Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32322d3232203d3e203634313233.roa
File:                     3138362e3134382e3232342e302f32322d3232203d3e203634313233.roa (raw, json)
Hash identifier:          Ics1b9E+HwgOMn6h0hB6EkUpwWHP9MbtOc0sSwulsw8=
Subject key identifier:   20:A1:A6:CD:C0:FA:15:BD:C7:97:5F:29:72:36:BB:69:AC:AB:62:3B
Certificate issuer:       /CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
Certificate serial:       082F94AA6CFB3BC055FBB49AB055B057EB10E123
Authority key identifier: 73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32322d3232203d3e203634313233.roa
Signing time:             Mon 03 Mar 2025 01:45:00 +0000
ROA not before:           Mon 03 Mar 2025 01:40:00 +0000
ROA not after:            Mon 02 Mar 2026 01:45:00 +0000
asID:                     64123
IP address blocks:        186.148.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2f:94:aa:6c:fb:3b:c0:55:fb:b4:9a:b0:55:b0:57:eb:10:e1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
        Validity
            Not Before: Mar  3 01:40:00 2025 GMT
            Not After : Mar  2 01:45:00 2026 GMT
        Subject: CN=20A1A6CDC0FA15BDC7975F297236BB69ACAB623B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:08:f7:90:93:98:67:aa:46:ee:dc:48:12:
                    fa:fa:7c:cf:e6:fb:15:57:e0:fa:d4:de:9e:57:2e:
                    d8:1b:10:56:4b:22:88:bb:46:d9:d4:af:90:63:0c:
                    6b:d2:f6:2e:a5:b5:e2:37:97:1c:36:04:3f:38:f3:
                    07:09:3b:60:bf:ec:a9:9a:da:d6:83:c0:e8:aa:50:
                    fe:1a:e2:54:8e:c7:cf:bd:07:cb:2e:7c:76:ca:21:
                    77:b2:ec:32:63:72:8b:07:36:d9:d8:e8:c8:8b:dc:
                    e8:0b:29:c7:e8:b7:9e:29:41:08:ba:41:8a:5b:ca:
                    d5:af:9e:25:d6:40:e5:3b:58:c2:e3:3c:01:d4:8a:
                    26:05:2a:82:f1:27:08:6b:9f:58:25:1f:30:eb:d8:
                    a0:c0:55:74:af:55:b8:31:26:80:c4:b1:62:0a:68:
                    c1:b0:11:90:45:6c:33:6e:b6:bb:10:96:fb:6f:bb:
                    45:da:ce:d6:8f:87:3c:fa:73:58:e0:f6:be:96:9b:
                    7b:90:23:db:8d:50:55:18:3b:2f:9f:3f:95:79:1d:
                    8e:4f:d6:b7:4e:ff:6f:78:6e:38:97:ff:2a:e7:e9:
                    f6:09:98:7c:75:e4:f0:d8:2a:2f:1e:ec:82:77:3b:
                    90:fb:8d:c7:af:08:f5:9d:ce:3a:14:b7:8e:4c:1f:
                    5f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A1:A6:CD:C0:FA:15:BD:C7:97:5F:29:72:36:BB:69:AC:AB:62:3B
            X509v3 Authority Key Identifier:
                keyid:73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32322d3232203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:1b:cf:13:91:72:18:b0:02:30:1b:e0:3c:cf:8d:50:47:ff:
         97:65:f9:d9:e3:3a:56:ff:9b:6b:05:24:39:8d:a0:35:ac:27:
         22:52:9b:64:cf:9b:b0:d0:9a:e8:cf:53:a3:19:5d:ca:02:30:
         01:cf:3e:4e:7a:d7:1b:95:8f:20:a8:0c:37:da:ee:79:ae:14:
         b1:5a:23:8b:fb:8d:80:3d:6a:80:6c:82:ca:92:90:b5:c8:d6:
         14:03:41:61:00:43:44:56:cd:eb:b9:72:3e:d7:e2:10:4a:5a:
         57:2b:15:d7:19:fe:89:32:07:fa:0f:66:5b:c1:5c:88:f0:fb:
         c0:22:2c:9d:22:51:56:03:29:ea:90:a8:6e:af:26:1d:c9:f3:
         46:66:79:2d:f2:e8:4d:ad:a3:c5:2c:99:9b:29:fc:36:41:70:
         f9:44:ea:96:7a:6f:d5:10:a7:78:9d:26:94:dd:13:ec:52:25:
         ef:a2:22:61:06:21:f8:e2:48:79:7c:cf:cb:4c:81:40:77:7b:
         09:b2:ac:24:86:3f:98:4f:99:51:d5:f2:06:19:c8:35:0c:5d:
         63:01:8b:dc:61:16:1c:5d:d8:42:52:36:df:49:c4:ac:b9:53:
         41:d7:69:e3:ba:e7:46:98:46:99:4e:b0:7e:61:83:6e:90:e3:
         63:1d:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:31:30 2025 by rpki-client