Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3134382e3130332e302e302f31362d3234203d3e203132303636.roa
File:                     3134382e3130332e302e302f31362d3234203d3e203132303636.roa (raw, json)
Hash identifier:          yvdH7+fbBzE+d0LvzaN+dF/7u2fyi7H5HCr04d0r9LU=
Subject key identifier:   B1:41:A0:4B:B0:DF:98:BF:B0:DF:5C:D0:94:FF:6B:D4:F8:38:F5:6D
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       493D4158BA3DC5ABE36265280DAE5A7404901CAF
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3134382e3130332e302e302f31362d3234203d3e203132303636.roa
Signing time:             Tue 04 Feb 2025 18:47:03 +0000
ROA not before:           Tue 04 Feb 2025 18:42:03 +0000
ROA not after:            Tue 03 Feb 2026 18:47:03 +0000
asID:                     12066
IP address blocks:        148.103.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3d:41:58:ba:3d:c5:ab:e3:62:65:28:0d:ae:5a:74:04:90:1c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:42:03 2025 GMT
            Not After : Feb  3 18:47:03 2026 GMT
        Subject: CN=B141A04BB0DF98BFB0DF5CD094FF6BD4F838F56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:8a:6e:a4:7b:ee:21:50:ef:d6:e0:c2:ae:
                    fd:09:0a:fd:39:5e:ad:2c:d8:84:aa:4f:c5:5b:f5:
                    e5:ef:29:11:46:82:34:5e:e9:a4:9f:cc:92:e4:9b:
                    70:b5:74:fb:85:64:ae:b7:c4:bf:a9:3a:39:5c:b5:
                    0c:61:ff:17:a5:04:b6:de:e4:c1:4c:d3:38:6e:eb:
                    50:84:d1:80:2f:79:da:63:a5:f7:f4:91:02:c8:6d:
                    b6:7d:c1:3c:b6:54:40:4d:60:d3:02:56:c6:3a:b4:
                    4d:75:e0:9b:56:c2:27:c1:32:32:80:c7:de:de:52:
                    50:11:b4:2e:72:71:de:d1:40:f9:2e:e1:ec:d7:30:
                    f0:16:78:2a:2a:a8:39:87:30:1e:ea:10:59:f6:15:
                    1f:aa:bf:77:9b:6c:ca:1b:d0:b6:97:74:d3:01:e6:
                    d3:c2:f9:5e:48:02:e2:85:44:5b:f2:6a:e8:d9:2e:
                    a7:49:33:41:7a:81:fb:df:a6:06:ec:a1:8f:56:11:
                    c3:b6:c3:cf:7f:40:36:f7:dc:4c:1a:81:05:4a:a6:
                    14:e3:60:a1:44:b5:fd:cc:eb:40:72:dd:08:a1:f3:
                    c6:9b:af:31:cf:03:03:fb:05:58:dd:91:90:06:30:
                    80:c7:c0:07:3b:03:79:76:4b:63:cc:38:98:d8:34:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:41:A0:4B:B0:DF:98:BF:B0:DF:5C:D0:94:FF:6B:D4:F8:38:F5:6D
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3134382e3130332e302e302f31362d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:c8:0e:4c:82:f2:21:cd:28:d8:26:08:03:29:f9:53:d2:
         d5:5f:43:90:94:c7:94:40:d0:c1:ab:ba:38:9e:09:73:9e:83:
         2c:88:81:ba:ee:20:19:13:26:32:78:69:78:28:19:bf:26:af:
         7b:36:0b:d2:7b:c4:da:f8:60:90:09:ea:37:f3:60:01:ca:ca:
         99:8a:4d:8f:ee:7b:c0:41:41:1e:05:fc:d5:e3:a0:31:0a:fe:
         3d:64:0b:23:1e:8b:ab:a9:bd:7a:fc:e6:7e:01:99:6d:63:af:
         28:0d:ae:43:3a:81:c0:d6:09:ec:7d:87:47:b5:90:4f:ee:ba:
         f3:92:e6:7a:1c:75:ca:c9:af:38:04:a6:56:af:e1:bc:15:0f:
         ec:29:62:a4:de:70:13:8d:af:4c:1e:d3:1e:5d:d4:16:9f:1b:
         a7:5a:bd:cd:68:a9:3a:20:f2:23:7d:d4:f6:c9:3c:cd:13:21:
         e5:63:e2:2d:2a:5a:4f:b9:81:de:9a:49:2d:57:6b:3c:6c:ab:
         5a:31:c4:04:d4:53:e1:3f:0f:b7:b7:aa:f3:30:75:f0:79:4b:
         bd:a5:05:16:21:41:c1:b4:46:04:b9:71:e9:61:bf:6a:3e:6d:
         7a:15:3f:99:24:74:8d:1a:48:27:c7:32:da:10:99:e3:47:93:
         05:bd:6a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:42 2025 by rpki-client