Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233312e302f32342d3234203d3e20323730303037.roa
File:                     3134382e3232322e3233312e302f32342d3234203d3e20323730303037.roa (raw, json)
Hash identifier:          XHK0//0xE4Z0q1nEW/AZcHJ6+79Gu3oUJJfELcmplO0=
Subject key identifier:   04:A3:1D:B2:B5:63:7E:6A:8A:F3:34:35:74:94:B5:31:30:BF:FE:D6
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       3228D5C118034605B5344721037D60F22F66DB7E
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233312e302f32342d3234203d3e20323730303037.roa
Signing time:             Mon 09 Jun 2025 18:21:25 +0000
ROA not before:           Mon 09 Jun 2025 18:16:25 +0000
ROA not after:            Mon 08 Jun 2026 18:21:25 +0000
asID:                     270007
IP address blocks:        148.222.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 02:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:28:d5:c1:18:03:46:05:b5:34:47:21:03:7d:60:f2:2f:66:db:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Jun  9 18:16:25 2025 GMT
            Not After : Jun  8 18:21:25 2026 GMT
        Subject: CN=04A31DB2B5637E6A8AF334357494B53130BFFED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:47:43:94:2a:33:fd:7c:2c:08:da:1f:9a:
                    1d:44:de:66:6f:06:5a:bf:84:cb:be:06:12:ef:88:
                    6a:09:e3:a9:e9:e5:b5:ba:ab:bc:7a:ef:05:6d:23:
                    c1:61:7b:d9:9e:c2:d5:17:e5:10:be:90:b3:60:51:
                    5e:b0:82:21:a7:9a:2d:32:6b:45:92:e6:3f:1c:b8:
                    eb:88:97:b1:4a:0b:cc:33:6f:06:b7:21:7b:79:22:
                    0a:da:1e:b7:7d:a0:0f:e2:f2:4a:03:1b:f0:04:18:
                    00:16:81:81:09:53:78:3b:19:7d:a4:a4:5f:d5:2e:
                    ea:8f:50:c2:d2:b0:39:a5:d6:eb:f8:dc:0a:d2:93:
                    e6:6b:9b:32:27:5c:a4:79:f6:38:a2:f7:e2:ba:38:
                    34:6f:14:eb:c5:28:46:9f:d8:62:39:a1:a9:fc:39:
                    91:a0:c4:c6:85:52:21:a3:65:1f:43:1e:b9:38:9c:
                    0b:42:76:55:29:f4:02:51:f0:38:e3:41:6a:69:28:
                    0d:a0:d9:f3:ad:9a:31:86:cf:06:b6:7e:e6:58:04:
                    6c:f5:76:e8:7f:ed:76:f1:7f:8f:2d:ec:ad:00:5f:
                    6a:b3:42:70:e3:d4:c3:85:a3:4a:a6:b9:fa:76:91:
                    17:21:79:43:da:48:0e:d3:aa:e9:39:39:2a:17:52:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A3:1D:B2:B5:63:7E:6A:8A:F3:34:35:74:94:B5:31:30:BF:FE:D6
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233312e302f32342d3234203d3e20323730303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:72:8d:a4:90:1e:ef:3a:57:47:d5:8c:18:8f:bd:85:40:59:
         fc:51:32:28:8f:d4:df:21:7b:9f:36:f5:bd:63:f3:6c:bd:ca:
