Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133302e302f32332d3234203d3e203232313232.roa
File:                     3134382e3230392e3133302e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier:          SiagUdDYgowZmWfj8awGuxinNLMJ2Vf29Qj5CXb0egU=
Subject key identifier:   D4:57:73:8C:54:7B:F0:AF:FB:FE:BF:C0:95:39:77:02:5D:10:C8:3B
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       739A4D174354274404BB22E26F697E89E7D0B26E
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133302e302f32332d3234203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:39:00 +0000
ROA not before:           Tue 04 Feb 2025 18:34:00 +0000
ROA not after:            Tue 03 Feb 2026 18:39:00 +0000
asID:                     22122
IP address blocks:        148.209.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9a:4d:17:43:54:27:44:04:bb:22:e2:6f:69:7e:89:e7:d0:b2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:34:00 2025 GMT
            Not After : Feb  3 18:39:00 2026 GMT
        Subject: CN=D457738C547BF0AFFBFEBFC0953977025D10C83B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:61:ef:98:4a:46:fe:bc:eb:39:32:03:03:2e:
                    9f:96:d4:93:06:cb:50:cd:84:82:0d:99:4b:e7:3f:
                    ae:86:ce:63:6a:3c:b3:cd:09:54:05:d9:9b:38:a5:
                    96:9d:2b:63:2b:67:bc:ee:15:03:eb:44:ee:a4:66:
                    0f:90:f6:69:60:3d:ba:3a:7a:ad:df:09:3b:30:66:
                    ed:a8:24:a4:ae:ac:40:73:31:3b:a5:b8:84:e4:61:
                    90:fe:26:c1:b5:b7:95:20:c5:8b:85:ce:8d:79:3d:
                    10:7b:41:f8:c3:40:43:db:86:c3:94:ed:2c:4d:c6:
                    ad:cc:e9:01:66:9f:6e:4e:f5:d0:26:4e:1e:68:ff:
                    61:5a:a9:27:ca:85:13:e0:20:2c:f6:c1:7f:23:8d:
                    32:4f:f0:93:9f:ef:ed:d7:36:33:4f:6a:2f:d8:84:
                    b6:eb:98:81:c1:2c:d5:04:60:57:cf:27:47:de:65:
                    c9:78:90:5e:bd:d4:21:14:42:04:6e:c9:56:c6:b6:
                    a4:de:42:9a:62:f0:7d:3b:3b:66:ea:18:6a:fc:ba:
                    92:9e:1f:43:da:c0:05:1d:aa:ef:3e:5e:8f:4d:e4:
                    31:35:84:76:57:06:3f:6a:82:d9:0f:53:f5:8e:25:
                    6a:35:e3:73:89:d0:65:c0:11:75:e2:c6:5c:5d:2e:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:57:73:8C:54:7B:F0:AF:FB:FE:BF:C0:95:39:77:02:5D:10:C8:3B
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e3133302e302f32332d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:21:26:7d:b3:31:d5:24:93:1e:7a:38:94:96:76:08:76:3f:
         18:17:01:05:13:c2:47:25:53:4f:d7:31:9c:ec:0e:05:61:f2:
         f0:24:a9:08:bf:69:a0:59:70:91:4e:22:4f:15:54:24:3e:c8:
         0b:20:b7:f8:be:4c:0b:bf:e3:bc:66:9b:c0:da:48:da:b2:b6:
         d4:15:88:c4:8a:c1:2f:ae:ff:67:ae:3c:17:20:6b:77:a6:4d:
         0b:77:4e:c9:ad:89:29:84:87:c0:af:f9:8a:38:d3:02:7d:8d:
         4f:c4:99:e9:55:ab:8f:99:82:57:7f:cd:01:bb:04:34:fa:8f:
         b5:1c:0e:08:94:df:ee:e8:f6:c3:1b:f6:9f:19:41:b4:41:b1:
         4a:22:69:32:be:35:b3:e0:27:6e:3b:b6:92:25:ee:27:90:e2:
         5e:56:4f:40:f0:77:aa:40:55:e1:3b:00:f2:e2:2a:8e:83:f6:
         f9:84:5f:3d:1d:5e:e2:68:15:0d:65:48:51:0f:ea:ee:db:77:
         82:cc:64:bb:a2:9e:76:8c:12:3d:3e:91:d7:c5:b4:a4:89:69:
         60:7f:99:d4:e4:b1:81:0d:bb:e6:db:59:b0:5a:2f:13:b8:1b:
         5e:6f:a3:a8:76:f8:1e:e2:4f:47:3e:2d:d2:6a:d3:67:51:78:
         c1:be:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:25 2025 by rpki-client