Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232352e302f32342d3234203d3e203634313234.roa
File:                     3134382e3232322e3232352e302f32342d3234203d3e203634313234.roa (raw, json)
Hash identifier:          F0FiSrfnFuihCVSGy+lCFueAyD08SgsP7VFv+azrI4c=
Subject key identifier:   00:72:7E:3B:48:A0:63:23:4B:69:AC:E4:EB:02:86:3B:F2:BE:AD:74
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       083BB85BA0CE995ADBD45AF7F5FA1BED6AF22BB8
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232352e302f32342d3234203d3e203634313234.roa
Signing time:             Fri 02 May 2025 00:17:30 +0000
ROA not before:           Fri 02 May 2025 00:12:30 +0000
ROA not after:            Fri 01 May 2026 00:17:30 +0000
asID:                     64124
IP address blocks:        148.222.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 15:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3b:b8:5b:a0:ce:99:5a:db:d4:5a:f7:f5:fa:1b:ed:6a:f2:2b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: May  2 00:12:30 2025 GMT
            Not After : May  1 00:17:30 2026 GMT
        Subject: CN=00727E3B48A063234B69ACE4EB02863BF2BEAD74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:78:bd:8c:27:f1:15:99:6d:a7:86:2d:17:
                    c9:d0:05:a3:b8:47:22:4d:f0:26:ef:75:20:62:b4:
                    7a:72:49:15:fb:41:3a:b0:12:47:53:27:23:5e:97:
                    da:0f:84:31:51:c3:4a:54:7d:2a:e3:33:1b:71:ce:
                    b4:ec:29:52:96:23:57:6f:df:f9:34:2e:2a:1e:4c:
                    7b:4e:7f:79:4c:5b:2d:dd:96:ed:41:a0:92:65:ff:
                    bc:13:42:c2:ae:9a:e5:cc:66:e4:dd:b6:fc:2a:ff:
                    db:15:9a:20:61:72:9e:06:1e:dd:94:77:1b:6f:d1:
                    cb:d9:ad:c5:b0:4b:cc:c7:9b:70:27:95:ba:e7:2b:
                    ec:b4:18:da:5f:db:12:5c:db:f9:e7:3c:89:ad:80:
                    36:42:f0:87:86:0b:86:9a:40:40:20:c4:3f:38:ca:
                    13:fb:64:a5:ac:2e:3a:83:01:7b:ac:a5:50:9a:de:
                    78:c3:55:b9:a7:3f:6d:c1:de:ed:b5:c9:52:06:0e:
                    91:e4:b6:47:78:e9:8a:a9:2c:50:3b:f2:10:37:a7:
                    80:13:bd:77:4f:b2:e6:5a:e6:b2:7d:8e:4a:1f:7a:
                    5a:f7:5f:8c:43:95:48:e8:a3:af:30:57:eb:df:4d:
                    7f:e9:f9:b6:a9:54:25:b1:e7:0f:23:79:b7:b3:eb:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:72:7E:3B:48:A0:63:23:4B:69:AC:E4:EB:02:86:3B:F2:BE:AD:74
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232352e302f32342d3234203d3e203634313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:fd:34:97:b4:63:68:f3:af:eb:dd:d8:02:a0:12:64:01:c8:
         60:dc:ff:96:d7:30:9d:b9:ed:7b:ab:a6:75:7c:b5:7f:df:26:
         3c:39:8c:fe:6c:e2:da:5a:12:3c:99:5f:0d:39:a5:f0:a7:e7:
         c2:40:91:c9:2e:ca:70:0d:b6:93:5b:8a:c0:3c:de:7c:55:92:
         ad:dd:e1:c0:33:44:68:87:7a:0b:f7:a9:19:66:99:68:90:85:
         e8:c6:b0:aa:34:db:b9:22:a7:e4:8e:10:1a:8f:c9:eb:cd:c1:
         1b:22:38:0e:d0:8e:dc:b7:42:db:c6:08:07:1a:31:db:42:4f:
         ad:38:80:6f:2d:d3:b2:09:bf:df:13:fd:34:d1:d1:c4:45:6b:
         fb:8d:dc:5f:78:89:8e:9a:87:5d:3f:51:80:55:7e:3f:e1:37:
         18:7f:20:49:de:58:65:e1:c9:1e:9e:65:1a:bf:32:e2:cd:ad:
         7d:78:fa:3f:f6:6c:d1:57:5f:3a:a4:95:46:01:6a:f5:7f:2a:
         bd:29:ff:98:2c:60:af:32:43:a0:a5:db:59:75:5f:a0:c1:1d:
         29:7e:ed:52:8e:21:54:80:d9:d0:16:0f:01:86:4f:1e:a9:38:
         0c:75:30:41:77:de:f4:04:8e:b4:ab:cc:15:0f:23:65:19:61:
         2b:83:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:48:52 2025 by rpki-client