         26:a3:b0:f6:5f:5c:09:63:cb:b5:a0:a1:af:7f:d1:13:1c:1b:
         44:54:71:2f:f8:3d:ec:27:1d:0a:6f:be:56:ce:f1:85:58:97:
         5a:c1:50:93:4b:8e:3c:88:58:20:67:9d:e2:ba:4e:c4:aa:35:
         85:0b:79:a1:52:7b:13:44:85:41:3a:34:a7:80:0d:7e:5a:26:
         0b:86:96:c4:5d:91:d3:10:1b:8c:39:fc:f8:f4:fb:18:a6:52:
         52:5a:a2:93:1c:a7:93:65:6e:09:f7:d2:e5:04:56:6f:96:f4:
         21:b2:db:09:f2:07:8c:3d:e1:c4:d7:65:b3:e8:c4:10:56:ba:
         31:24:c5:7b:a5:8e:08:45:c1:8f:59:3b:10:52:de:b0:55:ca:
         4e:4a:d4:a8:eb:bc:da:40:d5:ed:3a:0e:30:95:1f:2f:01:22:
         2d:26:cf:9f:b7:66:35:b0:8e:07:3e:5f:f9:ff:8d:61:62:6c:
         4c:62:69:00:28:64:e9:7e:84:81:d3:aa:13:aa:cf:63:d7:7c:
         05:fb:5e:41:17:02:cd:b8:52:86:c3:b5:e1:43:b3:9f:54:b3:
         0e:18:fc:24
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMijVwRgDRgW1NEchA31g8i9m234wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCRTg1MzUxNkE2RDM1OTBGMkM5RUQ0QjZCOTQ2OTZD
NDE1Rjg4RjAeFw0yNTA2MDkxODE2MjVaFw0yNjA2MDgxODIxMjVaMDMxMTAvBgNV
BAMTKDA0QTMxREIyQjU2MzdFNkE4QUYzMzQzNTc0OTRCNTMxMzBCRkZFRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTiUdDlCoz/XwsCNofmh1E3mZv
Blq/hMu+BhLviGoJ46np5bW6q7x67wVtI8Fhe9mewtUX5RC+kLNgUV6wgiGnmi0y
a0WS5j8cuOuIl7FKC8wzbwa3IXt5IgraHrd9oA/i8koDG/AEGAAWgYEJU3g7GX2k
pF/VLuqPUMLSsDml1uv43ArSk+ZrmzInXKR59jii9+K6ODRvFOvFKEaf2GI5oan8
OZGgxMaFUiGjZR9DHrk4nAtCdlUp9AJR8DjjQWppKA2g2fOtmjGGzwa2fuZYBGz1
duh/7Xbxf48t7K0AX2qzQnDj1MOFo0qmufp2kRcheUPaSA7Tquk5OSoXUqLlAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUBKMdsrVjfmqK8zQ1dJS1MTC//tYwHwYDVR0j
BBgwFoAUkr6FNRam01kPLJ7UtrlGlsQV+I8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzY4REYwMENDOTI4QTBGREVERUUxQkE1M0NCOUM0NjI2
RTVFMTA1MDc2RUVFQjZCQTI0QkUxN0EzNkIxNEYyLzAvOTJCRTg1MzUxNkE2RDM1
OTBGMkM5RUQ0QjZCOTQ2OTZDNDE1Rjg4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkJFODUzNTE2QTZEMzU5MEYy
QzlFRDRCNkI5NDY5NkM0MTVGODhGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzc2OERGMDBDQzkyOEEwRkRFREVFMUJBNTNDQjlDNDYyNkU1RTEwNTA3
NkVFRUI2QkEyNEJFMTdBMzZCMTRGMi8wLzMxMzQzODJlMzIzMjMyMmUzMjMzMzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMDMwMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACU
3ucwDQYJKoZIhvcNAQELBQADggEBAAZyjaSQHu86V0fVjBiPvYVAWfxRMiiP1N8h
e5829b1j82y9yiajsPZfXAljy7Wgoa9/0RMcG0RUcS/4PewnHQpvvlbO8YVYl1rB
UJNLjjyIWCBnneK6TsSqNYULeaFSexNEhUE6NKeADX5aJguGlsRdkdMQG4w5/Pj0
+ximUlJaopMcp5Nlbgn30uUEVm+W9CGy2wnyB4w94cTXZbPoxBBWujEkxXuljghF
wY9ZOxBS3rBVyk5K1KjrvNpA1e06DjCVHy8BIi0mz5+3ZjWwjgc+X/n/jWFibExi
aQAoZOl+hIHTqhOqz2PXfAX7XkEXAs24UobDteFDs59Usw4Y/CQ=
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:50:41 2025 by rpki-client