Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136332e302f32342d3234203d3e20323730313439.roa
File:                     3134382e3230382e3136332e302f32342d3234203d3e20323730313439.roa (raw, json)
Hash identifier:          o4xkXbopWmZNmrZGn1L5d2S8F0SJcAO9Y9WHrx1bjEk=
Subject key identifier:   CB:81:62:B0:FD:B5:5E:A0:84:4D:44:27:A7:8A:73:A7:C8:64:79:CF
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       305C548C86AEB604357E26FF42349F82A7EDA6AD
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136332e302f32342d3234203d3e20323730313439.roa
Signing time:             Mon 24 Feb 2025 17:10:59 +0000
ROA not before:           Mon 24 Feb 2025 17:05:59 +0000
ROA not after:            Mon 23 Feb 2026 17:10:59 +0000
asID:                     270149
IP address blocks:        148.208.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5c:54:8c:86:ae:b6:04:35:7e:26:ff:42:34:9f:82:a7:ed:a6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Feb 24 17:05:59 2025 GMT
            Not After : Feb 23 17:10:59 2026 GMT
        Subject: CN=CB8162B0FDB55EA0844D4427A78A73A7C86479CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:7e:35:7c:33:a1:f5:11:e3:09:68:c3:a3:
                    fe:38:ee:17:c4:2d:93:f8:b2:85:71:60:af:96:f7:
                    bb:5b:b0:f7:e6:e2:d2:5a:e7:56:68:07:79:d6:fb:
                    5f:db:83:7e:92:c6:83:66:3d:82:a9:65:7a:44:52:
                    3a:6a:42:36:5c:03:53:a2:22:41:37:5e:25:8b:8e:
                    2e:e3:db:be:a8:29:58:21:88:f2:48:41:66:95:97:
                    36:e2:44:1a:8e:4e:0e:36:bb:8d:99:4d:47:fe:75:
                    34:d9:c0:89:8d:75:05:2c:78:2d:af:3e:f7:26:65:
                    c2:b0:0d:dd:3e:1d:ed:a0:b4:bf:4d:46:51:8e:32:
                    e8:39:2c:59:eb:6b:e8:3c:4b:71:39:26:43:90:64:
                    b3:b1:54:a2:75:af:59:e9:5d:c0:dc:ed:7d:e2:d6:
                    df:eb:f2:b7:92:4e:ef:a1:46:dc:a8:18:4e:d4:00:
                    fd:f7:a6:b2:0d:8c:e4:a9:9a:bc:32:da:f3:e1:31:
                    66:9c:ce:1d:2c:a1:62:11:a6:8f:a1:46:d9:25:12:
                    7e:b5:5f:f8:91:e4:19:0e:df:17:d1:ac:11:04:18:
                    32:d3:09:e3:92:cd:5b:81:b1:8e:47:59:da:bb:77:
                    f3:12:59:ea:3f:6c:eb:f9:7e:61:99:92:38:b0:bd:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:81:62:B0:FD:B5:5E:A0:84:4D:44:27:A7:8A:73:A7:C8:64:79:CF
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3136332e302f32342d3234203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:2c:33:34:66:b3:53:9d:7a:f3:85:fe:c1:49:3b:de:bf:06:
         66:43:60:25:32:5b:24:35:ed:93:c3:4f:7b:6e:bc:61:be:49:
         eb:45:d9:61:c9:5d:b1:e8:a7:e0:ea:a6:97:43:35:c4:fc:52:
         45:63:15:99:ae:6d:5c:13:f9:dd:bb:89:96:79:01:2c:c4:dd:
         25:b0:f5:f4:31:e4:02:52:e8:e8:dd:b6:eb:e9:78:de:5f:47:
         84:cd:91:3a:e7:27:6a:44:63:c3:a4:23:84:e2:02:ec:94:5f:
         5d:c8:31:2b:db:de:88:3b:c0:ce:37:90:9e:0a:23:6a:63:0b:
         71:90:d5:6a:e1:25:a6:97:b7:6c:a1:20:3f:51:c4:e8:ff:df:
         ec:a7:20:47:d2:ab:f1:07:38:32:74:1e:be:24:47:7b:72:05:
         6c:6b:a7:5f:9a:be:3a:22:a6:32:ba:10:82:b0:8c:b6:8f:33:
         00:ed:ec:62:cf:35:6a:c7:f4:24:3c:2d:3f:d7:61:f2:07:d8:
         dc:d3:4b:3a:6f:17:c2:58:c6:46:b8:97:9d:9f:89:6a:9d:4e:
         e4:9f:47:60:c6:46:20:b7:c3:9f:7a:49:be:cc:9c:c9:22:5f:
         6d:21:5d:56:a8:58:0c:67:93:3e:42:75:a2:56:9b:04:4b:09:
         04:45:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:26 2025 by rpki-client