Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130362e302f32342d3234203d3e20323635383339.roa
File:                     3230312e3134382e3130362e302f32342d3234203d3e20323635383339.roa (raw, json)
Hash identifier:          PA+yStDbmkaLpEPX/ZzHi6TJKIzPat8P05ZaCJtgOIE=
Subject key identifier:   D3:32:32:69:47:0C:97:B0:C4:AE:B8:3F:E9:73:1E:31:98:23:46:A7
Certificate issuer:       /CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
Certificate serial:       5EB4F193E58825A6303844AFE147FCDA9278C17D
Authority key identifier: B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130362e302f32342d3234203d3e20323635383339.roa
Signing time:             Fri 14 Mar 2025 16:30:01 +0000
ROA not before:           Fri 14 Mar 2025 16:25:01 +0000
ROA not after:            Fri 13 Mar 2026 16:30:01 +0000
asID:                     265839
IP address blocks:        201.148.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b4:f1:93:e5:88:25:a6:30:38:44:af:e1:47:fc:da:92:78:c1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B167745D3C13890CC27EF4697BB0058F2C2076C8
        Validity
            Not Before: Mar 14 16:25:01 2025 GMT
            Not After : Mar 13 16:30:01 2026 GMT
        Subject: CN=D3323269470C97B0C4AEB83FE9731E31982346A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:a5:30:9d:cf:33:be:6c:66:70:c1:0a:29:
                    cd:34:97:88:7c:98:1d:62:d6:de:aa:64:13:d8:59:
                    89:f9:94:95:ac:83:f1:75:ad:d9:db:7d:a2:17:d6:
                    9e:6a:d2:09:53:92:45:1c:4b:cd:2a:4b:91:fd:1e:
                    2f:05:41:97:07:ab:b8:2c:37:3b:eb:c1:cd:50:d5:
                    91:5d:ff:65:f6:e5:54:8c:c7:3e:eb:e7:98:43:e5:
                    20:a6:1f:55:4e:eb:1f:d1:56:6a:ff:45:39:56:22:
                    f2:73:8d:3a:35:2b:53:56:3c:17:4f:f5:80:5e:60:
                    83:eb:5b:84:a0:63:2c:26:08:7e:8d:69:e4:b7:29:
                    d2:dd:24:88:7f:9a:f6:92:00:65:37:d8:55:55:9c:
                    04:35:3a:9f:70:72:56:70:cd:20:0d:a1:1f:5e:b1:
                    09:3c:76:52:5d:9e:97:85:42:2a:55:7b:86:78:f5:
                    95:87:5b:4b:b9:b7:ec:96:f0:f7:ce:51:f8:9f:9a:
                    b7:cb:f5:f2:86:d9:86:2b:ba:7e:61:98:2c:39:b7:
                    0e:3d:e3:80:3e:e4:4d:b1:27:cd:06:f2:d6:3a:6a:
                    df:6f:36:bc:fc:eb:3b:65:84:30:89:50:0d:59:02:
                    cc:11:67:07:7d:25:63:36:c9:b5:74:27:7a:39:1b:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:32:32:69:47:0C:97:B0:C4:AE:B8:3F:E9:73:1E:31:98:23:46:A7
            X509v3 Authority Key Identifier:
                keyid:B1:67:74:5D:3C:13:89:0C:C2:7E:F4:69:7B:B0:05:8F:2C:20:76:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B167745D3C13890CC27EF4697BB0058F2C2076C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7884ED7C3480EF4CA98888836D406E9097A38AA938DB6DB1F003EDAD4556C571/0/3230312e3134382e3130362e302f32342d3234203d3e20323635383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:15:5b:18:56:d9:6f:8f:90:a9:33:8e:b6:af:0a:f7:3a:5d:
         97:37:35:f2:aa:28:b0:fd:f0:f6:d2:44:ce:3d:87:1a:6a:13:
         6e:75:16:29:9c:70:4a:27:b6:fb:c4:08:64:50:78:86:67:0a:
         69:c8:5a:ca:59:ab:ca:7a:74:3d:12:d9:64:a3:cb:49:76:fe:
         1c:23:8d:75:cd:ae:8c:a9:20:f1:04:a9:be:a2:99:c1:6a:f1:
         7c:10:d2:f2:cb:70:7e:1d:e2:48:91:9d:82:96:fd:c3:34:f0:
         9c:3b:2d:29:c9:89:80:48:15:de:4f:57:c2:9f:4a:56:a3:3b:
         48:19:f6:c0:9e:08:76:9a:36:9f:3c:c4:da:95:e8:0a:b0:1c:
         18:e1:92:8c:cd:bb:eb:16:63:7c:ca:cf:08:57:ee:88:38:36:
         03:6f:37:55:fe:ad:53:95:51:10:ba:0f:34:95:56:04:13:07:
         62:46:1b:c3:c3:a9:dc:40:00:1e:64:fe:44:62:45:47:42:be:
         ef:b2:25:be:6f:25:0c:e4:8d:51:fa:71:2f:53:e9:d8:a8:de:
         ad:bc:38:de:89:36:71:9a:3f:2e:ae:81:ba:12:d2:9f:92:72:
         11:14:95:cc:99:ed:a4:8f:03:3a:13:12:9f:3d:03:56:83:5c:
         b5:f1:65:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:03 2025 by rpki-client