Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232342e302f32342d3234203d3e203634313532.roa
File:                     3134382e3232322e3232342e302f32342d3234203d3e203634313532.roa (raw, json)
Hash identifier:          xQxdaMYhxX5lRRF7yYUWT7D+IvZ6L+kP+OeJqfwfIns=
Subject key identifier:   07:06:56:5A:D4:67:ED:93:ED:BC:FD:82:23:DC:DE:1A:7F:B7:60:77
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       56E0478D88C134585C08846B3CC753B7D8F7EEA6
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232342e302f32342d3234203d3e203634313532.roa
Signing time:             Fri 02 May 2025 00:17:29 +0000
ROA not before:           Fri 02 May 2025 00:12:29 +0000
ROA not after:            Fri 01 May 2026 00:17:29 +0000
asID:                     64152
IP address blocks:        148.222.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 02:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e0:47:8d:88:c1:34:58:5c:08:84:6b:3c:c7:53:b7:d8:f7:ee:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: May  2 00:12:29 2025 GMT
            Not After : May  1 00:17:29 2026 GMT
        Subject: CN=0706565AD467ED93EDBCFD8223DCDE1A7FB76077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:21:0e:ba:be:ed:3d:5a:10:3a:4a:ee:46:
                    d2:1e:ee:ac:e1:20:b7:bd:01:d2:24:f5:0d:12:a6:
                    4c:9e:f1:0e:e6:b9:95:bf:20:dc:5e:b4:2f:6c:8f:
                    1b:7b:6b:43:64:e8:0e:8b:c9:e2:5a:30:34:76:f0:
                    82:a1:69:f9:b9:65:5c:6e:b9:6e:d9:b6:5b:50:10:
                    a7:f2:eb:f2:52:78:cb:76:55:39:df:0d:65:e4:fa:
                    6e:88:97:2b:a0:fc:04:3b:e2:d6:12:49:79:66:90:
                    12:97:f6:66:b4:f9:d4:59:c5:24:9c:51:96:a5:79:
                    81:92:bb:55:08:35:2c:08:3d:c1:fa:b4:94:4d:35:
                    54:c9:e2:84:44:ad:d8:04:a4:bc:ac:ac:00:40:2c:
                    07:de:64:b3:3f:65:59:85:99:ee:96:b7:c1:0c:02:
                    31:0b:a2:65:22:0d:4f:56:05:59:db:6d:15:6d:9c:
                    9e:74:aa:70:ce:01:d7:bc:23:9d:ce:9e:f3:67:93:
                    97:74:dd:39:b2:f9:40:ca:0b:71:07:68:63:74:1b:
                    1f:65:84:c5:26:2c:32:1f:58:f5:4d:18:a6:45:2b:
                    7a:da:df:13:53:e0:b7:62:5b:3b:56:d3:0d:a0:d6:
                    88:8f:9e:08:e6:97:6c:7c:cd:c6:49:e4:e4:29:93:
                    b1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:06:56:5A:D4:67:ED:93:ED:BC:FD:82:23:DC:DE:1A:7F:B7:60:77
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232342e302f32342d3234203d3e203634313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c3:6b:a4:c8:f4:53:e1:5a:15:08:ca:74:35:eb:61:31:64:
         1b:7c:f2:31:8a:4b:b4:ad:8c:27:72:f1:45:7a:b4:dd:51:99:
