Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232362e302f32342d3234203d3e203634313531.roa
File:                     3134382e3232322e3232362e302f32342d3234203d3e203634313531.roa (raw, json)
Hash identifier:          HKd1NMyH67hRW9MbzK0YIbqd/fQZxanGYBDVceabJnE=
Subject key identifier:   A9:A4:E0:90:05:12:1C:A5:4E:07:FD:B8:CB:DD:19:11:F9:2F:A2:6C
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       28801E9AC27F1EB2DD7B07075C73097ABD6E2D6B
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232362e302f32342d3234203d3e203634313531.roa
Signing time:             Wed 23 Jul 2025 23:26:29 +0000
ROA not before:           Wed 23 Jul 2025 23:21:29 +0000
ROA not after:            Wed 22 Jul 2026 23:26:29 +0000
asID:                     64151
IP address blocks:        148.222.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 22:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:80:1e:9a:c2:7f:1e:b2:dd:7b:07:07:5c:73:09:7a:bd:6e:2d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Jul 23 23:21:29 2025 GMT
            Not After : Jul 22 23:26:29 2026 GMT
        Subject: CN=A9A4E09005121CA54E07FDB8CBDD1911F92FA26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:12:47:42:79:f8:2f:b2:0a:01:eb:ed:78:
                    e1:54:b0:3d:93:38:79:58:db:f6:f2:8b:17:65:e2:
                    b1:7d:11:85:1b:f9:af:eb:bc:ec:e1:b1:a1:c5:e9:
                    e8:a5:05:1c:25:80:d0:83:3d:93:8d:8c:33:82:e9:
                    da:33:45:45:d5:8f:21:36:be:ff:b3:c5:90:40:a4:
                    e4:be:f0:e0:18:55:9d:bd:c6:7c:3c:7d:75:00:ad:
                    66:10:bc:92:b5:c8:d0:3f:8f:d0:d4:26:fe:c2:6d:
                    b2:8f:6f:19:59:9e:09:f8:ac:f2:b3:88:ba:a9:ac:
                    d4:5e:e0:0c:a2:81:eb:9a:93:de:fd:8d:00:e3:59:
                    28:75:c7:bf:bc:77:97:38:f8:e0:94:96:3b:64:ff:
                    c6:ca:19:7e:74:dc:2a:ca:38:3e:95:07:5f:7e:8f:
                    de:2e:56:57:f3:aa:aa:c4:d6:d6:f3:c4:44:af:94:
                    41:00:8d:63:a4:a3:8a:94:1a:10:19:49:01:c6:5e:
                    79:20:d9:9e:7d:09:37:78:9c:e9:6e:50:36:3c:6b:
                    d3:a0:ca:77:61:d2:8e:c9:8d:df:b5:6c:28:01:c0:
                    31:8b:1f:71:c9:5b:c9:ee:78:82:09:da:84:b2:43:
                    ed:74:d5:d7:e2:26:91:3e:68:73:fb:ca:a4:0a:6e:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A4:E0:90:05:12:1C:A5:4E:07:FD:B8:CB:DD:19:11:F9:2F:A2:6C
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232362e302f32342d3234203d3e203634313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:89:80:1f:9c:17:41:d7:cb:98:2c:ba:15:87:8a:61:de:ef:
         2a:95:27:07:34:3b:3d:e2:ef:50:1b:34:0a:f6:dd:3f:49:21:
