Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e36322e302f32332d3234203d3e203232313232.roa
File:                     3134382e3230392e36322e302f32332d3234203d3e203232313232.roa (raw, json)
Hash identifier:          5hZjKnS7RqbIi/PzdeA9EyBC+PxTGYZKBzFj5iC/6wM=
Subject key identifier:   B7:82:84:BD:A6:6E:BB:4C:F5:53:36:BB:51:55:C1:E0:07:D8:A9:4F
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       06E58631BFDB594999055BB7590A98E28BF90BEA
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e36322e302f32332d3234203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:38:52 +0000
ROA not before:           Tue 04 Feb 2025 18:33:52 +0000
ROA not after:            Tue 03 Feb 2026 18:38:52 +0000
asID:                     22122
IP address blocks:        148.209.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e5:86:31:bf:db:59:49:99:05:5b:b7:59:0a:98:e2:8b:f9:0b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:33:52 2025 GMT
            Not After : Feb  3 18:38:52 2026 GMT
        Subject: CN=B78284BDA66EBB4CF55336BB5155C1E007D8A94F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:50:2a:5a:65:68:54:76:de:49:c8:d3:76:
                    1a:99:02:e3:62:cf:ff:98:bb:f8:e6:9c:aa:60:43:
                    f8:45:9c:66:37:37:47:2b:3c:9a:45:f8:7d:4a:61:
                    28:0d:f2:42:73:38:ad:79:bf:f2:aa:53:3c:60:2b:
                    bc:8a:2f:96:3e:53:fd:39:5e:fd:83:a9:26:ed:c3:
                    3f:a3:92:3b:67:5e:91:28:86:a7:de:67:9c:e5:93:
                    3b:92:af:48:5b:b8:e6:2e:5f:81:71:09:d1:33:5a:
                    27:24:2b:48:54:91:46:da:00:37:01:b0:27:4f:4b:
                    de:d4:2f:33:89:05:ea:eb:d0:26:af:53:90:fa:1d:
                    a8:4c:b7:a9:ae:bf:9f:61:81:0c:14:23:a0:86:ed:
                    fd:d8:62:a8:c7:c7:d7:ec:c2:44:44:71:e8:14:b5:
                    72:59:77:1b:3c:59:e3:6c:06:0b:6b:4d:5f:7d:a9:
                    5e:74:74:e3:60:99:41:ca:74:9b:2c:ce:a5:48:ff:
                    17:5b:46:82:24:83:c2:46:97:7e:3a:19:67:24:65:
                    11:3c:23:29:90:52:b9:6f:14:bc:cc:8a:43:49:f4:
                    ac:fc:10:f6:f5:d5:bf:e8:e7:f3:49:e1:29:8a:f8:
                    5d:ad:d1:58:9c:20:cf:f3:08:7e:80:7b:5f:90:48:
                    68:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:82:84:BD:A6:6E:BB:4C:F5:53:36:BB:51:55:C1:E0:07:D8:A9:4F
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e36322e302f32332d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:8a:31:1f:8f:e5:75:c0:2d:6a:d2:f1:8c:2d:a8:37:55:a5:
         5e:ba:e2:d4:df:2e:19:90:94:83:b1:96:d6:63:d5:05:fc:c2:
         d9:16:93:32:07:e0:26:5f:9c:95:a1:d8:34:94:b9:c6:81:6b:
         c3:f6:1c:5d:2d:3b:e1:6b:af:7a:0f:28:7f:ef:a6:dc:ad:85:
         be:7f:4a:90:25:45:82:cb:9b:4f:66:fc:79:00:27:75:24:5d:
         f3:3d:5a:e7:9d:8b:cd:28:10:0d:dd:59:e5:cb:ae:fb:d8:83:
         78:6c:ec:2a:e4:64:57:da:7d:79:82:ed:cc:d7:52:62:33:8d:
         a4:ac:85:56:a3:a5:e0:6b:e2:ed:17:69:b4:29:e7:17:30:e2:
         2f:6c:54:ae:af:a8:7d:63:4a:8b:84:31:cc:4d:9b:f8:4d:80:
         46:87:7b:8f:35:be:da:93:23:4f:6e:19:b5:a6:35:47:ea:ed:
         eb:29:ae:e4:11:b9:3d:f0:7d:c6:b4:f7:b8:9b:5b:79:c6:ff:
         25:ca:70:11:47:8c:38:70:0a:9b:6e:6d:7b:2f:58:bb:5a:88:
         d8:d6:e4:68:76:d8:bf:77:9f:91:e5:d2:14:89:88:a3:79:67:
         c1:aa:de:06:be:b2:10:0b:d4:58:b8:b0:f1:1a:5b:ca:86:55:
         02:91:d4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:37 2025 by rpki-client