Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133372e302f32342d3234203d3e20323732383832.roa
File:                     3134382e3232322e3133372e302f32342d3234203d3e20323732383832.roa (raw, json)
Hash identifier:          7x1EvpK0vSOcV3lry8M3dvYsNTC3Bq7VCB5epy0YS9Q=
Subject key identifier:   00:1B:6B:23:86:92:2C:FE:40:25:7F:8B:B2:33:E7:2A:8D:66:5A:47
Certificate issuer:       /CN=E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3
Certificate serial:       163CF9C30A00B39492D10926C25B397FA0589271
Authority key identifier: E1:DA:54:DE:44:60:5C:6B:48:DA:D8:F6:92:6D:71:AD:2B:BA:F8:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133372e302f32342d3234203d3e20323732383832.roa
Signing time:             Tue 07 Jan 2025 23:05:01 +0000
ROA not before:           Tue 07 Jan 2025 23:00:01 +0000
ROA not after:            Tue 06 Jan 2026 23:05:01 +0000
asID:                     272882
IP address blocks:        148.222.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3c:f9:c3:0a:00:b3:94:92:d1:09:26:c2:5b:39:7f:a0:58:92:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3
        Validity
            Not Before: Jan  7 23:00:01 2025 GMT
            Not After : Jan  6 23:05:01 2026 GMT
        Subject: CN=001B6B2386922CFE40257F8BB233E72A8D665A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:9d:fa:df:6f:a3:67:e3:8e:66:cc:6b:4f:
                    a8:8d:5e:8f:fb:06:28:9e:5b:10:a8:4d:8e:a8:27:
                    9a:cf:6d:d4:4f:2f:f4:cc:2e:48:40:64:7b:70:6f:
                    c9:fc:c6:31:b9:97:73:fa:be:5d:fd:2f:77:ad:39:
                    0d:d5:04:74:1c:45:be:66:b1:20:5c:39:3c:ad:8c:
                    80:31:bf:ae:fa:9b:8b:c6:c1:f7:b9:9f:bc:7a:3b:
                    7f:d1:6b:26:98:40:a7:79:9d:43:82:fe:0d:1a:e6:
                    a8:8d:5f:e6:f5:df:55:d8:ee:2e:83:71:d0:75:31:
                    30:c0:70:28:35:1c:fb:d8:36:cb:e7:0b:ea:f1:50:
                    7e:cd:81:7b:f0:a6:78:4f:5a:09:5f:9b:11:70:68:
                    96:f0:95:8b:50:14:31:61:18:85:5a:b8:f4:ca:16:
                    6a:f9:45:46:20:18:1f:ae:1a:09:62:01:a9:7f:25:
                    92:e0:15:ab:ee:c0:40:da:d4:a7:21:bd:05:61:d1:
                    50:94:66:f7:0f:11:09:52:23:e1:9b:e0:80:8d:de:
                    f3:b1:81:48:71:bd:e6:9c:28:87:7d:af:95:fc:b4:
                    35:fd:1b:5f:d1:ea:03:6c:19:63:9b:09:8a:0f:d1:
                    70:32:86:ec:33:9f:f5:91:e5:4a:af:d8:b8:b4:50:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1B:6B:23:86:92:2C:FE:40:25:7F:8B:B2:33:E7:2A:8D:66:5A:47
            X509v3 Authority Key Identifier:
                keyid:E1:DA:54:DE:44:60:5C:6B:48:DA:D8:F6:92:6D:71:AD:2B:BA:F8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1DA54DE44605C6B48DAD8F6926D71AD2BBAF8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27AB8D80C7EA697B279078E4FC1BF9B06B500440CEED2249A17E22839C706E27/0/3134382e3232322e3133372e302f32342d3234203d3e20323732383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:da:60:73:a8:23:59:51:d6:b3:5d:ef:e3:cc:4a:99:cb:
         f1:3d:db:c4:3d:89:9a:19:aa:d4:e9:7d:2d:af:cd:e0:c2:11:
         2c:8c:b4:bb:d4:5a:c1:d6:10:c2:83:f6:64:7d:a8:e4:92:c9:
         57:ca:2b:9d:d2:e8:a1:bc:85:37:cc:b8:7f:fb:ee:51:78:b8:
         ba:37:1b:91:22:a9:c6:88:08:fd:1e:07:8b:10:b2:64:53:f4:
         cd:12:85:7c:17:fd:9e:19:69:a5:01:0a:32:29:b8:10:31:42:
         71:1e:65:39:b5:3e:2a:38:ba:59:98:f3:be:34:a8:df:f1:a1:
         40:6b:c1:57:ae:5f:c9:87:37:51:07:5d:41:40:4e:05:df:3a:
         a9:76:ae:12:7c:62:50:60:65:29:74:3d:74:f1:d5:60:ce:d8:
         75:25:14:56:02:58:d6:01:06:62:45:ea:5f:a4:8f:d4:b2:f4:
         77:e5:10:a6:a5:23:5c:1f:f4:75:12:8a:de:02:3f:20:3f:76:
         8a:92:1a:aa:91:e8:2e:95:40:d2:2c:78:43:54:04:9a:5a:22:
         f9:16:0b:ec:50:e9:d8:1d:63:42:0e:dd:ef:9d:a7:65:53:10:
         a2:49:51:45:bd:70:cf:59:54:df:ea:44:85:d6:8e:2e:3d:53:
         5f:c6:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:37 2025 by rpki-client