Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e37332e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e37332e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          YkXDTCqznCU6RGLuwA0zx3/HSNg2cdbqG4HIty3RJlU=
Subject key identifier:   15:47:44:70:00:AA:56:C1:5F:FB:EB:B5:1C:62:C9:C9:12:09:C1:F2
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       70C8FA57EA4C98EF7D703D4DBE618763BEAF2D4D
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e37332e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 04 Feb 2025 18:42:36 +0000
ROA not before:           Tue 04 Feb 2025 18:37:36 +0000
ROA not after:            Tue 03 Feb 2026 18:42:36 +0000
asID:                     21575
IP address blocks:        148.102.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c8:fa:57:ea:4c:98:ef:7d:70:3d:4d:be:61:87:63:be:af:2d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Feb  4 18:37:36 2025 GMT
            Not After : Feb  3 18:42:36 2026 GMT
        Subject: CN=1547447000AA56C15FFBEBB51C62C9C91209C1F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ff:f0:76:4d:50:ef:4b:0d:f6:e4:91:8f:ce:
                    6a:fb:7c:eb:b5:2c:86:2a:5a:52:4e:c0:01:6a:54:
                    f4:9c:92:6a:f5:98:41:3d:96:43:f1:cb:b5:d4:8a:
                    4c:09:7d:75:fb:b6:b9:60:93:1a:78:cf:7a:a8:ca:
                    de:be:5e:34:9d:6d:12:17:c6:ca:cd:e6:a5:4a:e6:
                    34:0b:6d:c2:e4:be:8d:67:58:4f:3f:70:ff:fd:ef:
                    4f:16:49:48:13:18:c5:fd:7b:b5:0e:0b:ee:ff:28:
                    89:7b:a4:23:47:da:83:85:30:04:ae:3a:7f:06:2c:
                    78:0b:2b:f4:a2:d1:10:ef:3d:12:71:fe:ab:5a:90:
                    86:c9:c6:e1:ae:03:7e:06:0a:95:df:f6:65:9d:7a:
                    3a:fe:cf:66:79:f7:a3:f2:fd:d3:8a:1a:8e:62:3d:
                    18:43:b0:7a:1b:9b:bc:48:5f:82:7b:48:ea:52:8f:
                    27:43:1b:c7:7b:0e:50:32:8f:ad:e4:a2:1a:60:cd:
                    05:74:74:56:c1:78:36:4c:fb:95:a6:9e:79:98:f6:
                    92:30:36:56:e4:62:ca:3d:d9:5e:42:c3:b1:7c:95:
                    f2:f5:7d:9f:cf:8c:33:b9:2d:fb:54:14:ad:0c:29:
                    e8:db:c3:ff:7a:91:12:d0:99:47:bb:5e:4c:35:fc:
                    22:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:47:44:70:00:AA:56:C1:5F:FB:EB:B5:1C:62:C9:C9:12:09:C1:F2
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e37332e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:f5:ea:f9:d1:a0:c1:00:2e:c7:67:92:8b:8f:7a:6e:41:22:
         64:c0:d4:0c:04:51:7b:26:46:32:d9:1f:6b:05:e9:f9:4a:69:
         f1:95:f7:86:64:a8:9c:0f:41:ca:94:ef:17:53:3a:5f:b7:e7:
         8d:f3:cf:ff:e8:56:c3:91:fe:e6:27:fe:4d:fe:2f:36:d5:ef:
         9d:d4:97:63:df:05:ca:c6:d8:08:23:aa:c6:37:60:71:93:e3:
         c7:5c:4b:42:7d:30:b7:53:8e:e3:df:c3:8a:18:a9:bb:cb:5e:
         f8:bc:6e:f6:96:21:72:79:ac:d1:dd:56:2d:be:cc:f7:4c:cb:
         ec:3c:97:e0:ec:09:29:aa:be:63:a8:e0:f1:d9:31:e0:e1:ba:
         d9:f6:6e:b5:40:ef:5e:da:0e:00:fe:d8:1f:f2:75:55:2e:67:
         49:51:ef:45:b3:fb:43:4d:4f:b1:da:f7:3c:4a:41:ec:ee:4b:
         ff:3c:3f:7f:ec:53:81:7f:db:84:bc:c6:24:f8:e2:b9:3e:13:
         ae:3e:3c:45:6a:9d:1b:59:83:d8:00:25:2d:42:84:c9:77:bc:
         0c:46:e2:f6:05:6f:86:c2:78:bf:93:04:ed:7e:80:9c:f8:01:
         70:12:b2:0a:29:96:27:36:3c:4c:0c:84:95:ad:1e:fc:62:21:
         0c:93:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:46 2025 by rpki-client