Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e37362e302f32342d3234203d3e203232313232.roa
File:                     3134382e3230392e37362e302f32342d3234203d3e203232313232.roa (raw, json)
Hash identifier:          UD41tsIDEjLL02kNG792JhIS8sU3oJzuhywdHzFudvA=
Subject key identifier:   82:77:E8:50:CD:C2:43:E8:52:3D:EB:EE:F2:F1:09:9A:7C:1F:E4:0C
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       1BCF29CA4BC1FB7B295E28A2F4EE04ABFC4671A8
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e37362e302f32342d3234203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:39:00 +0000
ROA not before:           Tue 04 Feb 2025 18:34:00 +0000
ROA not after:            Tue 03 Feb 2026 18:39:00 +0000
asID:                     22122
IP address blocks:        148.209.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:cf:29:ca:4b:c1:fb:7b:29:5e:28:a2:f4:ee:04:ab:fc:46:71:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:34:00 2025 GMT
            Not After : Feb  3 18:39:00 2026 GMT
        Subject: CN=8277E850CDC243E8523DEBEEF2F1099A7C1FE40C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:07:a5:68:af:94:fe:3b:bb:56:fe:1f:f4:
                    6d:43:c6:8e:69:b0:2c:89:05:e6:1e:0f:1a:ad:da:
                    51:c2:7a:22:11:0b:40:b6:e9:ea:cc:6f:63:72:b5:
                    9b:a5:41:72:9d:77:3d:e1:1c:4c:47:bd:be:8d:4a:
                    ca:42:f8:2a:f8:d6:66:ed:ae:42:57:6d:01:d4:b6:
                    d6:2f:ca:d7:53:93:1d:bd:f0:9e:74:ca:03:0e:96:
                    af:0b:38:85:67:ec:56:c4:f5:3c:d2:b1:ef:5d:42:
                    e0:39:59:47:ec:cd:f5:9b:14:ea:cd:a5:81:6f:86:
                    b4:c7:f1:49:1e:67:49:8e:20:97:4a:09:25:8e:89:
                    8c:8e:bc:a0:52:68:bc:e5:dc:a1:69:0a:08:c5:da:
                    fd:9b:d5:13:f8:1e:0a:94:4d:f0:c4:0d:68:48:4d:
                    b3:34:36:bd:8b:b0:17:c3:ac:c5:f3:17:3c:51:3e:
                    0a:f9:11:53:17:0a:79:d9:f9:7b:59:19:b4:34:93:
                    e0:7f:f2:ed:cc:46:d1:39:2c:f5:a3:0e:3a:ee:66:
                    64:28:2c:a5:16:52:92:0e:4e:02:71:aa:b1:9a:37:
                    2c:96:30:cb:ad:b2:3c:bc:53:2f:2d:cd:b2:6c:13:
                    47:51:e5:18:28:c9:31:b8:7e:72:95:1e:7f:bd:6e:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:77:E8:50:CD:C2:43:E8:52:3D:EB:EE:F2:F1:09:9A:7C:1F:E4:0C
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e37362e302f32342d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:ed:3e:be:e0:3a:60:ad:23:18:68:3f:cb:b8:53:c9:38:53:
         f0:1f:de:e2:67:76:50:4b:1b:34:7b:ba:81:7c:39:cd:55:7b:
         86:96:42:d6:f8:4a:1a:11:ff:23:f2:7b:eb:0f:0f:fb:bd:66:
         a3:f7:b9:58:86:9b:4f:27:66:ba:84:89:72:78:91:a5:46:c7:
         86:07:b6:ce:14:69:70:8f:c4:66:38:1a:24:d2:52:c5:60:2b:
         70:fd:51:10:c1:be:0f:d0:23:88:72:e2:6e:02:3e:ed:8a:38:
         45:f7:75:c9:25:48:aa:95:a4:12:e8:9e:57:4d:94:79:38:1b:
         b9:b2:7d:d6:af:92:d8:06:20:47:b1:45:34:9c:a1:8a:7b:df:
         07:c8:a9:05:8a:48:a0:36:1c:0c:2b:17:ae:75:7d:52:03:6a:
         99:a9:99:90:8a:17:92:09:1d:2f:28:18:d6:c8:d9:f9:4f:1d:
         86:d4:8a:da:ff:5c:34:30:c1:15:13:79:6c:2f:e1:59:bf:bc:
         cc:1f:2e:5b:f2:e5:73:9a:f3:39:e4:82:33:9e:b8:78:24:55:
         0e:06:f9:f1:07:84:01:3b:16:8c:55:15:fe:f9:7a:93:63:af:
         8e:e1:29:0d:14:74:9a:9c:d4:90:dc:2c:0a:ea:26:88:35:15:
         b8:04:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:20 2025 by rpki-client