Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3135382e302f32342d3234203d3e20323732333233.roa
File:                     3134382e3230382e3135382e302f32342d3234203d3e20323732333233.roa (raw, json)
Hash identifier:          5yM2beSjD58+H8eIj+c2B00/YgcOBIzo0N+bPqaHgaA=
Subject key identifier:   9E:FF:44:FF:93:D7:37:B7:6B:79:8E:B3:1E:49:0E:AC:0C:8D:62:6A
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       6CF94DF91D025FC097BCC577D0A9CF858FD98BA7
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3135382e302f32342d3234203d3e20323732333233.roa
Signing time:             Fri 29 Aug 2025 00:41:44 +0000
ROA not before:           Fri 29 Aug 2025 00:36:44 +0000
ROA not after:            Fri 28 Aug 2026 00:41:44 +0000
asID:                     272323
IP address blocks:        148.208.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 22:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f9:4d:f9:1d:02:5f:c0:97:bc:c5:77:d0:a9:cf:85:8f:d9:8b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Aug 29 00:36:44 2025 GMT
            Not After : Aug 28 00:41:44 2026 GMT
        Subject: CN=9EFF44FF93D737B76B798EB31E490EAC0C8D626A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:45:d3:d7:c9:25:46:79:bc:44:77:cc:4f:
                    3e:40:d2:ad:23:3d:77:fe:e8:84:d6:3e:9f:5a:47:
                    2b:9f:87:93:4d:ee:bd:84:72:83:13:68:28:40:bf:
                    e7:05:4e:e1:c5:7e:d4:ce:82:2b:ab:8c:f1:9b:42:
                    ed:96:39:fe:44:c1:50:ed:5b:c4:89:f7:e7:92:18:
                    d8:9e:44:26:0c:e3:89:3c:0b:83:02:35:56:18:1e:
                    63:a9:c9:9c:c7:72:ad:a3:e0:8e:24:3e:af:ad:24:
                    cc:cc:3d:57:e2:ec:ca:15:55:f1:b7:02:24:5c:cb:
                    03:db:dc:18:29:b5:e5:42:0b:1a:7a:b0:f1:24:79:
                    e9:d5:0c:e8:53:ca:12:76:b6:b6:23:b8:1d:0e:c0:
                    df:9f:3a:24:f9:9d:bf:10:d7:e5:49:96:61:59:14:
                    2f:96:d4:b3:f8:73:13:fc:33:13:9a:fc:09:63:40:
                    64:9d:3e:8d:6c:ab:f5:55:b1:56:3a:87:02:20:18:
                    af:7c:07:ef:76:8b:a4:a5:0b:93:6c:80:ca:30:2f:
                    1a:78:bd:18:a7:37:f0:15:86:fa:d4:15:59:51:74:
                    10:d6:80:0e:01:74:48:82:fa:cc:d0:c2:c8:3d:e4:
                    17:61:d7:f0:2b:3e:0f:a6:38:85:4c:8d:4f:a3:9a:
                    e3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FF:44:FF:93:D7:37:B7:6B:79:8E:B3:1E:49:0E:AC:0C:8D:62:6A
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e3135382e302f32342d3234203d3e20323732333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:f3:93:3d:66:23:a7:f3:6a:d3:fe:5f:0f:7a:00:4b:f2:75:
         93:77:5f:4e:f1:a1:00:a9:78:a8:10:39:41:11:ce:14:e9:6a:
