Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/3134382e3231342e302e302f31362d3234203d3e2032373038.roa
File:                     3134382e3231342e302e302f31362d3234203d3e2032373038.roa (raw, json)
Hash identifier:          XQiUkKBu6wXM+gexa9UmCy1etG815t2gAgit917BbhY=
Subject key identifier:   B3:4E:B3:3C:EA:86:77:1A:EE:D8:6C:DA:74:4B:E4:43:57:DA:A6:E2
Certificate issuer:       /CN=217EAB37EEC2C460E29FF931AF05B634C82792CF
Certificate serial:       67CB8363C9B80590A20CBA6BF16ABAE0888E3DA2
Authority key identifier: 21:7E:AB:37:EE:C2:C4:60:E2:9F:F9:31:AF:05:B6:34:C8:27:92:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/3134382e3231342e302e302f31362d3234203d3e2032373038.roa
Signing time:             Tue 04 Feb 2025 19:59:34 +0000
ROA not before:           Tue 04 Feb 2025 19:54:34 +0000
ROA not after:            Tue 03 Feb 2026 19:59:34 +0000
asID:                     2708
IP address blocks:        148.214.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 21:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:cb:83:63:c9:b8:05:90:a2:0c:ba:6b:f1:6a:ba:e0:88:8e:3d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217EAB37EEC2C460E29FF931AF05B634C82792CF
        Validity
            Not Before: Feb  4 19:54:34 2025 GMT
            Not After : Feb  3 19:59:34 2026 GMT
        Subject: CN=B34EB33CEA86771AEED86CDA744BE44357DAA6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:ae:d2:e8:52:42:d6:7a:60:9a:52:d3:82:
                    3e:66:b9:fc:c1:28:9d:96:b3:fd:88:dd:d2:e0:00:
                    d4:30:bb:79:5b:62:8f:33:23:1d:89:46:8f:a7:99:
                    a1:f2:b1:4d:54:ff:8a:af:94:2c:c8:7e:33:ce:10:
                    58:ff:80:9d:5a:60:40:06:39:78:19:47:93:87:e9:
                    bc:4a:b0:90:d0:5c:5f:2f:9a:fc:c6:ee:78:b5:0b:
                    36:7b:d8:fe:9f:f1:58:b9:30:46:9d:c8:c1:a4:94:
                    05:6d:3d:e4:23:5c:74:28:72:1a:ca:55:d9:16:d2:
                    32:c0:0f:bf:9b:65:ff:2f:ec:f2:58:f1:e6:57:21:
                    93:90:4b:22:b7:f2:a6:f8:44:dd:8b:26:f0:a5:79:
                    aa:06:6d:a1:f2:e2:89:9b:72:9c:9f:fe:0c:6c:5f:
                    da:ea:15:85:41:48:f2:cf:81:da:74:7f:f2:42:d7:
                    7f:05:b8:c6:d0:1a:39:d6:bb:97:b5:9c:9d:05:e9:
                    fa:9e:a5:fd:a4:9f:d3:35:a6:f0:47:79:39:bd:3e:
                    e1:69:d9:d7:f2:4b:e9:bd:1d:de:ed:27:e1:e0:b6:
                    a8:ac:2b:21:50:3b:c1:e3:30:db:54:e3:5a:39:92:
                    e8:fa:c6:d1:a9:0a:cd:0c:9a:dd:37:2c:e1:de:53:
                    6b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4E:B3:3C:EA:86:77:1A:EE:D8:6C:DA:74:4B:E4:43:57:DA:A6:E2
            X509v3 Authority Key Identifier:
                keyid:21:7E:AB:37:EE:C2:C4:60:E2:9F:F9:31:AF:05:B6:34:C8:27:92:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/217EAB37EEC2C460E29FF931AF05B634C82792CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34717F05133BDBAF157A2D88A1831560DA2390FADFA1F46F3C42F979B3A6BD7A/0/3134382e3231342e302e302f31362d3234203d3e2032373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:1c:46:3c:82:27:8d:72:42:0f:e7:c1:46:bc:77:28:0c:aa:
         0e:19:00:c6:ef:ed:c8:c8:dc:dc:d2:83:67:6a:58:b0:40:13:
         72:f2:72:93:20:9f:04:43:4b:d8:fe:b3:ca:a2:4c:0e:23:c3:
         23:b5:60:66:24:41:50:f3:dd:98:06:a9:f8:ea:b9:33:67:b9:
         79:77:f9:3f:b3:04:95:99:aa:2d:22:5b:4c:29:96:19:66:94:
         37:36:4e:a8:1c:1d:7d:dd:29:48:33:78:1f:8b:1b:df:9c:bd:
         3c:55:fb:d4:e5:88:af:53:7d:44:e7:29:13:d2:8c:ff:08:38:
         db:15:27:09:92:b3:ed:e5:9f:67:0f:a6:6e:d0:ae:5f:10:98:
         c7:0c:71:c8:14:90:45:38:99:84:4e:30:bb:35:a9:44:f2:15:
         1c:98:8c:85:40:99:52:2f:52:b1:20:cf:62:d6:28:6c:4c:1b:
         d6:53:08:e1:9d:49:b6:06:5a:bd:96:fa:a1:f9:34:17:28:92:
         d4:93:6f:71:28:d0:9d:da:a9:49:f1:f3:10:d6:26:88:8d:60:
         1d:42:10:cd:a5:5b:4b:40:d8:18:25:c2:a9:ba:f9:e7:df:d4:
         38:0a:1a:f0:6b:7a:df:bf:eb:91:91:16:63:17:59:55:51:e1:
         7d:45:31:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:09:03 2025 by rpki-client