Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37352e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e37352e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          injxvWSeifb26Fs3S5FclfSCxsmq/gAfwMVsAT00QxQ=
Subject key identifier:   2C:90:46:A4:48:83:F8:DB:52:37:FC:24:80:A4:E5:A2:85:3C:1F:D8
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       0B4F25B6582DE7D2B436EA11E2DB157DCD85289B
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37352e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 04 Feb 2025 18:18:55 +0000
ROA not before:           Tue 04 Feb 2025 18:13:55 +0000
ROA not after:            Tue 03 Feb 2026 18:18:55 +0000
asID:                     22011
IP address blocks:        148.243.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4f:25:b6:58:2d:e7:d2:b4:36:ea:11:e2:db:15:7d:cd:85:28:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:55 2025 GMT
            Not After : Feb  3 18:18:55 2026 GMT
        Subject: CN=2C9046A44883F8DB5237FC2480A4E5A2853C1FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:dc:33:b8:33:db:34:54:e7:2b:b9:51:4d:
                    30:ec:3f:64:2d:80:62:d1:5a:2d:b6:68:cb:cd:e9:
                    4e:9a:2f:1a:46:0d:5e:03:76:10:25:0a:e8:47:7e:
                    a1:a2:33:14:54:cb:72:c7:13:e1:bd:62:c7:1d:69:
                    0c:d6:41:5f:33:28:40:06:8b:37:09:e5:7e:78:33:
                    e0:9e:78:0b:7a:3d:fa:9f:98:d7:c0:89:ff:e5:29:
                    e9:f4:68:94:50:28:e6:a3:4c:22:8a:2e:2b:bb:44:
                    5e:65:69:3b:ac:94:3e:f9:65:58:e3:45:08:f4:46:
                    05:ca:5a:48:1e:11:8d:d8:59:62:49:c7:65:91:a7:
                    85:2d:84:cb:1f:d9:07:dc:d6:3c:09:1d:32:63:67:
                    cb:ad:a3:67:26:c5:10:13:62:30:5e:df:00:f9:82:
                    08:a3:81:42:bd:7f:ed:d3:ad:86:d5:a6:8f:a2:b0:
                    3e:00:ec:60:8b:6b:9e:e7:6e:9f:25:fd:3d:f1:43:
                    d2:5a:af:3c:f2:ce:ad:97:c9:a4:70:f2:c5:3e:0e:
                    5d:24:82:98:b0:85:8f:6b:8b:58:93:26:c3:2b:7b:
                    95:60:ba:24:4e:aa:f5:3e:5e:67:fa:55:e4:28:c7:
                    c7:68:fd:71:72:e3:29:29:86:fa:47:a4:b4:53:ff:
                    89:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:90:46:A4:48:83:F8:DB:52:37:FC:24:80:A4:E5:A2:85:3C:1F:D8
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37352e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:23:b1:dd:8c:90:de:70:9a:0d:2e:07:7b:26:3b:60:fc:aa:
         b8:3d:c6:7e:d9:6c:9d:7a:eb:f8:a9:ad:7f:8c:67:88:80:a5:
         88:ee:bb:da:79:6e:ae:1d:26:d4:c4:f0:29:87:ef:c6:4d:02:
         6f:fd:1c:85:82:aa:57:e9:56:5c:09:fc:64:00:20:a8:b2:3d:
         ca:7e:42:5c:03:4d:9a:60:a2:c0:6c:c9:a5:1c:45:62:54:4b:
         c0:be:e1:a8:2a:3b:06:8d:36:e7:81:f3:45:68:99:db:fa:54:
         4a:10:8c:4e:dd:e8:54:58:1e:d9:25:b3:0f:fe:25:6a:0d:98:
         50:3a:56:7e:47:51:c6:40:37:d0:d9:ac:b7:75:cc:13:8b:b0:
         aa:4a:01:62:ad:52:50:18:19:08:6a:8e:99:f1:73:a3:35:e5:
         6d:ee:a0:bc:44:26:7d:93:db:97:27:63:75:37:c5:ef:b9:cf:
         61:61:80:ae:12:06:07:4e:a6:c0:32:92:25:91:87:f3:fb:a5:
         48:a4:72:30:43:f9:47:97:83:9f:20:d0:1d:72:5e:7a:46:8f:
         b2:eb:b4:64:50:6f:1d:ea:7b:4d:24:ac:f9:75:e1:6b:a4:70:
         d0:28:1f:e8:20:7a:0e:22:65:78:c7:80:1e:6a:3b:2a:33:2b:
         7a:9b:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:18:53 2025 by rpki-client