Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e39362e302f32312d3234203d3e203232313232.roa
File:                     3134382e3230392e39362e302f32312d3234203d3e203232313232.roa (raw, json)
Hash identifier:          tGhhn+wGqkcgggeX8K2EomFOATw/tnczLAaM3q46OJQ=
Subject key identifier:   45:09:5D:C6:61:FD:EB:28:4A:77:76:7F:A0:B2:49:C0:41:7D:26:D1
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       6F2CDFCE86154AC541EC0EC3F780D588A166FD27
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e39362e302f32312d3234203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:38:59 +0000
ROA not before:           Tue 04 Feb 2025 18:33:59 +0000
ROA not after:            Tue 03 Feb 2026 18:38:59 +0000
asID:                     22122
IP address blocks:        148.209.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2c:df:ce:86:15:4a:c5:41:ec:0e:c3:f7:80:d5:88:a1:66:fd:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:33:59 2025 GMT
            Not After : Feb  3 18:38:59 2026 GMT
        Subject: CN=45095DC661FDEB284A77767FA0B249C0417D26D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:15:4c:85:a1:55:2f:1c:7e:7f:71:aa:e6:
                    1a:9c:95:00:f7:04:c1:ed:9f:14:63:88:7c:2e:9f:
                    10:7d:3d:2a:fa:99:72:1b:0e:85:00:90:32:97:cc:
                    56:9a:94:87:c9:d2:e7:95:f2:6c:ae:2c:46:5f:b3:
                    24:2c:8f:5e:cf:c5:3b:e0:3e:6f:ca:c2:8b:42:17:
                    00:2b:78:63:a5:b0:17:05:9c:5b:54:e9:41:d1:fc:
                    ef:32:64:60:a6:8f:d6:d3:77:b5:c4:c3:5c:24:a5:
                    d7:c5:9a:3e:31:68:95:49:f8:a3:db:8f:f5:be:d5:
                    e7:66:65:fd:af:a4:9d:d5:59:9a:3e:aa:eb:7c:9a:
                    ef:a9:cb:5c:e3:1c:c6:3a:a4:9e:ac:4b:6f:1f:e7:
                    ed:06:91:13:3c:67:0c:57:b6:cc:0e:3d:02:a5:19:
                    7f:13:18:4b:a2:e8:23:58:86:56:9a:ba:0a:5d:71:
                    ba:12:b5:e8:6b:65:38:de:43:11:96:92:6c:02:fd:
                    2a:92:78:a3:09:60:e9:8b:b1:9d:3e:5b:62:f7:3f:
                    8b:6b:08:6b:2b:bf:f7:27:cc:4f:d8:61:df:9f:29:
                    c1:8a:f8:31:af:bf:73:0a:b4:6a:3d:18:b0:7f:9a:
                    37:1b:25:ad:20:50:44:65:e6:aa:f6:06:58:f5:e8:
                    7a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:09:5D:C6:61:FD:EB:28:4A:77:76:7F:A0:B2:49:C0:41:7D:26:D1
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/3134382e3230392e39362e302f32312d3234203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:8d:df:a9:64:9c:5f:94:45:d6:ed:3d:34:de:a3:a9:23:79:
         a6:c8:40:77:c2:a5:eb:77:54:a3:c3:ee:ed:a0:02:91:a2:56:
