Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233382e302f32342d3234203d3e20323733393933.roa
File:                     3134382e3232322e3233382e302f32342d3234203d3e20323733393933.roa (raw, json)
Hash identifier:          sVMpsTaKP5xIjZSph3E7w0ISxczeWA/CEEe2bf1xzsA=
Subject key identifier:   78:C1:DA:36:C6:9E:2D:52:F2:7C:7E:21:00:61:DD:D3:6F:BC:C9:37
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       26EE594C287489EA623CB76E241AD1A3C181230B
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233382e302f32342d3234203d3e20323733393933.roa
Signing time:             Fri 31 Oct 2025 13:51:23 +0000
ROA not before:           Fri 31 Oct 2025 13:46:23 +0000
ROA not after:            Fri 30 Oct 2026 13:51:23 +0000
asID:                     273993
IP address blocks:        148.222.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 21:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ee:59:4c:28:74:89:ea:62:3c:b7:6e:24:1a:d1:a3:c1:81:23:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Oct 31 13:46:23 2025 GMT
            Not After : Oct 30 13:51:23 2026 GMT
        Subject: CN=78C1DA36C69E2D52F27C7E210061DDD36FBCC937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:80:9f:06:5a:30:a2:0c:72:2e:f8:d0:64:a8:
                    c6:e6:f5:66:27:d0:da:e6:cc:f6:b2:65:3d:cb:f1:
                    1f:58:a4:cc:f8:1c:fa:f5:a3:92:f1:52:ae:c3:db:
                    f7:3f:2f:f2:05:59:bb:a9:c8:bd:7e:95:78:db:95:
                    fe:48:4e:81:02:90:83:bb:7e:3a:16:10:52:ba:14:
                    c7:b3:84:7c:50:d9:14:f8:7a:60:12:1e:bb:06:ce:
                    e3:c2:c4:04:16:1a:f2:1c:85:0a:ea:30:20:6d:79:
                    cb:3f:b2:e7:c8:a3:95:1f:2c:61:0e:fa:a8:01:c3:
                    7a:08:a1:7e:89:fa:be:d0:82:16:48:85:b7:83:4f:
                    8c:9a:59:d1:07:0a:fb:3d:74:ba:e7:76:9c:1e:32:
                    6a:13:3f:27:b9:f0:5b:59:0e:31:6c:df:e3:66:5f:
                    d5:76:8e:07:e9:a8:7a:fe:79:27:5a:95:26:c6:ae:
                    f1:76:e4:3c:e0:aa:ed:22:93:cf:3e:00:83:8e:52:
                    8e:16:8c:87:4a:5e:96:60:f8:76:fa:e1:0b:4c:f5:
                    f8:31:28:5e:f2:95:81:85:7a:9c:0a:b6:c3:8c:a4:
                    69:27:13:45:ad:45:8e:0a:ee:5b:4c:5d:f6:97:45:
                    bb:6e:73:7e:9d:d3:5e:02:fc:3e:8f:1b:12:8b:c7:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C1:DA:36:C6:9E:2D:52:F2:7C:7E:21:00:61:DD:D3:6F:BC:C9:37
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233382e302f32342d3234203d3e20323733393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a1:26:40:c3:1c:21:2b:11:af:4b:c1:e6:83:b3:50:c1:db:
         ff:9c:b4:7f:a6:ab:e0:89:b6:c2:74:10:ed:5b:ad:ca:a2:d8:
         86:e3:63:16:f0:d3:da:26:f4:c0:ff:09:52:f3:3a:05:bc:68:
         a8:95:c4:24:7d:e1:ad:49:04:9c:38:e8:5a:80:35:3e:4c:57:
         07:95:49:39:71:84:cc:d2:a9:f6:5a:46:a9:f6:34:70:cd:a0:
         cd:39:70:f0:66:f6:72:bc:ce:8f:6a:98:0a:60:4a:62:90:57:
         78:df:ce:4f:50:01:12:ef:66:3d:b4:e6:d9:bc:f8:4a:c2:66:
         17:ff:c7:6f:80:2a:37:21:fb:fb:0f:f7:31:5e:f9:7b:8b:4f:
         0a:16:e9:e2:df:58:9d:aa:f5:94:84:de:da:fc:51:64:a1:43:
         f4:3f:90:aa:10:c4:78:b8:4c:e1:bc:b3:6e:57:db:dd:e1:05:
         a0:c4:2a:ea:2a:8a:61:60:c4:f5:db:1c:b0:89:48:89:ae:36:
         c9:74:9b:4e:e5:95:71:92:92:ef:ec:a6:2f:3a:c2:00:97:b1:
         41:40:43:74:d9:d1:96:3b:9f:6b:8e:d0:91:a0:2d:da:a6:c3:
         18:47:5d:59:22:56:a3:fd:72:f3:b4:1b:cf:95:b1:19:fa:46:
         c2:b5:db:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 15:28:22 2025 by rpki-client