         02:0e:29:e0:b5:1d:2e:bf:b4:f7:96:ae:c1:4e:fd:da:06:a0:
         62:ca:eb:f4:bf:42:8a:e4:f8:5f:40:1d:44:df:ea:8f:f4:36:
         af:07:8e:d7:b1:d7:36:b8:71:8f:8b:d5:aa:f3:5e:fe:56:9d:
         57:4f:98:4e:78:fa:cf:a7:04:7e:d4:2f:e1:10:63:f1:a0:ad:
         c1:0b:96:84:9b:e9:2c:c8:57:37:69:c1:cf:96:d3:68:fb:6a:
         1f:3a:48:83:b8:4d:8d:b3:c4:ce:f6:28:da:14:61:35:a0:37:
         22:18:23:1f:60:00:9f:1c:3b:cf:68:3e:d3:36:1a:72:50:67:
         86:2b:fd:f1:bf:cd:dd:49:17:4b:23:b9:b9:71:b1:ec:d4:71:
         af:3e:c2:6c:66:99:3f:6f:a5:d7:ba:34:c5:f0:0d:71:d1:54:
         7a:4b:4a:5d:ff:bf:b3:36:62:4c:c4:20:f5:2d:8d:9a:45:d3:
         d2:8c:b2:e5:9e:27:84:1e:d1:12:a9:b6:db:2e:45:e6:76:79:
         50:4d:a0:8e:9c:d5:11:38:8a:cf:55:59:ff:4d:d2:54:bd:04:
         3b:a9:a2:66
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVuBHjYjBNFhcCIRrPMdTt9j37qYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCRTg1MzUxNkE2RDM1OTBGMkM5RUQ0QjZCOTQ2OTZD
NDE1Rjg4RjAeFw0yNTA1MDIwMDEyMjlaFw0yNjA1MDEwMDE3MjlaMDMxMTAvBgNV
BAMTKDA3MDY1NjVBRDQ2N0VEOTNFREJDRkQ4MjIzRENERTFBN0ZCNzYwNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbmCEOur7tPVoQOkruRtIe7qzh
ILe9AdIk9Q0Spkye8Q7muZW/INxetC9sjxt7a0Nk6A6LyeJaMDR28IKhafm5ZVxu
uW7ZtltQEKfy6/JSeMt2VTnfDWXk+m6Ilyug/AQ74tYSSXlmkBKX9ma0+dRZxSSc
UZaleYGSu1UINSwIPcH6tJRNNVTJ4oRErdgEpLysrABALAfeZLM/ZVmFme6Wt8EM
AjELomUiDU9WBVnbbRVtnJ50qnDOAde8I53OnvNnk5d03Tmy+UDKC3EHaGN0Gx9l
hMUmLDIfWPVNGKZFK3ra3xNT4LdiWztW0w2g1oiPngjml2x8zcZJ5OQpk7E9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUBwZWWtRn7ZPtvP2CI9zeGn+3YHcwHwYDVR0j
BBgwFoAUkr6FNRam01kPLJ7UtrlGlsQV+I8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzY4REYwMENDOTI4QTBGREVERUUxQkE1M0NCOUM0NjI2
RTVFMTA1MDc2RUVFQjZCQTI0QkUxN0EzNkIxNEYyLzAvOTJCRTg1MzUxNkE2RDM1
OTBGMkM5RUQ0QjZCOTQ2OTZDNDE1Rjg4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkJFODUzNTE2QTZEMzU5MEYy
QzlFRDRCNkI5NDY5NkM0MTVGODhGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzc2OERGMDBDQzkyOEEwRkRFREVFMUJBNTNDQjlDNDYyNkU1RTEwNTA3
NkVFRUI2QkEyNEJFMTdBMzZCMTRGMi8wLzMxMzQzODJlMzIzMjMyMmUzMjMyMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjM0MzEzNTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlN7g
MA0GCSqGSIb3DQEBCwUAA4IBAQB8w2ukyPRT4VoVCMp0NethMWQbfPIxiku0rYwn
cvFFerTdUZkCDingtR0uv7T3lq7BTv3aBqBiyuv0v0KK5PhfQB1E3+qP9DavB47X
sdc2uHGPi9Wq817+Vp1XT5hOePrPpwR+1C/hEGPxoK3BC5aEm+ksyFc3acHPltNo
+2ofOkiDuE2Ns8TO9ijaFGE1oDciGCMfYACfHDvPaD7TNhpyUGeGK/3xv83dSRdL
I7m5cbHs1HGvPsJsZpk/b6XXujTF8A1x0VR6S0pd/7+zNmJMxCD1LY2aRdPSjLLl
nieEHtESqbbbLkXmdnlQTaCOnNUROIrPVVn/TdJUvQQ7qaJm
-----END CERTIFICATE-----
Generated at Tue May 13 02:20:37 2025 by rpki-client