         51:63:ac:32:7d:68:f2:dd:53:df:a7:e1:5d:ce:36:d3:0c:d2:
         59:d2:db:e9:df:be:ed:d3:68:c6:b9:24:06:ed:73:f9:b4:4d:
         25:77:4d:19:1e:55:6d:a6:ce:a2:1e:50:ec:11:44:a2:ec:fc:
         0d:b5:28:5b:cb:15:5e:eb:fa:52:59:2b:74:7b:eb:6f:a7:b1:
         4f:34:73:21:cc:b8:25:01:a6:f5:f3:d3:e6:6c:6c:b7:15:8f:
         36:58:0f:d1:26:6a:22:5a:c4:91:c4:ed:d9:c2:0f:7e:80:87:
         c0:a9:4f:3c:0a:e7:61:f4:81:c5:cc:c1:bf:ef:05:b6:9f:08:
         d3:7d:0f:cb:fd:fe:03:9c:2b:bf:dd:a1:d3:ee:d6:d6:00:78:
         04:4c:30:f9:69:85:a0:ad:a3:dd:24:c9:62:4a:5b:e8:14:d6:
         3f:49:21:34:06:3b:b2:42:41:3d:bd:30:45:45:23:5d:c7:b0:
         92:9e:63:02:76:2f:0a:d4:73:c9:e7:64:08:d5:aa:db:08:e8:
         78:36:e8:15:76:25:9d:63:d3:b4:c8:6f:49:c8:d8:bf:93:4c:
         1c:38:19:84
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbyzfzoYVSsVB7A7D94DViKFm/ScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2N0ExMzg1NjcxNDZCMkU4OUUwOTE4MjM3Q0IyRDA3
NkQ2N0FGQTAeFw0yNTAyMDQxODMzNTlaFw0yNjAyMDMxODM4NTlaMDMxMTAvBgNV
BAMTKDQ1MDk1REM2NjFGREVCMjg0QTc3NzY3RkEwQjI0OUMwNDE3RDI2RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrhVMhaFVLxx+f3Gq5hqclQD3
BMHtnxRjiHwunxB9PSr6mXIbDoUAkDKXzFaalIfJ0ueV8myuLEZfsyQsj17PxTvg
Pm/KwotCFwAreGOlsBcFnFtU6UHR/O8yZGCmj9bTd7XEw1wkpdfFmj4xaJVJ+KPb
j/W+1edmZf2vpJ3VWZo+qut8mu+py1zjHMY6pJ6sS28f5+0GkRM8ZwxXtswOPQKl
GX8TGEui6CNYhlaaugpdcboStehrZTjeQxGWkmwC/SqSeKMJYOmLsZ0+W2L3P4tr
CGsrv/cnzE/YYd+fKcGK+DGvv3MKtGo9GLB/mjcbJa0gUERl5qr2Blj16HoVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQURQldxmH96yhKd3Z/oLJJwEF9JtEwHwYDVR0j
BBgwFoAUjWehOFZxRrLongkYI3yy0HbWevowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NkZENjdEODlEOTZEMzlBMzk3MjRDNEFENjE0RjQ1N0Mw
OEZBMjc4NDQxNUJFMzk1MkM0OTFCRUJFNEJFMjA3LzAvOEQ2N0ExMzg1NjcxNDZC
MkU4OUUwOTE4MjM3Q0IyRDA3NkQ2N0FGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDY3QTEzODU2NzE0NkIyRTg5
RTA5MTgyMzdDQjJEMDc2RDY3QUZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTZGRDY3RDg5RDk2RDM5QTM5NzI0QzRBRDYxNEY0NTdDMDhGQTI3ODQ0
MTVCRTM5NTJDNDkxQkVCRTRCRTIwNy8wLzMxMzQzODJlMzIzMDM5MmUzOTM2MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzMjMxMzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5TRYDAN
BgkqhkiG9w0BAQsFAAOCAQEAHI3fqWScX5RF1u09NN6jqSN5pshAd8Kl63dUo8Pu
7aACkaJWUWOsMn1o8t1T36fhXc420wzSWdLb6d++7dNoxrkkBu1z+bRNJXdNGR5V
babOoh5Q7BFEouz8DbUoW8sVXuv6UlkrdHvrb6exTzRzIcy4JQGm9fPT5mxstxWP
NlgP0SZqIlrEkcTt2cIPfoCHwKlPPArnYfSBxczBv+8Ftp8I030Py/3+A5wrv92h
0+7W1gB4BEww+WmFoK2j3STJYkpb6BTWP0khNAY7skJBPb0wRUUjXcewkp5jAnYv
CtRzyedkCNWq2wjoeDboFXYlnWPTtMhvScjYv5NMHDgZhA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:27:45 2025 by rpki-client