Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e31352e302f32342d3234203d3e203232313232.roa
File:                     3134382e3230392e31352e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier:          Z0AIpMlkwNWU9YpfEGPAbFUTAQBn+uZV9wZghpcXMK8=
Subject key identifier:   B4:10:2D:57:0E:56:1C:F9:D4:50:3F:DD:E2:C5:34:16:8B:E6:5A:1E
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       420169E9845A3E38A84A10F23F5E30BD5820BB33
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e31352e302f32342d3234203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:38:47 +0000
ROA not before:           Tue 04 Feb 2025 18:33:47 +0000
ROA not after:            Tue 03 Feb 2026 18:38:47 +0000
asID:                     22122
IP address blocks:        148.209.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:01:69:e9:84:5a:3e:38:a8:4a:10:f2:3f:5e:30:bd:58:20:bb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:33:47 2025 GMT
            Not After : Feb  3 18:38:47 2026 GMT
        Subject: CN=B4102D570E561CF9D4503FDDE2C534168BE65A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:24:da:ab:c5:69:bf:b1:5c:d0:a0:57:f7:
                    9f:12:6b:a9:62:ce:5e:1a:e5:69:3e:4b:51:4d:3f:
                    57:54:6e:a1:09:7a:a5:a1:2e:35:b7:d4:11:ba:81:
                    03:e8:ba:e8:c2:50:ce:b1:31:8e:69:55:08:01:46:
                    7a:ca:db:ae:a8:99:17:58:fa:99:5c:c2:9f:6e:2a:
                    84:11:cb:53:86:10:7a:fe:63:6f:b1:04:65:5d:5f:
                    0b:a6:f1:7f:33:bb:e5:c7:ea:fb:6d:4a:8f:19:c4:
                    39:7f:a8:ce:63:3b:b2:1b:ac:f6:9c:eb:19:5e:76:
                    ca:dc:3e:bc:c7:2c:66:63:91:57:db:db:95:f8:71:
                    5f:95:37:2c:eb:d4:26:96:f4:cd:3d:0d:0d:bd:ae:
                    3b:2b:a4:f9:14:6c:35:36:3c:d7:ca:17:38:29:92:
                    56:8e:54:ed:24:d9:d6:5f:c4:c4:06:3e:5a:3f:ae:
                    d5:90:2e:2b:4f:75:cd:d9:f7:60:f7:79:0a:4c:2a:
                    6e:9d:bd:6f:3a:da:d4:5b:79:14:c3:fd:c0:1e:9b:
                    f3:ba:d0:cb:21:d0:30:7c:43:ce:bb:96:d6:2c:9a:
                    e2:df:cc:cd:2f:0e:f9:b7:36:ab:8e:0a:75:63:c7:
                    89:6b:20:a9:54:ca:3b:c7:01:03:89:15:fe:bd:9a:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:10:2D:57:0E:56:1C:F9:D4:50:3F:DD:E2:C5:34:16:8B:E6:5A:1E
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e31352e302f32342d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ac:39:29:ac:3a:78:10:a8:fd:83:ae:e7:f5:78:11:eb:37:
         3d:22:73:c5:63:2c:45:21:74:a6:98:08:a4:5e:58:3a:ec:76:
         17:ba:31:8a:4a:7e:86:06:e9:e7:e9:92:53:ad:88:a7:30:96:
         60:e4:44:5a:1b:d3:c4:f8:e2:cd:4a:43:4a:2e:ed:73:c1:c1:
         95:2a:40:11:a7:e0:a5:d7:95:f4:84:c9:f0:c9:e2:c8:df:06:
         f5:78:10:af:c1:94:8e:c3:af:fd:73:92:8a:d2:4f:1c:e0:b6:
         fc:f3:0b:94:3d:6a:31:3d:3e:c5:f9:ac:a4:21:6b:db:f1:5e:
         29:d6:bd:58:6d:82:9d:0e:62:e3:a5:8a:95:51:1f:fc:60:6c:
         5c:0e:56:51:33:1b:e6:d1:49:15:d5:82:21:6d:50:ea:a8:1f:
         a0:32:11:ee:a6:a7:7e:dd:11:d1:ee:ed:33:d1:c0:cc:65:0f:
         27:3a:26:1d:a6:81:d1:71:7e:90:41:f8:dd:48:d0:59:f1:b6:
         55:79:e5:80:25:aa:cb:90:d7:a9:70:31:35:d0:04:b6:82:5e:
         79:7b:1e:18:27:7e:95:43:c3:25:5c:89:c6:1c:9f:f6:b3:78:
         8b:d0:94:b9:68:e5:3b:9d:2c:cb:d4:4d:4b:47:39:d8:d7:e2:
         e2:f9:93:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:47 2025 by rpki-client