Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3233302e32342e302f32312d3234203d3e203233323433.roa
File:                     3134382e3233302e32342e302f32312d3234203d3e203233323433.roa (raw, json)
Hash identifier:          qxnKkW5JnQLWpPSNH1ZsbfNrZ4ZDZZYdo38VTJI24Eg=
Subject key identifier:   EF:32:EF:8D:12:36:31:80:78:0B:1E:1A:F7:5E:92:F2:62:52:DF:1A
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       3306C004F912D1940C1C98E45D9480A4B944A1F4
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3233302e32342e302f32312d3234203d3e203233323433.roa
Signing time:             Wed 01 Oct 2025 16:49:18 +0000
ROA not before:           Wed 01 Oct 2025 16:44:18 +0000
ROA not after:            Wed 30 Sep 2026 16:49:18 +0000
asID:                     23243
IP address blocks:        148.230.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Oct 2025 00:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:06:c0:04:f9:12:d1:94:0c:1c:98:e4:5d:94:80:a4:b9:44:a1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Oct  1 16:44:18 2025 GMT
            Not After : Sep 30 16:49:18 2026 GMT
        Subject: CN=EF32EF8D12363180780B1E1AF75E92F26252DF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:79:a1:b5:83:0c:79:38:5f:e3:7b:f8:0e:
                    7e:84:47:56:08:db:80:08:f8:c1:a5:ca:87:48:57:
                    5c:5f:bf:49:4c:c3:82:9f:fb:62:67:fa:31:eb:c6:
                    56:c1:ee:76:17:63:0a:b4:2c:6d:45:5f:07:b4:ec:
                    24:98:0c:7e:80:2e:00:7f:75:b5:96:9a:ca:16:9d:
                    4b:56:25:03:cb:48:c8:33:aa:e4:14:00:e4:97:34:
                    ce:09:43:45:4e:06:11:d5:67:ce:7c:e4:7e:f0:88:
                    96:f8:d0:57:d9:8b:68:23:48:7d:73:42:60:c7:a6:
                    72:c8:97:07:86:9b:91:9e:6d:43:05:a1:5a:f0:c8:
                    ab:c4:61:8c:f4:d9:8a:e2:07:93:18:42:bf:db:c0:
                    46:82:bd:af:41:e4:8a:ea:6b:cb:19:87:4e:dd:32:
                    bf:94:f3:55:ff:2c:59:c2:22:be:d5:83:84:1c:66:
                    c0:f9:13:b7:a1:cd:af:a2:5d:09:4e:da:20:2c:a2:
                    54:02:d9:93:a7:a6:40:cb:70:f4:1c:46:c9:88:67:
                    9c:ed:3a:f7:5e:77:cb:88:d4:1d:c7:55:d4:59:d0:
                    f2:76:02:94:5d:fb:46:48:6a:e3:6b:5d:91:cf:69:
                    8d:67:5c:71:9e:19:63:27:3e:0e:be:d4:b5:16:2b:
                    10:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:32:EF:8D:12:36:31:80:78:0B:1E:1A:F7:5E:92:F2:62:52:DF:1A
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3134382e3233302e32342e302f32312d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.230.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:f2:66:ba:86:f9:41:ef:c2:0b:91:29:e9:f9:b0:cf:ae:77:
         2a:47:c2:af:a2:65:b8:0a:7c:ce:f9:8b:49:54:7b:b6:d5:1c:
         c6:29:e9:8d:4e:1e:9e:94:de:07:f5:76:38:f3:7c:a4:62:fa:
         cb:60:93:01:3f:a8:41:c8:61:94:69:b5:e0:af:8e:1e:ae:0d:
         47:78:80:3a:a0:2f:e7:8a:ae:35:bc:2e:95:5c:55:27:d1:1c:
         bb:11:09:28:a4:ba:f3:7b:68:a3:80:66:af:a6:18:a4:21:d7:
         f3:82:58:26:9c:9e:8e:3c:51:84:15:d1:9a:dc:99:75:e5:ce:
         d5:09:67:23:f5:91:9f:41:2c:6a:71:57:1f:59:d5:cf:d2:75:
         2a:bf:36:66:3e:1c:dd:93:14:77:5d:8b:36:5c:bf:8f:65:b5:
         80:93:60:ec:5c:09:28:61:02:5d:0f:e1:4f:a6:ff:5a:87:b3:
         94:23:18:58:be:eb:11:53:aa:ad:1e:03:b9:91:cb:c0:ac:a2:
         3d:bf:ff:ce:d9:86:a7:f0:46:cc:1c:c1:56:3a:ad:cf:06:d1:
         be:ca:0c:e2:36:6b:62:8a:c7:51:18:12:03:6d:0a:e3:2a:1e:
         f1:35:7b:40:c1:3e:2d:a0:a6:2c:7d:0a:57:0a:14:da:01:6b:
         02:68:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:17:04 2025 by rpki-client