Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e34382e302f32302d3234203d3e203231353735.roa
File:                     3134382e3130322e34382e302f32302d3234203d3e203231353735.roa (raw, json)
Hash identifier:          DQOZtgzpjdb4r9Xu3gghst0kg0kUF24Cr/daySbvJ2M=
Subject key identifier:   15:45:3D:30:F0:3E:F5:74:F9:1D:F5:E5:0E:1D:F3:FF:1F:28:26:BC
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       07D10F8F39394AB60331E6C975E53ACCEBEF3E6C
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e34382e302f32302d3234203d3e203231353735.roa
Signing time:             Tue 04 Feb 2025 18:42:33 +0000
ROA not before:           Tue 04 Feb 2025 18:37:33 +0000
ROA not after:            Tue 03 Feb 2026 18:42:33 +0000
asID:                     21575
IP address blocks:        148.102.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d1:0f:8f:39:39:4a:b6:03:31:e6:c9:75:e5:3a:cc:eb:ef:3e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Feb  4 18:37:33 2025 GMT
            Not After : Feb  3 18:42:33 2026 GMT
        Subject: CN=15453D30F03EF574F91DF5E50E1DF3FF1F2826BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:d6:58:10:71:fd:7b:9a:fa:01:ba:d2:f9:
                    23:4a:6d:93:87:56:d7:ec:b3:65:a1:9d:2a:66:c0:
                    fa:71:54:d4:38:fc:de:8a:44:4d:a2:3e:6b:69:92:
                    bc:34:32:03:45:df:97:a6:d2:2b:b0:5a:42:26:b1:
                    9f:2f:16:f7:00:a9:15:41:8d:16:36:55:e4:2d:64:
                    fd:9a:5a:3f:1d:f4:39:c1:03:a3:81:74:f8:a7:e9:
                    ac:6c:e8:75:80:d4:c3:25:3e:7d:4f:14:17:7f:d3:
                    b9:9e:78:93:50:56:14:4f:e3:0d:5c:ed:14:e8:86:
                    65:67:ec:94:54:37:a7:7a:b4:95:34:f6:3b:11:11:
                    85:e7:a5:f5:5a:56:42:ec:ff:58:86:74:41:31:bd:
                    a5:8e:20:21:93:23:64:c7:79:db:61:38:04:da:88:
                    98:d5:f9:8d:fe:ba:a1:0e:11:82:99:b5:ce:c2:76:
                    92:5a:7f:a9:8f:9b:10:51:45:dc:2c:e1:a1:8f:6d:
                    2d:64:fa:02:5f:b4:e6:e7:b6:f1:3f:ac:c7:96:e6:
                    1b:bd:da:40:33:5c:ed:f1:fa:7e:c9:d7:a6:06:e2:
                    ed:64:b7:90:0c:e5:62:83:55:18:55:22:af:9e:2d:
                    a2:72:be:a2:18:54:e7:97:12:19:dc:7e:02:5d:08:
                    ee:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:45:3D:30:F0:3E:F5:74:F9:1D:F5:E5:0E:1D:F3:FF:1F:28:26:BC
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e34382e302f32302d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:cb:ed:bf:bf:4f:e9:c6:b6:f8:29:87:30:57:05:63:19:4f:
         db:53:4a:91:70:0d:ac:03:37:7e:91:f7:39:f4:0f:99:da:57:
         fa:ae:ed:6a:c6:3d:d1:b9:d5:b3:b9:9d:6a:06:92:5c:f4:ea:
         cc:53:18:ac:ee:ba:21:7b:8d:e5:78:77:bc:80:86:6a:d3:b4:
         f4:10:fd:bc:02:5f:14:1d:a6:dc:07:8c:c1:c3:4d:df:4f:60:
         01:ff:42:98:40:b2:10:c3:69:bf:f1:2b:cf:93:28:28:73:25:
         45:de:4b:d3:7f:d5:c9:b4:52:5c:42:53:2f:01:81:90:5f:d9:
         10:c6:5c:87:96:79:68:81:a8:d7:7d:27:ce:f1:ed:af:16:3c:
         fd:32:f1:43:ed:88:73:52:45:c5:04:ae:25:48:29:8e:14:08:
         c8:ff:3c:f3:d3:0c:ef:89:cd:d1:76:6e:b6:8a:60:1d:f4:ea:
         62:40:46:e5:23:90:49:ef:5a:06:22:fe:c4:9a:0d:8f:a6:f8:
         e2:06:85:b7:7f:bd:6f:94:f6:e4:62:60:7e:7e:cb:d8:5c:61:
         88:36:19:15:be:78:01:08:44:cf:e2:e3:06:1f:d5:c7:d8:2a:
         77:69:ef:66:e1:14:d4:59:bc:24:36:2b:04:5e:fb:a7:ee:8d:
         ae:91:d7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:34 2025 by rpki-client