Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/3134382e3232342e35382e302f32332d3234203d3e20323730313732.roa
File:                     3134382e3232342e35382e302f32332d3234203d3e20323730313732.roa (raw, json)
Hash identifier:          +nDNQuXsqBAQNGc1hOLoyG3ji+qXfz50Qq3OdtMIWpU=
Subject key identifier:   A4:67:9B:82:13:35:3F:16:E0:92:71:2D:7C:33:42:F2:78:24:B6:8D
Certificate issuer:       /CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
Certificate serial:       3C66B80454F1917BE81D486564A2A7D22B87FABF
Authority key identifier: 73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/3134382e3232342e35382e302f32332d3234203d3e20323730313732.roa
Signing time:             Tue 13 May 2025 05:35:00 +0000
ROA not before:           Tue 13 May 2025 05:30:00 +0000
ROA not after:            Tue 12 May 2026 05:35:00 +0000
asID:                     270172
IP address blocks:        148.224.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:66:b8:04:54:f1:91:7b:e8:1d:48:65:64:a2:a7:d2:2b:87:fa:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
        Validity
            Not Before: May 13 05:30:00 2025 GMT
            Not After : May 12 05:35:00 2026 GMT
        Subject: CN=A4679B8213353F16E092712D7C3342F27824B68D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:84:ce:23:72:85:9a:86:59:82:43:b4:ac:7c:
                    5b:bf:77:72:5a:3c:a9:ce:16:f6:65:7f:89:4e:f2:
                    ff:bd:6c:b4:04:f1:88:33:58:01:5d:71:5e:0f:f9:
                    6e:12:12:af:d9:3a:86:cb:ed:0c:59:08:00:43:5b:
                    87:84:7d:41:44:e5:f7:9b:1d:47:b1:c2:64:d0:dd:
                    8d:90:dc:f1:5a:c6:1c:a8:03:d5:60:03:84:e0:31:
                    91:08:5a:66:de:b5:f5:97:47:65:46:5a:1f:ec:62:
                    aa:2e:f0:e9:f5:ca:c1:a8:9a:9d:d3:93:2e:b3:78:
                    85:a8:f9:3a:84:9b:9a:76:42:76:b2:e7:eb:d7:fa:
                    88:9f:77:82:5b:df:ce:60:17:ce:15:62:18:97:c3:
                    29:51:1c:c3:42:b1:e3:b6:4b:44:08:ad:40:d4:6e:
                    80:49:28:58:41:4d:fc:60:c3:7f:f9:77:9a:c6:ed:
                    8b:4a:ae:e8:cb:31:b0:2f:95:a8:cc:82:1b:ad:7a:
                    a8:58:a3:14:36:d6:3f:57:60:7d:ce:80:6a:a5:97:
                    2c:34:ce:a7:83:d1:7f:ed:a2:2d:cf:8f:28:96:ff:
                    9f:40:aa:23:b4:2d:a1:8b:e6:64:89:c2:61:64:8c:
                    0d:17:d8:0a:21:ae:01:d1:e6:08:97:5a:d8:86:2a:
                    2d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:67:9B:82:13:35:3F:16:E0:92:71:2D:7C:33:42:F2:78:24:B6:8D
            X509v3 Authority Key Identifier:
                keyid:73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/3134382e3232342e35382e302f32332d3234203d3e20323730313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:ea:67:41:23:fe:48:4e:46:94:be:fd:c7:a8:29:c0:85:b2:
         05:51:92:da:56:ec:4f:73:5f:6c:3d:72:0b:92:a8:62:d9:e8:
         1e:f2:b4:19:f5:8a:d7:8e:eb:37:0f:11:32:46:60:0e:3f:4a:
         49:2f:d1:97:45:5c:11:dd:e3:a4:28:4f:44:a0:0c:c4:56:c5:
         d7:e0:4d:ad:03:ab:be:35:e7:0f:a4:6c:c4:6a:fd:58:d2:f1:
         8f:55:ab:98:49:d8:24:4d:2d:5d:1a:56:1f:54:a4:36:e9:8b:
         45:3e:fa:4a:f1:62:25:4d:f2:1d:06:a9:b8:63:dc:ba:ee:c6:
         c3:cb:3d:66:7e:5b:6d:bf:b2:dd:bf:3b:c5:79:2a:e2:c1:be:
         c1:58:2f:85:9e:75:1a:c9:d5:b2:88:0e:f1:56:c3:3c:c9:b0:
         35:22:66:00:18:52:54:fc:64:ed:3d:5e:48:e6:77:30:48:9e:
         d6:34:4d:f1:2b:32:73:8b:e7:4f:7e:92:7b:0a:c1:ec:23:34:
         bf:cd:71:39:ea:b4:c8:72:b9:c4:eb:d2:a4:2c:1f:90:2c:b6:
         09:8e:36:e6:0f:94:f6:4c:73:1e:38:0c:64:25:17:f0:0c:99:
         a5:fe:8d:01:42:eb:50:2f:c9:49:2b:7f:10:30:6a:fd:9a:45:
         8a:65:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 19:46:15 2025 by rpki-client