Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3134382e3233302e31352e302f32342d3234203d3e20323635363036.roa
File:                     3134382e3233302e31352e302f32342d3234203d3e20323635363036.roa (raw, json)
Hash identifier:          MTHdrMkq2VH+rC8vck35GFmtT142z8Bb+2JdfcKSSH0=
Subject key identifier:   D5:07:C0:32:CB:F9:E9:5F:7C:8F:C3:E1:73:DB:4C:DB:D4:BD:95:EC
Certificate issuer:       /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial:       03DABCBDC5B76A5DF4A5046931E2BDCF516AA522
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3134382e3233302e31352e302f32342d3234203d3e20323635363036.roa
Signing time:             Fri 13 Jun 2025 17:22:09 +0000
ROA not before:           Fri 13 Jun 2025 17:17:09 +0000
ROA not after:            Fri 12 Jun 2026 17:22:09 +0000
asID:                     265606
IP address blocks:        148.230.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 17:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:da:bc:bd:c5:b7:6a:5d:f4:a5:04:69:31:e2:bd:cf:51:6a:a5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
        Validity
            Not Before: Jun 13 17:17:09 2025 GMT
            Not After : Jun 12 17:22:09 2026 GMT
        Subject: CN=D507C032CBF9E95F7C8FC3E173DB4CDBD4BD95EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4d:f1:be:08:42:40:69:f0:4c:da:6f:a2:ed:
                    cf:db:8a:6e:0a:c4:eb:c9:28:72:62:f7:6c:7a:65:
                    c7:04:23:70:0f:c0:b4:16:cc:71:7c:2f:03:65:b5:
                    04:aa:2f:f3:a0:46:d0:b7:de:04:a5:e1:2b:03:9e:
                    a6:7d:ae:43:f8:9f:05:99:b3:35:dd:f5:6f:b9:81:
                    81:bc:96:bd:8a:24:fa:35:99:92:65:a3:91:d6:d9:
                    1f:64:7c:08:21:40:bf:8d:74:ce:ed:d0:d5:05:64:
                    b6:c5:dd:ee:78:a5:e9:f7:dd:6a:20:80:6d:18:1a:
                    50:41:79:7e:99:36:b2:db:3b:de:62:7f:8a:50:e7:
                    8b:f2:2e:ef:1e:79:de:0b:a0:c0:94:ff:53:9f:42:
                    b7:b0:f9:98:69:14:d6:5d:8d:82:f8:71:17:a9:6b:
                    09:4e:04:d7:ba:87:28:e3:eb:6e:9e:7b:e6:6e:24:
                    da:f6:28:2e:d0:73:11:06:6d:6e:a3:d0:f1:4f:5c:
                    ff:c5:19:d3:12:28:d9:bc:21:8b:83:6a:6b:da:eb:
                    57:97:7a:1c:95:6b:6c:42:bd:80:a2:1d:3c:40:7e:
                    ce:e8:1a:95:20:11:48:ec:0a:e7:3b:a5:f6:06:b2:
                    8b:1e:54:0b:60:94:e2:fd:82:e4:58:9f:82:21:71:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:07:C0:32:CB:F9:E9:5F:7C:8F:C3:E1:73:DB:4C:DB:D4:BD:95:EC
            X509v3 Authority Key Identifier:
                keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3134382e3233302e31352e302f32342d3234203d3e20323635363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.230.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:84:a4:02:a9:f6:87:5e:7e:e3:4e:8a:0e:fa:ce:8c:2b:b7:
         12:1b:f9:dc:d7:d3:2b:d2:8f:40:ae:a2:bf:5d:63:fa:5d:14:
         3e:ed:c8:b8:e5:ee:27:33:57:bb:ad:a3:d5:fc:e6:5f:42:5e:
         82:9c:b9:00:78:99:4b:0f:a4:72:ea:e2:d2:5a:16:0b:07:6f:
         7a:7c:f6:2f:45:1f:ad:a6:6a:e8:fc:c1:4c:61:29:8f:2c:b4:
         ea:0e:c9:dd:bb:e1:8b:e8:01:51:a7:27:03:52:32:8a:97:85:
         a2:df:09:e0:59:02:af:31:0e:8e:36:62:34:6d:b2:47:33:ee:
         f8:e7:d7:c3:13:b3:a7:43:a0:72:b0:98:67:46:f9:a5:6c:54:
         1b:32:7a:f6:a7:3a:56:62:a2:69:6e:18:32:06:b2:ef:19:e0:
         fa:99:d8:46:8c:01:3b:fd:4b:20:a4:38:65:83:7b:5f:49:c1:
         67:5c:15:dd:0b:24:87:f6:78:27:c8:43:45:e3:5f:9a:da:10:
         92:d4:13:a7:64:37:d6:0b:65:7c:84:dd:60:66:3f:b1:9f:80:
         3d:b9:14:bb:c2:32:19:84:1e:46:11:5e:25:20:44:30:b3:45:
         31:c0:e6:ad:4c:57:e8:83:54:af:36:de:27:a4:41:ba:44:fd:
         b1:51:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 09:17:47 2025 by rpki-client