Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3134382e302f32342d3234203d3e20323634373434.roa
File:                     3136382e3139342e3134382e302f32342d3234203d3e20323634373434.roa (raw, json)
Hash identifier:          JD1vem71X51Oj0Vkh9ph5A3ocpiRpkV2mgk9NXqHjxo=
Subject key identifier:   75:54:0B:46:AA:3D:34:E2:B9:15:27:4D:3B:A1:13:76:8B:2B:F8:2F
Certificate issuer:       /CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
Certificate serial:       3100E64CB6FD49EF5EFDD5A7181F1EB007AAE74D
Authority key identifier: E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3134382e302f32342d3234203d3e20323634373434.roa
Signing time:             Tue 04 Feb 2025 18:54:18 +0000
ROA not before:           Tue 04 Feb 2025 18:49:18 +0000
ROA not after:            Tue 03 Feb 2026 18:54:18 +0000
asID:                     264744
IP address blocks:        168.194.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 10:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:00:e6:4c:b6:fd:49:ef:5e:fd:d5:a7:18:1f:1e:b0:07:aa:e7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
        Validity
            Not Before: Feb  4 18:49:18 2025 GMT
            Not After : Feb  3 18:54:18 2026 GMT
        Subject: CN=75540B46AA3D34E2B915274D3BA113768B2BF82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:13:23:85:16:fb:72:0a:e0:4e:79:4b:0f:e6:
                    cb:bb:69:dc:d7:a0:dd:ff:4f:a4:c8:1c:3f:67:28:
                    e4:f4:e4:e7:fe:69:01:2f:aa:25:f1:be:d0:fe:38:
                    90:51:19:3c:a0:62:98:cc:41:95:e8:03:b7:88:b9:
                    13:f4:39:c9:25:7c:1a:35:f2:13:dd:a2:80:ff:33:
                    5e:f3:ac:81:53:d8:81:82:e5:8a:60:42:a2:2e:92:
                    6d:06:81:2c:3f:b1:59:27:7e:86:0d:04:57:d4:af:
                    ce:6c:af:f3:bd:5a:4d:99:5f:c2:4b:1e:90:e1:d9:
                    2e:53:93:12:d5:de:9d:e5:0d:aa:cc:2f:85:f2:5d:
                    81:72:1f:ab:17:db:d6:3c:e5:df:61:2b:3f:7b:93:
                    7e:09:fb:b0:95:2a:06:7e:4f:93:0c:d0:7d:a9:66:
                    18:32:32:e6:08:39:de:28:2a:3e:84:c7:9b:5b:08:
                    ad:da:5b:b7:10:bc:c2:e4:9b:57:5b:6f:31:f5:53:
                    ed:56:8d:a2:fa:f8:a4:cb:2b:ff:16:27:8f:af:8a:
                    fd:04:fe:8d:0f:48:9d:1a:82:9d:16:94:12:f6:2b:
                    61:05:aa:aa:cb:20:c9:5a:c0:4a:4e:36:bf:6e:79:
                    19:bb:1c:b9:79:14:f7:b0:12:8b:19:85:78:d6:bb:
                    fa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:54:0B:46:AA:3D:34:E2:B9:15:27:4D:3B:A1:13:76:8B:2B:F8:2F
            X509v3 Authority Key Identifier:
                keyid:E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3134382e302f32342d3234203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:3c:f2:3e:9f:4d:56:07:2c:96:dc:4b:32:b6:9a:02:bf:29:
         18:cb:ef:80:36:71:a1:43:e6:52:a8:62:6f:e3:1c:af:24:1d:
         f7:92:93:76:62:3a:70:cc:c4:1e:55:db:6e:a5:b9:5b:89:8d:
         49:05:08:b4:28:40:95:78:28:22:0a:3a:5b:40:f4:6e:cb:4a:
         a2:77:56:ad:8d:d0:b6:2e:90:cc:bd:ef:58:cb:8c:38:05:a4:
         2d:d4:08:e4:d2:63:a9:a2:a9:00:8d:1b:9a:c3:83:d7:af:7f:
         65:2a:e5:cf:f5:cb:23:89:dd:33:66:14:6e:54:87:b6:6c:30:
         35:fd:c9:cd:90:f7:3d:83:be:d0:ac:0a:90:5a:f9:43:e9:7e:
         64:d9:5a:44:69:0f:7a:0a:81:7d:a5:52:4c:f9:1a:be:34:56:
         32:88:dc:50:36:f6:13:88:70:5f:01:75:b6:76:8c:a1:dd:0c:
         62:31:46:9d:04:72:96:28:30:72:28:e9:46:1f:79:1a:1b:75:
         47:18:9f:1f:89:c7:f3:7d:cd:e9:cb:e6:fe:f9:8a:0f:a2:d7:
         5f:75:d5:d8:5d:ad:81:2c:70:b5:a2:23:6c:b7:cb:e3:d1:3b:
         a0:5d:db:30:e0:d9:30:b5:39:a3:9a:8c:f2:16:c1:10:17:fe:
         e6:88:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:57 2025 by rpki-client