Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32342d3234203d3e203634313233.roa
File:                     3138362e3134382e3232342e302f32342d3234203d3e203634313233.roa (raw, json)
Hash identifier:          vm5M6k5IH5Jv0eBg1TMP5C7YV4m5o8E/eWTlzcr6pjA=
Subject key identifier:   31:AC:A6:EC:BA:F7:DF:5D:A7:1D:83:CD:FF:DD:E6:EF:07:F2:B7:4F
Certificate issuer:       /CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
Certificate serial:       1A9C356168F2A950EF68EBF68BE5BA5E60E6CD9F
Authority key identifier: 73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32342d3234203d3e203634313233.roa
Signing time:             Mon 03 Mar 2025 01:45:00 +0000
ROA not before:           Mon 03 Mar 2025 01:40:00 +0000
ROA not after:            Mon 02 Mar 2026 01:45:00 +0000
asID:                     64123
IP address blocks:        186.148.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9c:35:61:68:f2:a9:50:ef:68:eb:f6:8b:e5:ba:5e:60:e6:cd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
        Validity
            Not Before: Mar  3 01:40:00 2025 GMT
            Not After : Mar  2 01:45:00 2026 GMT
        Subject: CN=31ACA6ECBAF7DF5DA71D83CDFFDDE6EF07F2B74F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:22:11:59:3e:42:6f:e8:b2:77:f2:c8:b8:3d:
                    44:e7:86:a4:49:62:23:af:c2:f4:51:88:3c:e7:8c:
                    0d:38:80:e0:09:e4:01:45:9f:97:8a:a9:f2:78:44:
                    30:64:31:c7:cb:8a:53:9c:a5:ed:31:a4:2f:a4:f1:
                    65:34:be:d8:98:7e:e2:92:cf:cb:c9:af:18:68:38:
                    db:9e:c3:de:6a:f5:5b:e0:3f:d8:d9:e9:13:c5:9d:
                    5e:70:95:c1:b7:6f:44:b6:95:56:cf:2c:b1:9b:d8:
                    63:b8:6c:c3:45:b9:a8:ed:2f:93:bb:f8:b0:5d:c5:
                    dd:fa:40:63:2c:33:14:95:8f:0a:7c:93:bd:4b:56:
                    ef:c8:94:31:74:ee:0d:ce:0c:dd:75:aa:76:91:50:
                    14:ec:da:70:d0:0a:f5:01:ee:67:85:bd:68:4c:cd:
                    e2:cc:e2:4c:86:d4:9b:a7:e1:dc:b1:38:4c:8a:7a:
                    69:b4:64:81:47:53:fb:c9:dc:b6:c3:67:e7:1b:43:
                    5f:10:ce:79:17:9c:b9:4d:63:2b:8b:7e:15:9e:c4:
                    34:f4:1d:4f:59:01:99:9d:65:eb:e2:e7:fb:9a:a8:
                    cc:d7:e5:5c:c1:48:e7:26:a3:8c:d0:20:f3:06:e2:
                    36:ea:cf:21:64:79:65:02:23:13:69:ca:0a:e9:76:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AC:A6:EC:BA:F7:DF:5D:A7:1D:83:CD:FF:DD:E6:EF:07:F2:B7:4F
            X509v3 Authority Key Identifier:
                keyid:73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32342d3234203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:51:2d:df:32:87:04:e3:d0:87:1f:93:d3:82:40:4d:69:39:
         b1:d9:91:93:a4:cc:cc:44:9f:d1:3e:78:e6:93:b4:f8:d2:69:
         24:40:a3:77:86:81:02:40:81:3c:47:fa:2d:35:73:cc:5c:4b:
         ca:5d:e9:47:9e:d0:a9:7c:1b:c3:e6:c0:a4:3c:bd:3a:bd:76:
         cd:64:22:ea:e4:d4:42:75:87:58:59:24:31:f9:2f:d6:5f:d1:
         d0:40:f0:ee:a0:ea:00:9a:f5:08:e1:92:f7:e4:4b:43:42:c2:
         fb:eb:cb:67:16:85:55:7e:2b:4b:7a:fd:f9:18:91:85:3e:a8:
         d4:1d:18:1b:ec:f2:0c:c5:aa:12:f0:26:6c:d4:d4:6c:3b:c1:
         52:9f:70:af:4f:8e:9f:57:c6:bf:1f:fb:5a:89:ad:eb:63:0b:
         16:2f:18:74:33:51:1a:0e:f1:14:70:eb:3b:0d:f8:6c:1e:ae:
         24:90:06:2f:a0:95:55:a7:c7:62:7e:12:0a:86:35:cd:cd:f5:
         83:e3:8a:60:75:d6:1c:3e:2c:ec:9b:d2:a2:93:c2:e0:0f:46:
         3a:5f:de:e5:6e:f1:86:1e:ed:c0:1f:f3:10:b6:83:f7:57:42:
         74:fd:d1:89:3f:10:2d:8c:eb:e3:7c:0e:fd:21:33:24:71:ea:
         0b:c2:78:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:40:26 2025 by rpki-client