Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e39322e302f32322d3234203d3e203232313232.roa
File:                     3134382e3230392e39322e302f32322d3234203d3e203232313232.roa (raw, json)
Hash identifier:          WdyJQYObb49JAZ2Hr9g6IU6nbFK564NjeaBcqMCmGeE=
Subject key identifier:   DE:6F:A8:EC:D6:08:64:0C:2E:CE:A2:AC:83:0A:09:07:D8:CD:90:68
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       5B06D302DAF17589E8F023EC81886BB5071385EB
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e39322e302f32322d3234203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:39:01 +0000
ROA not before:           Tue 04 Feb 2025 18:34:01 +0000
ROA not after:            Tue 03 Feb 2026 18:39:01 +0000
asID:                     22122
IP address blocks:        148.209.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:06:d3:02:da:f1:75:89:e8:f0:23:ec:81:88:6b:b5:07:13:85:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:34:01 2025 GMT
            Not After : Feb  3 18:39:01 2026 GMT
        Subject: CN=DE6FA8ECD608640C2ECEA2AC830A0907D8CD9068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:7b:b2:a2:cb:f4:8b:f7:5b:9f:20:cf:87:
                    4b:5f:aa:b5:57:32:4a:32:fd:75:00:43:60:c0:93:
                    35:91:05:04:3d:11:b7:50:f5:cc:b2:d3:f5:ed:e3:
                    a5:2a:27:ec:d8:51:59:b1:81:90:48:9e:19:c7:41:
                    4c:8d:9c:28:ef:a9:1b:a0:e0:a4:f7:3e:fd:40:e4:
                    a6:b0:2f:fc:b4:ce:59:4c:10:0c:ef:b4:9e:28:2a:
                    87:2b:71:3c:59:8e:fe:ff:b0:5f:90:0a:bb:13:8a:
                    63:a8:a6:11:bd:25:a9:a4:9d:01:70:00:6d:c7:58:
                    20:0e:1b:da:7b:1d:61:59:bf:14:2e:db:f6:2d:e1:
                    53:f6:a0:5f:73:28:4f:e1:73:c7:e1:d0:0a:91:78:
                    25:65:54:d9:b7:1d:ff:66:3a:39:c2:b5:59:70:62:
                    21:bb:56:3e:88:07:29:d6:7b:38:92:07:b7:54:14:
                    d4:14:53:41:69:ce:0f:29:b5:c6:a6:92:ba:25:96:
                    ae:f8:38:ab:71:d5:05:2b:db:3c:ba:3e:ce:0d:39:
                    3e:1f:64:69:e7:b2:0e:f6:0a:f2:03:89:a3:d4:32:
                    f6:0e:98:72:0f:01:c3:f1:fc:16:50:33:00:ab:0f:
                    bb:37:92:79:74:d6:dc:0c:75:6d:98:12:bb:13:0b:
                    04:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6F:A8:EC:D6:08:64:0C:2E:CE:A2:AC:83:0A:09:07:D8:CD:90:68
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e39322e302f32322d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:25:51:6d:79:1e:63:20:18:2e:c5:c8:c1:14:e6:8b:f0:4b:
         03:e4:89:9e:13:f5:6a:af:19:ee:92:70:36:04:1a:62:16:26:
         a5:6c:07:50:a2:03:12:c6:58:fa:79:4b:a6:61:52:48:e3:86:
         7f:06:a8:62:9e:57:f6:ad:64:96:cf:18:e6:87:0c:a5:90:18:
         d8:c3:23:08:9a:2b:37:c4:50:ec:84:38:20:51:12:a9:b6:5c:
         c0:9b:f3:a0:6d:93:10:d1:15:52:08:c2:72:04:80:1b:8a:2e:
         fe:50:2e:6c:e6:1a:d3:9a:62:3d:0d:ad:5b:2c:be:19:d3:42:
         96:24:6c:ca:5a:ae:cf:d1:ee:08:c4:10:bf:84:39:ab:25:bc:
         e5:29:8b:b7:88:f4:4f:2a:b9:46:de:c6:c3:b2:c9:6b:de:a7:
         62:51:02:7e:aa:bc:88:39:17:3c:db:b6:99:cf:92:ff:01:f4:
         ef:05:3a:44:3a:d2:08:67:7e:dc:80:95:62:89:36:44:89:45:
         d4:8e:2d:8f:53:32:4e:46:df:f1:41:9d:ad:0a:71:06:4c:d6:
         55:9b:64:c5:a2:f6:6f:a1:ab:5d:50:e5:f8:96:07:e9:78:10:
         08:ef:9a:e4:2a:59:ae:0c:1d:d2:e9:10:a7:46:a1:29:15:ef:
         8a:91:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:40 2025 by rpki-client