Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133362e302f32322d3232203d3e20323732383832.roa
File:                     3134382e3232322e3133362e302f32322d3232203d3e20323732383832.roa (raw, json)
Hash identifier:          k2Dlz4j6ldoIF7i/oYRIYmPVKub2ksJJptZoJVXcgxw=
Subject key identifier:   03:14:73:83:E9:10:26:FB:C4:33:1B:60:C9:B8:2E:AC:0E:3C:55:97
Certificate issuer:       /CN=E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3
Certificate serial:       63CD35F571C7A14A98984D5DB6F1CE137FD98B1D
Authority key identifier: E1:DA:54:DE:44:60:5C:6B:48:DA:D8:F6:92:6D:71:AD:2B:BA:F8:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133362e302f32322d3232203d3e20323732383832.roa
Signing time:             Tue 07 Jan 2025 23:05:00 +0000
ROA not before:           Tue 07 Jan 2025 23:00:00 +0000
ROA not after:            Tue 06 Jan 2026 23:05:00 +0000
asID:                     272882
IP address blocks:        148.222.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cd:35:f5:71:c7:a1:4a:98:98:4d:5d:b6:f1:ce:13:7f:d9:8b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3
        Validity
            Not Before: Jan  7 23:00:00 2025 GMT
            Not After : Jan  6 23:05:00 2026 GMT
        Subject: CN=03147383E91026FBC4331B60C9B82EAC0E3C5597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:a3:ee:86:bd:07:8d:50:98:82:95:42:f7:
                    99:42:5a:09:e8:e2:0a:5b:d1:7e:c3:6a:a9:33:4a:
                    f8:59:4c:c5:e7:57:a5:6c:4c:02:21:25:f6:fd:62:
                    cd:50:3e:6c:10:50:cd:a7:9a:8a:a4:f2:5e:6a:f4:
                    61:0f:dd:7d:9d:8c:94:61:01:63:19:01:53:ea:52:
                    fe:9f:f5:07:2d:b4:f2:8d:6f:d1:74:6e:3c:8c:c8:
                    5a:75:15:e0:d3:83:60:9a:c9:09:1f:38:68:02:77:
                    31:0d:41:01:28:51:f0:95:8d:34:f0:79:98:01:85:
                    dc:d1:10:3f:cc:31:4a:35:7c:38:24:61:ce:a2:70:
                    84:88:55:c5:11:c7:71:a0:8f:44:1c:3c:12:de:13:
                    1d:ad:03:24:f2:ae:88:b7:df:12:09:50:28:4d:90:
                    90:62:93:3a:01:0b:ac:12:7f:cb:01:c8:6c:c0:77:
                    37:c7:68:98:6e:ae:50:b9:48:9b:30:06:c0:a7:4e:
                    13:98:ac:99:a5:db:0a:5a:88:b3:9e:e8:1a:98:1e:
                    c2:c7:ac:c5:ce:aa:c3:ee:18:a5:f6:cf:b4:e2:a0:
                    96:08:4b:66:3b:9b:d0:be:4c:77:09:44:47:fe:89:
                    d4:a7:67:7a:b6:d7:0a:74:56:92:0d:fb:23:00:95:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:14:73:83:E9:10:26:FB:C4:33:1B:60:C9:B8:2E:AC:0E:3C:55:97
            X509v3 Authority Key Identifier:
                keyid:E1:DA:54:DE:44:60:5C:6B:48:DA:D8:F6:92:6D:71:AD:2B:BA:F8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133362e302f32322d3232203d3e20323732383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:bf:3a:2c:e8:13:42:1b:44:6c:1e:ff:82:75:6a:9e:c4:9b:
         8f:12:b2:0c:29:de:ad:e5:93:0a:14:44:ba:5c:71:e2:a2:45:
         27:d6:40:ef:11:97:36:7d:87:d1:9b:42:9a:ee:38:25:d1:e0:
         d1:4b:ac:a9:ad:83:84:cc:da:d6:df:50:72:ec:c8:7e:f9:36:
         95:8e:e5:25:ed:ce:28:b4:9e:c5:90:67:43:cc:5d:93:33:bb:
         6d:06:1e:4a:3f:6d:a1:f5:3e:89:c7:59:c9:80:34:aa:a5:6e:
         24:6e:ff:4a:f7:9f:9d:05:75:10:38:65:b6:65:45:38:c4:da:
         35:0e:69:35:8b:8f:76:26:49:f0:e8:ca:23:b6:d9:69:44:a8:
         81:fa:c2:b2:35:6c:72:46:8b:9c:98:18:ac:95:f2:ef:36:f8:
         34:45:57:04:73:09:58:a2:c2:11:f0:85:23:70:98:e9:60:ff:
         83:bd:8d:5a:12:ee:e8:65:17:06:c2:78:d4:c4:46:52:89:15:
         90:29:ce:9a:0a:08:21:8f:a8:84:71:f4:64:bb:2d:94:70:d3:
         75:a0:2a:34:c9:ff:db:a9:bc:50:6b:76:1d:89:42:28:2e:07:
         91:d6:ce:5f:e2:c6:93:43:6b:c2:57:0c:1a:ab:4c:a4:61:e6:
         ba:c9:24:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:19 2025 by rpki-client