Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/3134382e3233302e302e302f32322d3234203d3e20383030.roa
File:                     3134382e3233302e302e302f32322d3234203d3e20383030.roa (raw, json)
Hash identifier:          LERsNg/XuK57QJlMXiHhIRxkgUaUnX1NDY5B8ceIMxU=
Subject key identifier:   77:5B:C0:95:8B:26:76:11:06:0D:AE:6A:7C:F4:0F:8B:ED:45:34:60
Certificate issuer:       /CN=A08DDD76E947B9C9F721B78022D9A4EAADAE46B1
Certificate serial:       654CEF0D63ACCD54E013C9203157E968B2C1979A
Authority key identifier: A0:8D:DD:76:E9:47:B9:C9:F7:21:B7:80:22:D9:A4:EA:AD:AE:46:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/3134382e3233302e302e302f32322d3234203d3e20383030.roa
Signing time:             Wed 24 Jun 2026 10:49:26 +0000
ROA not before:           Wed 24 Jun 2026 10:44:26 +0000
ROA not after:            Wed 23 Jun 2027 10:49:26 +0000
asID:                     800
IP address blocks:        148.230.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4c:ef:0d:63:ac:cd:54:e0:13:c9:20:31:57:e9:68:b2:c1:97:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A08DDD76E947B9C9F721B78022D9A4EAADAE46B1
        Validity
            Not Before: Jun 24 10:44:26 2026 GMT
            Not After : Jun 23 10:49:26 2027 GMT
        Subject: CN=775BC0958B267611060DAE6A7CF40F8BED453460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:ff:6c:e0:73:46:e5:d4:2a:ea:ba:64:82:
                    c0:05:81:97:6a:70:9b:cf:ff:15:08:18:8b:09:6f:
                    f0:af:41:ab:04:50:1a:18:1f:37:47:d7:3d:ef:7a:
                    e9:ac:a2:59:f7:d4:22:19:6f:4e:9e:31:45:d1:ad:
                    a3:88:c7:1e:df:31:8f:9b:9e:51:17:a8:b1:a1:20:
                    5e:5a:f5:c3:75:11:6c:3b:e7:33:d4:7f:db:65:cf:
                    3a:db:24:9c:1b:08:0f:41:4b:a5:9c:12:2a:3f:e3:
                    29:57:89:90:f8:4e:4e:a7:be:01:d0:a3:2d:02:86:
                    cd:7f:de:53:03:04:6d:da:1b:fb:89:8e:33:89:c6:
                    e1:a0:d3:cd:7d:d6:8e:5e:31:13:74:73:a7:e7:30:
                    c0:b5:76:d8:c6:00:ba:35:51:b3:82:3d:a5:e6:42:
                    3f:ea:c4:d2:ae:71:4a:f1:c8:81:71:f9:95:b6:92:
                    32:57:70:af:22:20:e4:57:d3:1a:d9:c3:38:d4:64:
                    cd:9c:e3:66:f7:5f:56:94:60:36:96:62:b7:8d:bc:
                    03:15:41:76:ee:68:7f:9c:42:ab:cd:7d:33:e3:8a:
                    ff:25:8f:b8:9a:e2:eb:61:c5:74:83:5f:ba:d2:ce:
                    b7:0d:d9:08:57:6e:7f:2b:c2:22:0a:d2:5b:77:de:
                    8b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5B:C0:95:8B:26:76:11:06:0D:AE:6A:7C:F4:0F:8B:ED:45:34:60
            X509v3 Authority Key Identifier:
                keyid:A0:8D:DD:76:E9:47:B9:C9:F7:21:B7:80:22:D9:A4:EA:AD:AE:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/3134382e3233302e302e302f32322d3234203d3e20383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.230.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:f8:60:23:60:e7:80:1a:9c:81:f0:3b:58:8f:2e:a4:24:08:
         29:df:54:f1:e8:dd:0b:4f:bd:15:10:04:ed:c5:3c:85:9b:b5:
         17:fb:93:91:e0:ea:92:a3:ed:07:b9:fa:28:10:79:65:0a:e0:
         38:82:db:32:43:9b:7f:48:b0:63:c1:a5:62:9a:f0:83:3e:ae:
         b6:d8:e0:49:58:11:2f:cb:88:cf:5f:80:8f:51:ec:39:af:a6:
         de:c2:3d:65:a3:64:c3:c1:bc:96:81:f0:7b:f9:de:f5:84:7d:
         9f:0a:a1:a3:52:fa:e3:8c:37:98:cb:b4:92:63:be:a1:56:5b:
         6e:d1:f4:28:ba:0f:c2:5c:0e:74:48:ca:47:0b:c1:bb:6c:1f:
         ad:96:ec:96:af:12:f9:7b:24:d8:61:b0:fc:af:02:46:13:ed:
         3a:6b:dc:17:d7:4d:43:94:c2:61:18:b8:7a:ae:fc:b1:17:c6:
         4c:aa:a5:29:bb:21:ac:26:5a:4f:30:8a:de:db:2a:77:bd:fb:
         87:9e:4e:33:ae:70:81:15:cc:0f:9d:f6:71:69:32:1c:86:f6:
         98:ee:17:fc:f2:6f:1f:33:08:3d:ac:b4:ec:56:c9:99:fc:58:
         76:a9:f4:8d:54:60:1e:1f:22:1a:9f:13:70:35:6c:09:da:af:
         83:85:8b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:17:03 2026 by rpki-client