Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e36362e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e36362e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          3XsfTHWMmrbXfuZYX71kiWtsqlpTyLDAzEFHlQDfAME=
Subject key identifier:   E3:EC:DA:46:67:BB:32:02:B2:D8:66:EA:99:59:D1:73:D1:72:87:A3
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       012264A8841A4704DEF7D3E0E313C565A32D881F
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e36362e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 04 Feb 2025 18:18:50 +0000
ROA not before:           Tue 04 Feb 2025 18:13:50 +0000
ROA not after:            Tue 03 Feb 2026 18:18:50 +0000
asID:                     22011
IP address blocks:        148.243.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:22:64:a8:84:1a:47:04:de:f7:d3:e0:e3:13:c5:65:a3:2d:88:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:50 2025 GMT
            Not After : Feb  3 18:18:50 2026 GMT
        Subject: CN=E3ECDA4667BB3202B2D866EA9959D173D17287A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:50:08:f3:ed:e9:60:3b:ac:26:08:99:27:
                    62:96:2b:a7:5a:d5:1c:bb:bc:00:c6:b3:dc:04:a3:
                    cb:8b:4a:ce:16:32:35:b8:b2:6d:27:68:f8:9f:b6:
                    d8:d2:44:d7:aa:ce:40:b2:5c:05:b8:be:3a:4f:27:
                    22:0f:a9:49:33:97:ee:f7:47:02:d6:5c:49:fc:95:
                    a6:83:37:bb:e2:2d:ed:8d:d7:d0:49:bc:2d:0f:bc:
                    c5:de:c6:e6:25:d5:f3:9e:b6:18:b8:3b:d9:cd:7f:
                    e9:9a:c2:bd:73:68:14:9f:f1:04:32:0f:43:91:71:
                    1d:aa:af:92:96:bf:31:59:46:6b:4c:c1:bf:01:f4:
                    e2:21:f3:19:c3:c6:eb:d9:3b:73:d4:e1:4f:a3:46:
                    fa:6e:a1:25:d6:41:c0:61:6b:54:66:bd:53:d5:92:
                    95:c0:75:f6:8b:9e:1a:ab:54:fd:58:d2:48:73:ee:
                    e3:40:62:52:7f:0b:b2:6b:8c:c2:c0:53:b2:9b:e7:
                    80:0c:57:31:ba:e1:dd:65:3a:b7:31:13:18:bf:54:
                    89:15:a1:5a:2c:19:c6:a9:28:e1:a7:79:c5:ca:d1:
                    1a:c0:81:66:09:78:db:bb:5d:c6:91:95:9d:69:ff:
                    34:84:32:f6:29:82:eb:73:0b:a7:05:7e:65:51:cb:
                    d8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EC:DA:46:67:BB:32:02:B2:D8:66:EA:99:59:D1:73:D1:72:87:A3
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e36362e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:e4:5e:cb:0e:84:3b:73:6e:46:4c:b4:99:d4:10:eb:dd:02:
         a0:c8:66:02:86:cd:32:d7:2f:fc:88:dc:b8:8d:02:70:56:1e:
         c6:64:03:97:da:87:21:1a:0e:50:3c:bb:58:12:0c:d4:4b:40:
         36:6d:61:e0:84:cf:c4:bf:d1:f1:d7:ef:53:a9:ec:f6:c8:2f:
         71:b2:e6:79:8d:8a:56:07:2c:da:8d:5d:9c:52:ab:c5:7f:f0:
         8a:ae:e9:0f:48:72:97:b8:7b:04:e5:48:32:2e:e8:a4:b1:ab:
         ef:37:e1:9b:e0:5f:d6:cc:74:7b:a3:87:6c:0e:68:6c:e3:90:
         b0:e3:a6:31:e4:85:00:84:93:18:33:91:b1:c4:a0:bc:1a:48:
         bc:cc:ad:6b:8f:47:37:67:c2:15:fb:2f:02:6f:f4:bf:a0:c5:
         0a:27:b2:5d:4f:f2:44:85:63:fb:07:26:68:ea:0c:e3:21:c9:
         9f:e0:58:4e:89:18:d8:72:bd:82:1b:cd:3c:5c:e5:26:af:cb:
         22:cb:b8:e7:a5:66:1d:ba:0c:c0:0e:29:75:6a:86:56:36:dc:
         7f:35:f1:1c:9c:51:79:cd:9d:0d:83:99:7b:73:71:b2:0e:e0:
         d9:af:a1:e9:a0:4b:39:1f:27:51:e5:6e:31:37:04:0e:7c:75:
         cf:0f:50:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:17 2025 by rpki-client