Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3131312e302f32342d3234203d3e203232313232.roa
File:                     3134382e3230392e3131312e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier:          lPmZqT4/+7mNal0z4yu8mfjaECpSmfRVcKkJtcFKowo=
Subject key identifier:   93:47:01:78:95:DF:09:6F:0D:96:87:2B:47:61:D5:B0:11:42:A2:DD
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       6923D01FC2F7E65BEE9B977F2546C93718A600AD
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3131312e302f32342d3234203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:38:55 +0000
ROA not before:           Tue 04 Feb 2025 18:33:55 +0000
ROA not after:            Tue 03 Feb 2026 18:38:55 +0000
asID:                     22122
IP address blocks:        148.209.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:23:d0:1f:c2:f7:e6:5b:ee:9b:97:7f:25:46:c9:37:18:a6:00:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:33:55 2025 GMT
            Not After : Feb  3 18:38:55 2026 GMT
        Subject: CN=9347017895DF096F0D96872B4761D5B01142A2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:38:44:3c:7c:ae:ed:f7:8b:52:59:1c:52:
                    ec:a0:44:3c:88:a7:ab:de:13:1b:0d:42:0f:51:3a:
                    22:cb:f7:33:6a:2e:56:d5:4f:7f:63:b9:dd:1e:f2:
                    4f:37:a9:e3:7c:a7:4e:e7:21:d2:e1:42:ef:7a:9c:
                    a7:02:1a:87:a2:4c:5a:53:3c:2f:2a:b0:c0:e9:b7:
                    69:cb:b0:6e:c7:43:43:6f:77:66:28:4f:20:60:49:
                    2b:e2:1f:9d:13:ee:e9:b3:01:a1:92:3c:d9:e7:6e:
                    06:ae:f9:fb:db:b8:98:cc:29:81:c4:e4:08:7c:d1:
                    b2:3d:74:2a:76:5b:c9:c7:63:73:18:09:11:76:9d:
                    97:56:fc:7a:e6:c8:10:43:4e:6e:be:27:46:81:0d:
                    af:bc:43:63:f6:93:3d:b9:5f:1f:30:81:cc:71:73:
                    0e:c1:08:53:5d:c6:38:6a:53:a4:d6:e3:05:80:af:
                    ec:a8:1f:93:21:55:2a:bd:d5:24:b1:1d:e3:eb:df:
                    64:f2:5f:e1:ba:0f:96:51:52:84:3c:30:f2:92:fe:
                    7d:45:67:32:15:30:a3:b6:32:e8:8e:12:a0:2e:ea:
                    6b:b6:4d:3d:0c:e0:e3:d5:cb:cb:14:2a:92:4e:2c:
                    49:6e:59:0b:a3:55:8e:d5:47:06:27:6b:37:d7:f2:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:47:01:78:95:DF:09:6F:0D:96:87:2B:47:61:D5:B0:11:42:A2:DD
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3131312e302f32342d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:42:f7:bc:96:aa:d9:a1:8e:45:b8:ab:ec:5b:30:f4:80:48:
         b3:05:8e:07:27:af:5a:d9:68:2e:c2:b0:2a:5c:67:3e:0e:47:
         1e:e5:ca:3b:17:d7:e2:31:97:ac:23:88:ea:00:0b:eb:67:3b:
         2a:a2:7e:83:3f:64:86:b0:31:4c:4f:4c:c8:08:5d:d7:58:8b:
         d1:4e:e5:10:46:75:76:1a:1a:bd:12:80:b2:81:33:8c:cb:6c:
         60:65:f0:3d:c4:89:98:a8:70:fb:ed:e6:b2:69:27:92:ca:bf:
         42:8d:07:0b:97:46:c1:03:96:27:03:1d:1f:85:f0:93:d4:c0:
         72:d7:8d:b9:1f:3c:2f:0c:ea:90:93:6c:8d:3e:09:a9:55:2b:
         9c:62:28:50:fa:e3:2d:4f:ac:9a:38:98:b2:99:65:fc:31:0d:
         f9:b1:70:ac:12:7c:e3:e0:f6:16:8c:72:23:8f:97:f9:37:90:
         8a:f9:ca:8c:11:a1:14:73:de:0b:6c:8a:86:15:84:6c:4d:2f:
         fc:a9:c4:e8:7b:e7:dd:63:51:2c:6d:0d:5c:9f:e9:62:79:ef:
         f7:7c:d4:48:a5:7a:50:8d:43:d4:72:4c:15:c1:f7:12:46:61:
         08:6e:9e:0e:34:53:95:ee:66:8d:60:89:d8:73:cd:75:6f:26:
         5b:be:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:51 2025 by rpki-client