Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3134382e3230322e3132382e302f31372d3137203d3e2032353439.roa
File:                     3134382e3230322e3132382e302f31372d3137203d3e2032353439.roa (raw, json)
Hash identifier:          8aFVvvoJQL7a9tlu3seiNZGLQ4P+5ZfeGIDaRkiOg/8=
Subject key identifier:   10:54:4A:C7:2F:18:F0:8A:8D:E9:D6:B4:49:28:11:95:9C:CA:7E:98
Certificate issuer:       /CN=50898D14E85F6BDE9012499897EB13E5874E5B62
Certificate serial:       1E17E8798B09B649CD7A51CE7E72328FABD0C1D3
Authority key identifier: 50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3134382e3230322e3132382e302f31372d3137203d3e2032353439.roa
Signing time:             Sat 10 May 2025 03:18:16 +0000
ROA not before:           Sat 10 May 2025 03:13:16 +0000
ROA not after:            Sat 09 May 2026 03:18:16 +0000
asID:                     2549
IP address blocks:        148.202.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:17:e8:79:8b:09:b6:49:cd:7a:51:ce:7e:72:32:8f:ab:d0:c1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50898D14E85F6BDE9012499897EB13E5874E5B62
        Validity
            Not Before: May 10 03:13:16 2025 GMT
            Not After : May  9 03:18:16 2026 GMT
        Subject: CN=10544AC72F18F08A8DE9D6B4492811959CCA7E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:bb:21:67:a2:d1:b6:29:09:ee:6a:de:84:
                    d6:70:21:f7:52:fe:d3:6b:e4:e0:94:0d:69:d5:a6:
                    45:99:85:f3:bf:52:f4:20:f4:9a:21:85:bb:37:59:
                    2b:32:6d:7c:cf:db:87:fb:95:52:6b:ff:bf:b6:e2:
                    c8:77:72:fb:1a:44:6f:a3:f6:19:a2:e4:50:98:95:
                    59:b3:72:86:71:b8:cc:f4:ba:f9:1b:ae:31:01:b5:
                    5f:40:87:08:76:f5:c0:0a:20:f4:38:ba:c8:63:59:
                    cf:05:a2:a2:7d:df:70:b4:d9:f3:82:18:40:35:3e:
                    41:05:95:53:25:d9:92:91:7a:82:f3:b3:92:92:70:
                    33:8d:cd:fc:bf:fa:df:e8:58:6f:0e:da:89:66:bf:
                    9e:26:1a:55:fa:97:5c:fb:13:ff:22:5c:dc:1f:6d:
                    cf:2f:54:5c:a5:c8:5b:d6:25:ab:1f:22:86:13:9c:
                    d1:aa:ef:ba:92:0f:ae:fd:cc:f6:70:46:a9:ae:37:
                    1e:c1:97:d7:56:e3:53:79:f3:33:f0:a9:44:29:1d:
                    63:b6:22:18:c5:66:92:69:91:47:54:f5:3f:11:93:
                    fc:59:04:9e:e8:bd:64:7b:8e:e7:34:e9:68:c7:fa:
                    6b:8d:e7:f2:e8:54:55:13:11:c5:46:1e:ba:54:f4:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:54:4A:C7:2F:18:F0:8A:8D:E9:D6:B4:49:28:11:95:9C:CA:7E:98
            X509v3 Authority Key Identifier:
                keyid:50:89:8D:14:E8:5F:6B:DE:90:12:49:98:97:EB:13:E5:87:4E:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/50898D14E85F6BDE9012499897EB13E5874E5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50898D14E85F6BDE9012499897EB13E5874E5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D4D58C520956C2B5FA6BE9F13DD7CBFB484981CD249B654A71A9DCFC2680324/0/3134382e3230322e3132382e302f31372d3137203d3e2032353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.202.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7c:c3:33:bd:23:83:bd:34:a0:db:00:ac:fd:89:77:9a:fa:39:
         d1:f7:6b:b9:42:ad:f4:c2:95:35:50:38:6a:72:bd:69:44:71:
         13:22:5b:ea:14:fa:48:0f:9a:b8:f2:2a:f2:16:47:b8:87:6d:
         fe:74:95:d8:e4:7a:a6:4a:fb:c2:1a:43:51:ce:aa:a9:53:d3:
         11:10:d2:06:f0:e6:bd:ac:a0:92:cd:52:6e:5b:f4:e7:3b:b6:
         fa:49:cb:a1:a6:52:ad:75:cd:d3:8b:06:8d:d7:07:5d:e7:5d:
         3b:68:d5:6a:e8:ff:30:b8:09:0e:28:d7:a9:12:65:bd:a5:50:
         24:91:10:4f:93:c7:46:c4:b6:0a:1a:47:28:27:90:cf:d9:e9:
         fb:4e:6e:9d:22:83:85:b6:15:3c:69:61:e7:7e:1a:6a:2b:c6:
         e8:b9:d7:86:a4:88:44:f1:7a:42:61:74:cf:0e:45:f2:40:9c:
         23:23:f9:d7:4c:36:ed:23:03:e7:6e:16:a8:ea:0c:ce:46:34:
         48:d2:b2:e8:5b:8e:d6:9a:42:d2:eb:ae:8c:0b:d5:97:d0:ef:
         e2:8e:fd:04:de:c6:32:f1:0a:23:97:e9:ba:a2:7d:aa:bf:50:
         2e:b8:df:d3:0d:56:19:e2:77:c0:52:54:5d:40:a0:54:c7:43:
         46:da:9b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:23:17 2025 by rpki-client