Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3136203d3e20323730313439.roa
File:                     3134382e3230382e302e302f31362d3136203d3e20323730313439.roa (raw, json)
Hash identifier:          cVEU6mGzw0kEfUdXlCMgpN/ZuxtahkRWFH9wSiMxC9g=
Subject key identifier:   9A:A9:2E:F1:84:B2:A0:B0:41:46:C2:4F:E1:4A:7C:8A:B0:95:09:90
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       03B9ABF84E8370369AF03CE9C389C175F247CAC9
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3136203d3e20323730313439.roa
Signing time:             Fri 29 Aug 2025 00:41:44 +0000
ROA not before:           Fri 29 Aug 2025 00:36:44 +0000
ROA not after:            Fri 28 Aug 2026 00:41:44 +0000
asID:                     270149
IP address blocks:        148.208.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 22:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b9:ab:f8:4e:83:70:36:9a:f0:3c:e9:c3:89:c1:75:f2:47:ca:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Aug 29 00:36:44 2025 GMT
            Not After : Aug 28 00:41:44 2026 GMT
        Subject: CN=9AA92EF184B2A0B04146C24FE14A7C8AB0950990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:94:13:4b:6f:85:b5:68:2e:65:58:d8:1c:
                    cb:6b:62:62:d8:0c:9c:e8:b5:08:02:d4:cf:16:df:
                    be:93:4a:c2:ad:27:29:4e:ba:e2:b7:06:bd:80:1c:
                    25:2a:4e:5a:44:24:37:14:1f:c3:69:49:53:1c:79:
                    36:36:59:d1:2e:10:20:ed:39:7d:1c:ce:cc:f6:0a:
                    43:0b:76:95:a0:b5:58:19:f3:9f:e2:d8:9d:d3:10:
                    d3:cb:61:42:c1:77:2c:a3:40:2f:19:19:a2:b5:12:
                    78:86:86:2c:4c:36:4b:40:41:89:f0:ee:a6:f9:3d:
                    2c:aa:ef:3a:07:d5:4e:3b:ea:38:48:b4:2e:e6:7e:
                    b7:5a:75:d4:75:f3:2f:cd:e7:4a:72:99:b3:fe:b4:
                    f0:a9:0d:63:1d:8f:dd:c8:ba:e3:3c:c7:0e:5d:5e:
                    63:e4:8e:f3:c2:cc:1a:2a:21:83:4b:0c:64:b5:b7:
                    bd:05:c7:09:06:33:fa:70:31:ee:2b:0a:e3:54:a4:
                    75:fc:fe:27:c7:36:75:49:1e:6c:08:33:8e:44:39:
                    8e:84:da:0c:78:b2:d9:99:3d:c8:e6:27:3c:d2:a5:
                    b7:b9:38:60:8c:ef:0e:b9:94:91:86:6f:3e:63:d8:
                    14:02:68:ed:b4:ad:28:9d:5f:9e:ba:13:36:88:ca:
                    a9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A9:2E:F1:84:B2:A0:B0:41:46:C2:4F:E1:4A:7C:8A:B0:95:09:90
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3136203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:84:3e:c0:0b:5b:b9:3e:2c:f3:e5:7a:6d:9d:76:ea:b1:08:
         f4:85:71:77:20:97:5a:f8:05:6d:e5:6d:cc:80:19:b6:da:3d:
         e5:e7:cd:a8:03:d6:ab:de:bb:74:24:17:09:3e:3b:d5:51:e3:
         9a:e3:71:4a:09:30:ff:20:f3:4e:b4:ea:4f:c2:01:7f:44:17:
         1c:ed:7e:cf:72:3f:bb:12:e2:31:b7:d7:72:ab:0a:5b:d2:da:
         1c:08:92:62:33:40:8a:88:5b:7a:fb:bf:4a:22:5d:fd:48:be:
         34:66:4d:6d:02:69:e3:b6:68:6b:35:43:31:a6:08:9e:b8:1d:
         01:da:ce:5c:0d:3e:a3:7d:1a:b0:34:e5:c5:9a:13:6b:c8:c4:
         fa:64:fe:97:25:c8:0f:0d:76:fd:8a:24:b6:81:a8:a5:9f:88:
         b0:ab:1c:d4:63:3a:19:8a:b3:49:9b:dc:39:d6:24:bc:38:a1:
         c1:40:15:ab:11:ed:fa:4e:7e:67:85:2b:71:3d:53:d2:78:bb:
         26:3b:ae:98:8e:1b:12:3c:f7:e8:41:52:fd:45:cb:15:b0:ce:
         82:d2:a2:44:79:ca:05:33:5b:84:28:8b:fa:9c:33:ed:d9:a3:
         d9:1d:e2:6f:d1:ae:59:61:28:22:d3:34:54:24:47:92:9a:d9:
         19:f8:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:39:50 2025 by rpki-client