D870C2A8CF08F9F223D942E40F70C73/0/3230302e312e3134382e302f32342d3332203d3e2038303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:17:0f:4f:54:d1:cc:91:ab:88:97:5c:cb:9b:c6:cc:b7:18:
         98:78:ab:a0:d7:5b:6c:c5:74:3c:1a:ad:4e:87:91:96:7e:d7:
         80:49:36:4f:dc:38:6d:f8:5d:2b:10:43:c4:9f:46:a0:48:7f:
         a4:9c:16:1f:a3:3c:0c:64:af:de:a8:a4:0a:6e:9d:a4:4f:e7:
         48:fb:5a:16:39:15:81:ac:c9:68:5e:5d:ce:9f:c3:e7:2b:e6:
         90:c4:69:c6:b8:98:65:f7:04:01:08:ad:77:b9:8e:db:32:9b:
         ff:73:1f:48:c9:ca:bd:c4:34:c9:e9:0c:7f:ea:c0:74:17:32:
         1a:e7:21:12:c4:d0:07:d9:b8:c8:83:8d:ea:99:3f:e7:b7:ee:
         e9:c0:2a:c4:05:2d:3b:0b:7d:85:c1:0e:d3:b7:14:e4:4c:95:
         1f:21:4f:90:a2:ff:d6:29:e9:14:84:1c:8c:e6:d1:7e:d9:4f:
         f8:15:a7:42:69:88:8a:11:c3:2f:6c:b1:7e:16:34:d0:eb:7d:
         53:9d:c7:78:cd:49:48:1c:c8:c7:a1:b5:7e:aa:92:ac:ca:e2:
         86:cc:b7:01:cf:64:79:36:61:4c:68:98:62:02:a8:45:59:ec:
         73:48:08:f1:3f:21:a3:7b:4d:23:77:dd:d0:c8:54:0e:cc:b1:
         c6:73:71:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:33:47 2025 by rpki-client