         c5:86:36:09:3e:d7:f2:60:3b:9e:73:47:49:6e:1c:b8:e5:66:
         96:62:4b:15:a7:67:e2:c9:81:6d:71:43:1a:c1:05:fe:48:10:
         e2:57:44:b6:f2:bd:11:18:69:de:01:c8:74:ab:fe:6f:7b:90:
         7c:f2:e5:53:e2:19:4f:77:90:fc:a6:9f:c3:bd:93:c6:0f:4d:
         ed:c3:e1:6e:54:2a:51:12:5c:02:f7:4a:bc:41:a2:7a:ce:e9:
         c9:75:09:88:b7:6c:35:fa:55:ce:19:6f:1a:75:b9:02:59:a0:
         f3:b3:30:9c:18:fc:0e:6b:7a:dc:1a:fb:a6:3c:d2:2c:91:ca:
         0c:c2:86:58:00:30:1d:42:f8:95:5b:61:0a:0a:9b:cf:e5:8c:
         8f:7f:77:14:b1:87:a7:04:a6:76:ad:db:b5:70:4c:31:0f:c4:
         b1:2c:12:fc:91:38:d7:a5:96:17:6a:dc:3f:46:ec:ee:fd:20:
         80:b0:f2:92:6c:d2:9a:f0:1e:53:d3:0c:57:4b:95:85:e2:cc:
         97:46:37:81:a7:65:19:25:61:b0:ac:e2:e2:08:2e:3e:e4:e5:
         05:11:bb:07
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKIAemsJ/HrLdewcHXHMJer1uLWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCRTg1MzUxNkE2RDM1OTBGMkM5RUQ0QjZCOTQ2OTZD
NDE1Rjg4RjAeFw0yNTA3MjMyMzIxMjlaFw0yNjA3MjIyMzI2MjlaMDMxMTAvBgNV
BAMTKEE5QTRFMDkwMDUxMjFDQTU0RTA3RkRCOENCREQxOTExRjkyRkEyNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCidxJHQnn4L7IKAevteOFUsD2T
OHlY2/byixdl4rF9EYUb+a/rvOzhsaHF6eilBRwlgNCDPZONjDOC6dozRUXVjyE2
vv+zxZBApOS+8OAYVZ29xnw8fXUArWYQvJK1yNA/j9DUJv7CbbKPbxlZngn4rPKz
iLqprNRe4Ayigeuak979jQDjWSh1x7+8d5c4+OCUljtk/8bKGX503CrKOD6VB19+
j94uVlfzqqrE1tbzxESvlEEAjWOko4qUGhAZSQHGXnkg2Z59CTd4nOluUDY8a9Og
yndh0o7Jjd+1bCgBwDGLH3HJW8nueIIJ2oSyQ+101dfiJpE+aHP7yqQKbvwZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUqaTgkAUSHKVOB/24y90ZEfkvomwwHwYDVR0j
BBgwFoAUkr6FNRam01kPLJ7UtrlGlsQV+I8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzY4REYwMENDOTI4QTBGREVERUUxQkE1M0NCOUM0NjI2
RTVFMTA1MDc2RUVFQjZCQTI0QkUxN0EzNkIxNEYyLzAvOTJCRTg1MzUxNkE2RDM1
OTBGMkM5RUQ0QjZCOTQ2OTZDNDE1Rjg4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkJFODUzNTE2QTZEMzU5MEYy
QzlFRDRCNkI5NDY5NkM0MTVGODhGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzc2OERGMDBDQzkyOEEwRkRFREVFMUJBNTNDQjlDNDYyNkU1RTEwNTA3
NkVFRUI2QkEyNEJFMTdBMzZCMTRGMi8wLzMxMzQzODJlMzIzMjMyMmUzMjMyMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjM0MzEzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlN7i
MA0GCSqGSIb3DQEBCwUAA4IBAQBWiYAfnBdB18uYLLoVh4ph3u8qlScHNDs94u9Q
GzQK9t0/SSHFhjYJPtfyYDuec0dJbhy45WaWYksVp2fiyYFtcUMawQX+SBDiV0S2
8r0RGGneAch0q/5ve5B88uVT4hlPd5D8pp/DvZPGD03tw+FuVCpRElwC90q8QaJ6
zunJdQmIt2w1+lXOGW8adbkCWaDzszCcGPwOa3rcGvumPNIskcoMwoZYADAdQviV
W2EKCpvP5YyPf3cUsYenBKZ2rdu1cEwxD8SxLBL8kTjXpZYXatw/Ruzu/SCAsPKS
bNKa8B5T0wxXS5WF4syXRjeBp2UZJWGwrOLiCC4+5OUFEbsH
-----END CERTIFICATE-----
Generated at Fri Jul 25 18:26:20 2025 by rpki-client