Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134382e3234342e302e302f31382d3234203d3e203135313037.roa
File:                     3134382e3234342e302e302f31382d3234203d3e203135313037.roa (raw, json)
Hash identifier:          1QBLeEwgy1m5v6u5ROOv/iX11PAHBZGlf7BVAH903oE=
Subject key identifier:   A3:AE:B2:AE:11:4F:94:A9:4F:9F:58:DA:C1:9C:EB:D6:6C:B5:3D:3A
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       3CEDDE8477AF1FBA689AE9CECD3B35EED81C92E2
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134382e3234342e302e302f31382d3234203d3e203135313037.roa
Signing time:             Tue 04 Feb 2025 18:52:44 +0000
ROA not before:           Tue 04 Feb 2025 18:47:44 +0000
ROA not after:            Tue 03 Feb 2026 18:52:44 +0000
asID:                     15107
IP address blocks:        148.244.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ed:de:84:77:af:1f:ba:68:9a:e9:ce:cd:3b:35:ee:d8:1c:92:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:44 2025 GMT
            Not After : Feb  3 18:52:44 2026 GMT
        Subject: CN=A3AEB2AE114F94A94F9F58DAC19CEBD66CB53D3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c7:a1:03:d3:b8:73:79:d7:e2:43:2b:2b:eb:
                    98:e2:3a:9d:20:f5:c7:ce:c6:8f:99:a9:a6:bf:1a:
                    b4:6a:e8:ae:f2:5d:ea:4f:cb:5a:d1:90:44:c5:8c:
                    09:e1:40:f8:c6:e4:b7:0c:52:92:c9:6f:a8:c9:bb:
                    e0:ec:06:1f:1d:ed:cf:2b:5d:da:70:54:fd:6b:4a:
                    4f:68:aa:a5:9d:5b:ac:93:c4:6e:88:d0:65:f6:d3:
                    9f:55:cd:a0:ef:9c:fc:57:69:6f:ce:54:4d:de:51:
                    71:f3:24:79:bd:f7:fd:93:97:c0:f3:62:23:b2:a3:
                    22:38:92:e5:fe:e9:eb:72:10:c0:0c:55:67:58:7a:
                    07:86:b6:14:85:38:ef:84:35:35:42:1e:83:fa:23:
                    7d:be:72:1b:09:62:a1:d3:9c:f0:81:85:22:f5:7b:
                    0c:c6:e8:0a:1c:c0:1d:2d:af:7d:17:7c:62:33:b6:
                    46:dd:a3:59:7e:2c:f3:f2:e8:e3:34:c4:9b:a0:29:
                    a9:24:3e:93:65:9d:5a:05:bb:e5:77:7b:3c:e3:86:
                    8d:3c:b4:9c:6f:a5:b3:e2:4d:db:0b:71:0f:11:cf:
                    11:f7:91:ac:ad:8d:f5:e6:ce:4e:2b:2c:d9:0d:ac:
                    a6:64:b2:c1:6f:39:d7:a9:ca:bd:49:a7:4a:2d:7c:
                    2e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AE:B2:AE:11:4F:94:A9:4F:9F:58:DA:C1:9C:EB:D6:6C:B5:3D:3A
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134382e3234342e302e302f31382d3234203d3e203135313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.244.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:fe:9e:49:d5:9d:ed:d4:47:f1:55:56:7b:28:0b:60:77:
         75:39:66:e4:19:63:76:5d:2d:0d:65:ce:c2:3d:a6:74:0b:e2:
         01:f3:48:ed:e4:9f:a1:91:11:f2:be:9f:62:af:af:9a:63:f2:
         bc:49:c7:b3:71:cc:81:d4:03:45:00:46:a9:b2:0b:2d:0e:2d:
         21:8e:07:a0:97:88:59:95:31:e4:4b:a1:9d:74:b4:57:54:b1:
         06:37:52:31:6e:46:50:3f:c8:e3:ea:29:1d:eb:35:3d:f5:28:
         23:d5:6a:b8:37:9f:20:65:93:19:39:ad:11:a1:95:21:aa:45:
         e6:1a:04:c2:67:d6:1d:96:2e:35:09:d7:d0:91:d6:4d:fe:7e:
         f8:42:e0:33:e6:58:25:78:0e:63:8e:12:4e:f9:ec:17:56:3e:
         65:39:06:f3:66:47:21:d7:ed:74:03:3d:e5:99:9e:74:48:66:
         02:04:08:e7:5d:fd:41:8b:53:ee:16:4e:5c:37:47:d9:f2:95:
         05:e7:74:37:09:54:92:c5:49:87:ee:63:d7:82:b9:94:9c:45:
         0d:69:cf:51:29:22:58:48:31:b7:6a:9a:79:c1:f3:d5:91:23:
         de:ff:a3:ac:d3:31:7f:d1:65:76:7e:6b:d5:bf:d3:ac:10:4c:
         8e:5b:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:26:22 2025 by rpki-client