Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232352e302f32342d3234203d3e203634313233.roa
File:                     3138362e3134382e3232352e302f32342d3234203d3e203634313233.roa (raw, json)
Hash identifier:          jqz+N7j1avOR35d9cDT3rZ0M9y/MXDRuLvsN7oCj6UY=
Subject key identifier:   51:AA:30:44:EB:C0:EB:5B:EA:92:03:51:66:68:10:FF:2E:CA:E5:F2
Certificate issuer:       /CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
Certificate serial:       73D2F0707417F92A006FF4C893ECA3382455D27B
Authority key identifier: 73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232352e302f32342d3234203d3e203634313233.roa
Signing time:             Mon 03 Mar 2025 01:45:01 +0000
ROA not before:           Mon 03 Mar 2025 01:40:01 +0000
ROA not after:            Mon 02 Mar 2026 01:45:01 +0000
asID:                     64123
IP address blocks:        186.148.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d2:f0:70:74:17:f9:2a:00:6f:f4:c8:93:ec:a3:38:24:55:d2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
        Validity
            Not Before: Mar  3 01:40:01 2025 GMT
            Not After : Mar  2 01:45:01 2026 GMT
        Subject: CN=51AA3044EBC0EB5BEA920351666810FF2ECAE5F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:c0:e1:bf:73:9a:3c:14:67:bc:5d:0c:4b:
                    2f:42:15:00:b6:48:82:5e:89:7f:a5:d6:5d:cf:48:
                    9a:6d:e5:61:2f:a5:7f:62:5b:85:f1:69:90:a9:02:
                    a1:af:8d:77:f6:4e:e6:24:72:58:60:46:2a:db:51:
                    c8:b9:9b:39:b2:f5:e1:93:4a:4c:4e:a5:c3:7d:b4:
                    85:37:36:c2:28:cf:cb:54:6f:e2:8e:f0:f3:3c:0e:
                    5f:25:6d:60:12:8c:ef:75:26:dc:fc:0a:e3:21:65:
                    da:65:06:3c:76:8e:c7:83:a2:34:8f:4c:44:8a:ac:
                    e9:b0:12:85:3e:12:20:4a:58:86:72:fd:ac:1e:21:
                    49:54:46:7c:bd:92:97:58:e9:76:9c:f3:72:fa:13:
                    ad:33:1c:fc:98:e9:55:11:e9:d7:20:4e:90:d0:16:
                    4e:67:9a:a0:4e:fe:c1:fd:88:cd:f2:2f:6a:e4:af:
                    d0:24:81:46:81:fc:9f:9b:bd:f2:b8:ff:42:66:6a:
                    a6:59:fd:1f:0c:59:fe:34:c8:39:e2:2b:38:b3:34:
                    1e:56:49:b1:fb:bd:27:bc:df:b9:2a:22:31:d6:de:
                    b0:5b:8b:49:7b:7f:a1:4b:9e:d2:16:82:01:6a:0f:
                    cd:f9:75:08:77:c6:e4:db:33:3a:64:a4:14:8d:e1:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AA:30:44:EB:C0:EB:5B:EA:92:03:51:66:68:10:FF:2E:CA:E5:F2
            X509v3 Authority Key Identifier:
                keyid:73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232352e302f32342d3234203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a6:3c:b2:f1:7a:8c:f6:55:19:d6:ba:79:e8:53:01:22:ad:
         2e:70:34:83:f3:42:7f:90:21:75:e5:1d:2b:40:16:5c:7b:3d:
         14:30:f5:d7:57:43:81:ec:4c:40:b5:7d:e1:90:ef:92:0b:db:
         58:66:6c:95:d0:96:5f:21:57:9f:1a:a7:f5:58:11:5b:cd:63:
         dc:6a:f8:7f:20:1b:ba:e6:21:a3:ca:47:1f:60:d9:cf:ee:df:
         fb:49:05:5b:5c:28:79:0a:ed:33:a3:67:77:9d:c1:65:23:7b:
         46:51:4e:06:4f:1d:d1:62:1d:a2:47:b5:fe:d1:39:34:bb:a0:
         16:d2:5b:f2:e7:b7:c1:91:09:6b:92:07:0d:68:bb:22:53:ad:
         3c:8d:19:6d:24:28:43:1f:c1:db:bd:e2:2b:b4:67:84:c3:00:
         79:8a:26:40:5b:7a:7c:7d:ef:97:ed:89:3b:67:bc:0a:c3:3e:
         11:c3:85:4e:f2:65:aa:9e:09:fa:cf:30:17:63:87:7e:e0:cb:
         e6:d9:a6:48:c9:b0:73:49:6c:68:22:7e:8c:fb:7a:f8:2c:6b:
         67:ad:c9:e9:00:e5:37:20:dd:50:2b:78:99:83:aa:80:59:b7:
         47:f3:62:53:4a:a8:56:e5:23:d1:5e:ce:2e:b3:9a:36:a8:9b:
         52:3f:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:40:10 2025 by rpki-client