Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134382e3232322e3139322e302f31392d3234203d3e203134353933.roa
File:                     3134382e3232322e3139322e302f31392d3234203d3e203134353933.roa (raw, json)
Hash identifier:          HyVuKIpxatTaDP6zb/BNP3dyPo/zJWMkXLzipp4Al9k=
Subject key identifier:   DB:64:0C:7E:73:80:7A:39:5C:18:A7:A2:A1:99:41:3C:99:7C:42:EB
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       01AB07A69D599BC7D3CC81CE589F47691D920A5C
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134382e3232322e3139322e302f31392d3234203d3e203134353933.roa
Signing time:             Thu 18 Sep 2025 16:47:12 +0000
ROA not before:           Thu 18 Sep 2025 16:42:12 +0000
ROA not after:            Thu 17 Sep 2026 16:47:12 +0000
asID:                     14593
IP address blocks:        148.222.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ab:07:a6:9d:59:9b:c7:d3:cc:81:ce:58:9f:47:69:1d:92:0a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Sep 18 16:42:12 2025 GMT
            Not After : Sep 17 16:47:12 2026 GMT
        Subject: CN=DB640C7E73807A395C18A7A2A199413C997C42EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:f3:c0:22:a1:49:33:f7:be:dc:f8:f2:2f:
                    04:d9:b7:34:c0:00:c6:39:2b:3c:f4:1d:a0:fe:af:
                    96:59:ac:fd:d0:b0:54:42:e5:75:53:5d:72:8f:0c:
                    65:6d:84:26:15:74:f0:12:3c:d9:d8:91:d7:e8:65:
                    51:aa:54:db:be:ba:0a:c3:b2:4d:6a:1b:41:dc:e5:
                    53:c9:11:a8:c3:0a:72:0d:6b:ce:05:53:2f:98:26:
                    9f:7d:0c:a5:b2:b9:c2:30:8f:46:d2:b0:33:29:a0:
                    7d:70:e5:36:8d:2c:ea:f3:06:b2:5d:5a:bb:80:f7:
                    93:bf:88:24:87:b7:22:9d:9a:07:f0:ba:86:b3:82:
                    62:54:64:77:a0:07:b5:8d:83:77:c5:1d:76:48:a0:
                    09:ba:c7:b3:b8:17:9d:14:b3:6c:e0:bc:3d:6b:d9:
                    93:d3:e3:0f:e9:ab:87:d0:6a:a3:9e:48:e8:4d:26:
                    c3:5e:fd:c2:5b:79:81:72:ba:5f:8e:2d:0a:eb:04:
                    4c:68:8e:52:1a:c9:af:53:76:f5:1b:93:94:54:38:
                    ab:ad:3f:f7:9c:f2:f0:fc:75:f2:68:07:70:3f:a9:
                    9a:c1:7b:97:05:4d:ac:7b:7d:31:8d:01:79:97:f7:
                    68:f7:8e:ed:75:2c:e8:3e:7a:6a:75:d0:23:3e:1d:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:64:0C:7E:73:80:7A:39:5C:18:A7:A2:A1:99:41:3C:99:7C:42:EB
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134382e3232322e3139322e302f31392d3234203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         33:df:9d:88:09:50:85:f4:a0:19:03:af:6f:14:9b:b4:8c:d6:
         63:b6:1d:94:cd:47:a2:e1:0e:4e:cc:af:dc:eb:0a:c6:d2:6b:
         93:45:3f:53:95:08:f4:f3:0a:e1:20:f6:35:a6:e1:e0:8e:a6:
         36:b4:ac:a0:98:5e:07:46:9f:c0:b0:85:56:f4:50:22:32:a2:
         ca:a9:de:17:f9:c3:55:7b:20:39:4f:d6:90:f6:90:1f:08:37:
         35:4e:b1:f8:0e:19:2f:f7:d2:5f:51:d1:4a:b3:ad:e7:8a:b5:
         0b:b8:f8:fd:89:51:84:d4:df:1f:9f:1e:04:36:6d:1c:32:1f:
         e7:cc:46:fb:8c:bd:75:fe:aa:19:0d:f8:5a:3e:35:c6:59:50:
         d8:15:cb:a1:14:d3:a1:1b:77:42:76:03:00:96:b2:ea:85:f9:
         0a:a1:e0:03:ed:f2:d4:5e:9d:b5:10:30:ee:20:c0:dd:15:9d:
         68:e5:0d:bd:06:f4:35:0b:3c:e4:dc:41:b8:a6:59:d9:09:b2:
         8b:c7:57:8e:74:23:ef:5d:a6:83:50:0b:10:1b:61:fc:f7:73:
         8f:b7:71:29:7c:1f:fc:52:98:7e:d5:b7:10:54:4d:5d:0b:8f:
         25:c1:08:7f:29:69:85:9f:59:3d:b7:14:34:29:4f:10:ba:e1:
         16:77:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:25:22 2025 by rpki-client