Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130342e302f32342d3234203d3e20323635383339.roa
File:                     3230312e3134382e3130342e302f32342d3234203d3e20323635383339.roa (raw, json)
Hash identifier:          CThrF+PIzwdlOWCEuwlPW+m7u8kWvoudAi6y9Wl7vbg=
Subject key identifier:   22:2B:94:F9:F6:AF:01:F4:8B:5E:59:E1:B1:BB:0C:03:ED:9C:69:3B
Certificate issuer:       /CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
Certificate serial:       510131EF240D073A5CB4D1EB7DF9442AF7734505
Authority key identifier: B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130342e302f32342d3234203d3e20323635383339.roa
Signing time:             Fri 14 Mar 2025 16:30:01 +0000
ROA not before:           Fri 14 Mar 2025 16:25:01 +0000
ROA not after:            Fri 13 Mar 2026 16:30:01 +0000
asID:                     265839
IP address blocks:        201.148.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:01:31:ef:24:0d:07:3a:5c:b4:d1:eb:7d:f9:44:2a:f7:73:45:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
        Validity
            Not Before: Mar 14 16:25:01 2025 GMT
            Not After : Mar 13 16:30:01 2026 GMT
        Subject: CN=222B94F9F6AF01F48B5E59E1B1BB0C03ED9C693B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:de:5a:22:3c:41:f8:18:b8:12:0b:f1:dd:
                    cb:f7:a3:02:45:5f:2f:3f:bc:bb:ec:39:1f:a3:1d:
                    ce:49:81:ee:57:61:f5:ec:15:89:68:d4:56:62:fd:
                    16:93:0e:9e:3b:6b:7f:5e:fb:8a:10:2e:2c:7b:62:
                    e2:87:9e:c8:6e:47:0f:1a:97:2e:da:ae:aa:a0:54:
                    6a:3e:94:b1:5c:73:34:13:4c:31:51:cf:7a:ee:b9:
                    9b:26:11:ce:08:01:e8:77:1b:27:4a:04:d5:48:8c:
                    37:c2:c0:ca:47:cc:6b:e0:8d:91:d1:58:3b:ff:e4:
                    e1:19:ae:13:19:97:1d:25:06:c9:7d:bb:79:50:22:
                    3d:96:d8:d8:35:60:a9:ea:9a:f9:36:1b:e6:0b:5c:
                    5a:c0:e8:5b:4e:c7:54:f0:23:ab:86:45:c5:87:b5:
                    da:9f:ab:78:1a:93:37:27:91:27:90:74:b0:a5:9a:
                    be:84:bb:dc:62:16:b9:cc:84:7d:76:4e:b9:29:b9:
                    84:2f:8b:00:af:48:86:de:ee:96:9e:7a:3a:93:87:
                    15:03:6a:3e:4f:4a:38:0d:c3:5b:32:34:4d:ee:92:
                    a0:07:e3:4a:53:47:98:69:e5:80:37:c2:6b:dd:11:
                    9c:b2:cc:02:bf:8d:5b:fe:ab:34:83:8c:bc:7c:a6:
                    24:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2B:94:F9:F6:AF:01:F4:8B:5E:59:E1:B1:BB:0C:03:ED:9C:69:3B
            X509v3 Authority Key Identifier:
                keyid:B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130342e302f32342d3234203d3e20323635383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:f2:13:01:be:be:02:a7:f8:b6:7d:17:5a:df:90:fc:32:70:
         9d:dd:7a:e3:28:06:de:a5:e0:4c:40:c9:d8:48:13:d5:28:8c:
         63:e0:7c:2e:f3:6c:39:fa:33:1b:15:29:fd:a8:68:ec:f1:63:
         8f:88:66:55:5d:69:59:e4:69:66:af:e7:32:39:b9:ce:fa:80:
         08:cf:04:81:b1:5f:13:13:c6:42:95:7b:b6:e3:ee:da:cb:c4:
         13:3a:4a:04:0a:3d:b9:d7:e6:fd:a8:a1:76:cf:ef:55:0d:b3:
         cd:1a:72:2a:7b:c0:06:e0:f5:8b:43:5b:2a:78:d5:0f:01:cd:
         65:4d:69:fc:44:44:e4:4c:43:e6:49:86:c0:ec:37:37:b4:d5:
         f2:c2:8b:dc:3c:02:17:27:12:1e:3e:c7:b4:c6:18:7d:58:ae:
         a4:ef:47:f4:a5:60:b7:69:0d:a9:06:16:5f:56:3e:a7:48:6a:
         05:6e:d4:57:48:3c:38:7d:95:00:0e:05:cc:e0:1c:75:7a:50:
         06:b6:9f:77:92:55:cf:6f:77:a4:f0:88:cb:90:a6:bf:5c:31:
         35:91:17:ae:41:00:c3:57:3b:23:9b:d3:97:39:19:c0:f6:e2:
         2a:08:37:c8:8a:cb:52:85:fa:16:86:de:73:6e:1f:da:a4:8f:
         f2:a6:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:05 2025 by rpki-client