         a4:32:6b:a9:02:bc:28:3e:c4:8b:78:01:11:fd:0c:74:2a:be:
         38:6f:ad:ad:a2:9f:6f:6d:5c:6d:a2:6f:04:54:01:12:74:45:
         b7:70:6b:18:bf:55:3d:30:c9:40:c0:fb:0f:41:6d:0a:9c:1c:
         74:51:25:bd:7d:6e:ef:4d:74:29:72:d7:37:fc:3b:0c:4a:70:
         7d:ff:86:b9:f9:2f:c8:88:0a:cb:6a:6a:db:9a:06:69:86:57:
         8a:a5:e8:55:4a:3e:13:3a:bc:17:7f:f5:9a:9a:58:24:fd:1a:
         e5:5b:03:7b:a8:48:b9:c5:82:3b:ee:12:e8:17:49:c9:50:96:
         c7:54:27:78:5c:c8:f3:39:71:42:ce:d3:67:3e:3f:b7:00:e2:
         b3:6d:6a:f9:72:a4:d1:39:eb:7b:bf:78:ca:34:18:df:a5:03:
         55:f7:45:44:d7:2f:a6:4e:e3:18:a3:21:5f:9a:e9:9b:7b:b7:
         d6:5f:5a:b7:79:65:84:21:44:54:d5:69:d8:00:e3:c7:f1:ec:
         07:e7:f6:81:7b:19:21:f9:b3:8f:82:8f:7b:ca:b1:05:7b:fb:
         e4:26:84:0f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUbPlN+R0CX8CXvMV30KnPhY/Zi6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEExMjY3RENCNERDNkZGQTlGQ0REN0ZFQTlEN0Y5Rjc4
QzM3OTFEQjAeFw0yNTA4MjkwMDM2NDRaFw0yNjA4MjgwMDQxNDRaMDMxMTAvBgNV
BAMTKDlFRkY0NEZGOTNENzM3Qjc2Qjc5OEVCMzFFNDkwRUFDMEM4RDYyNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDESEXT18klRnm8RHfMTz5A0q0j
PXf+6ITWPp9aRyufh5NN7r2EcoMTaChAv+cFTuHFftTOgiurjPGbQu2WOf5EwVDt
W8SJ9+eSGNieRCYM44k8C4MCNVYYHmOpyZzHcq2j4I4kPq+tJMzMPVfi7MoVVfG3
AiRcywPb3BgpteVCCxp6sPEkeenVDOhTyhJ2trYjuB0OwN+fOiT5nb8Q1+VJlmFZ
FC+W1LP4cxP8MxOa/AljQGSdPo1sq/VVsVY6hwIgGK98B+92i6SlC5NsgMowLxp4
vRinN/AVhvrUFVlRdBDWgA4BdEiC+szQwsg95Bdh1/ArPg+mOIVMjU+jmuNTAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUnv9E/5PXN7dreY6zHkkOrAyNYmowHwYDVR0j
BBgwFoAUihJn3LTcb/qfzdf+qdf594w3kdswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yM0I3QzY5N0U5ODhDMTQ3MjgwMTVGNzVBRDRCRDYyMTc1
NUJCMzk4NzBFQTI4MzFCM0NEMDUzQjk4ODUzM0YxLzAvOEExMjY3RENCNERDNkZG
QTlGQ0REN0ZFQTlEN0Y5Rjc4QzM3OTFEQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTEyNjdEQ0I0REM2RkZBOUZD
REQ3RkVBOUQ3RjlGNzhDMzc5MURCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjNCN0M2OTdFOTg4QzE0NzI4MDE1Rjc1QUQ0QkQ2MjE3NTVCQjM5ODcw
RUEyODMxQjNDRDA1M0I5ODg1MzNGMS8wLzMxMzQzODJlMzIzMDM4MmUzMTM1Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzMzMyMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
0J4wDQYJKoZIhvcNAQELBQADggEBAIrzkz1mI6fzatP+Xw96AEvydZN3X07xoQCp
eKgQOUERzhTpaqQya6kCvCg+xIt4ARH9DHQqvjhvra2in29tXG2ibwRUARJ0Rbdw
axi/VT0wyUDA+w9BbQqcHHRRJb19bu9NdCly1zf8OwxKcH3/hrn5L8iICstqatua
BmmGV4ql6FVKPhM6vBd/9ZqaWCT9GuVbA3uoSLnFgjvuEugXSclQlsdUJ3hcyPM5
cULO02c+P7cA4rNtavlypNE563u/eMo0GN+lA1X3RUTXL6ZO4xijIV+a6Zt7t9Zf
Wrd5ZYQhRFTVadgA48fx7Afn9oF7GSH5s4+Cj3vKsQV7++QmhA8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:39:18 2025 by rpki-client