Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3131322e302f32342d3234203d3e20323730313439.roa
File:                     3134382e3230382e3131322e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier:          2SKIMu+f6pIvP6684ZRY4sbEV245OKpQkDB5N1wivG8=
Subject key identifier:   F7:3F:A3:82:7E:AC:87:8D:1D:33:EE:F6:AB:BC:A7:88:7E:32:2C:51
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       6CFAEDB82B8AD2112579C0D2FE67FD1C7E103B
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3131322e302f32342d3234203d3e20323730313439.roa
Signing time:             Tue 04 Feb 2025 18:08:40 +0000
ROA not before:           Tue 04 Feb 2025 18:03:40 +0000
ROA not after:            Tue 03 Feb 2026 18:08:40 +0000
asID:                     270149
IP address blocks:        148.208.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fa:ed:b8:2b:8a:d2:11:25:79:c0:d2:fe:67:fd:1c:7e:10:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Feb  4 18:03:40 2025 GMT
            Not After : Feb  3 18:08:40 2026 GMT
        Subject: CN=F73FA3827EAC878D1D33EEF6ABBCA7887E322C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:16:41:40:41:57:d7:0c:7f:7c:52:24:d3:c3:
                    18:3b:82:85:cd:c9:13:54:b3:20:7f:6f:ac:bc:63:
                    f4:d2:e8:30:88:29:3c:a1:28:72:95:1f:0e:e4:5f:
                    6e:fb:2f:53:c6:9c:dc:1e:aa:dc:84:46:31:8c:03:
                    11:f9:35:fd:66:15:6f:56:b1:53:88:75:0b:05:79:
                    4f:b9:2a:46:9a:a6:39:53:d2:0d:e6:7d:ac:31:60:
                    5b:c9:37:75:af:ff:f4:d4:be:21:d2:e4:4d:fc:71:
                    d0:7c:02:2a:d5:66:ef:ce:2d:73:0e:fb:32:50:bb:
                    84:b6:60:aa:e2:98:3c:d0:45:53:08:05:0b:82:9f:
                    48:b7:76:d9:ed:86:bf:4e:68:85:25:18:c2:10:87:
                    03:b8:da:e2:2c:fa:3c:31:ff:be:59:b5:81:63:38:
                    02:21:cd:f2:b4:d3:6b:d2:b8:7d:35:2d:79:88:34:
                    61:70:cb:55:01:4e:38:60:15:f9:44:a2:2c:8c:f2:
                    d4:04:8e:2f:cd:2f:0d:16:d0:9a:a8:b5:b7:02:49:
                    d7:18:72:87:56:57:97:82:cf:84:e9:1e:5b:c3:40:
                    89:5e:61:e9:3b:0c:4f:f7:c0:70:91:3e:73:a0:ab:
                    a7:fd:2c:b0:33:d2:09:f5:c9:72:21:5a:4e:47:32:
                    d7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3F:A3:82:7E:AC:87:8D:1D:33:EE:F6:AB:BC:A7:88:7E:32:2C:51
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3131322e302f32342d3234203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:28:2e:02:7c:cb:fc:e8:98:a2:4a:54:3d:9a:76:b2:7a:c4:
         34:4c:37:73:8a:8e:2d:f1:fb:97:51:15:fd:d7:30:a7:99:fb:
         47:74:ff:c6:9b:e9:52:41:06:f3:15:ef:74:71:c5:68:ea:70:
         fa:c5:f0:66:96:0a:1d:52:bf:a5:ea:39:87:4b:0c:f9:b2:56:
         67:c7:dd:75:1b:2c:1e:fc:db:cc:68:5c:12:a2:24:67:ce:e9:
         96:f5:12:6c:af:bc:8e:3b:84:62:1f:19:dc:c6:8e:e2:09:a7:
         89:c4:6b:5f:f4:5e:43:f1:af:0f:00:6c:a0:e6:a0:4c:90:ba:
         5a:f3:61:77:9f:c2:4a:6d:7c:ca:61:93:d9:59:ec:dd:86:86:
         fd:75:e9:a5:53:95:8c:99:39:53:a2:0f:b2:23:b3:9d:0a:73:
         26:80:f4:e3:e4:da:68:98:11:77:2f:86:bc:bc:bb:92:cf:71:
         df:76:d3:8a:90:ad:2e:f6:a0:33:27:7a:09:73:7e:4a:fb:76:
         7a:b7:5a:c3:ad:00:d8:fd:54:f9:dd:1e:6d:82:b0:47:ae:ca:
         b3:93:86:7b:f4:1f:49:9a:3f:73:ff:3d:da:56:23:bc:cc:d7:
         8a:a9:d5:5f:51:26:25:0d:55:e7:ae:aa:ed:ef:16:93:21:74:
         6c:f0:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:24 2025 by rpki-client