Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3134382e3232342e32342e302f32322d3232203d3e203634313630.roa
File:                     3134382e3232342e32342e302f32322d3232203d3e203634313630.roa (raw, json)
Hash identifier:          RMFwCxR1gUpvp9U8C7fhaAnCEQ8tZOxUNC34MvZ+HFQ=
Subject key identifier:   51:6F:3E:C1:B5:59:9A:4B:18:5F:A2:14:75:D7:55:4E:18:95:B4:2A
Certificate issuer:       /CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
Certificate serial:       36529D8FE77B146F21F95ADCC7CCEDB978386095
Authority key identifier: A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3134382e3232342e32342e302f32322d3232203d3e203634313630.roa
Signing time:             Fri 12 Sep 2025 08:50:00 +0000
ROA not before:           Fri 12 Sep 2025 08:45:00 +0000
ROA not after:            Fri 11 Sep 2026 08:50:00 +0000
asID:                     64160
IP address blocks:        148.224.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 13:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:52:9d:8f:e7:7b:14:6f:21:f9:5a:dc:c7:cc:ed:b9:78:38:60:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
        Validity
            Not Before: Sep 12 08:45:00 2025 GMT
            Not After : Sep 11 08:50:00 2026 GMT
        Subject: CN=516F3EC1B5599A4B185FA21475D7554E1895B42A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:bd:dc:e3:22:bb:36:34:77:76:dd:9e:bd:
                    d4:b2:0a:13:00:27:9d:58:9d:13:67:ab:75:2e:27:
                    65:89:7c:61:72:13:cd:0c:0a:99:d5:43:b6:cf:f6:
                    e8:58:30:7b:3e:d2:62:06:36:df:3a:c0:be:62:bf:
                    7d:e0:41:9a:de:76:64:bd:a4:1c:57:d0:49:a2:da:
                    e9:c4:57:90:8b:09:00:3d:48:d7:90:98:b7:28:39:
                    b1:f9:ff:ae:50:8a:13:04:16:1a:c0:14:ac:fd:ef:
                    a0:03:d9:63:a1:7e:8b:89:90:40:9c:d4:54:c9:7a:
                    57:94:51:9a:e4:ad:c7:0c:ed:91:19:82:38:0c:74:
                    9c:d2:19:31:ec:45:f8:1d:4e:5c:9e:f3:82:f2:0c:
                    d5:6a:1d:13:07:ef:51:ae:37:0a:d9:eb:2b:7c:92:
                    7a:f7:d0:13:25:cd:34:65:90:d4:bd:60:15:9f:be:
                    57:58:10:2e:01:ea:1c:6e:a0:cc:44:86:69:43:8f:
                    89:9f:71:63:81:1c:d7:35:10:df:6e:5b:45:09:bd:
                    72:f9:ed:aa:9b:12:e8:9b:2b:31:57:ff:02:f1:81:
                    88:b7:f4:0b:dd:c7:22:55:cf:91:30:ac:7e:44:8d:
                    80:15:82:f0:3b:da:b0:bc:1d:e2:8e:05:ce:24:ce:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6F:3E:C1:B5:59:9A:4B:18:5F:A2:14:75:D7:55:4E:18:95:B4:2A
            X509v3 Authority Key Identifier:
                keyid:A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3134382e3232342e32342e302f32322d3232203d3e203634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:4d:2a:2a:ff:ee:7e:f5:43:12:2e:d7:4f:3b:0a:b7:f4:a8:
         13:39:d6:78:3b:9e:cd:7e:1f:df:0a:ae:31:41:da:35:ef:06:
         d8:e5:c7:ea:e6:1f:f1:40:fa:d0:b2:63:35:c8:47:06:3e:2d:
         6a:44:b7:ba:55:a4:2e:d8:be:91:2f:c0:55:e5:58:c2:38:fd:
         ba:fc:3f:15:0a:15:3d:08:d9:40:6f:1f:a5:9c:13:09:23:52:
         27:dd:19:b2:a7:17:08:58:5f:d6:2c:ab:b5:4c:2f:44:d9:aa:
         90:d2:13:a0:b6:98:86:4e:c8:6f:39:00:7b:f3:8a:23:fe:83:
         d1:e1:e4:83:44:94:45:46:21:51:33:1e:da:57:9b:31:e0:9b:
         9b:3f:d8:60:31:30:e6:2a:e5:f0:cc:1f:f9:ac:97:88:8a:c0:
         2f:2d:a5:84:13:72:29:96:5d:29:f0:2b:3e:df:83:c9:c2:86:
         73:27:c2:43:c7:4e:88:8e:4c:ad:32:c3:83:e6:32:a2:ea:0e:
         1c:f8:1f:8a:b4:cb:9c:b0:89:7c:f0:b0:6c:22:a7:4f:32:22:
         2d:f0:61:6c:b8:62:01:5f:72:fc:54:7a:1c:5d:ae:89:17:62:
         5d:f2:fd:65:8a:93:55:0f:89:cd:66:ac:91:14:c1:f5:ee:ec:
         37:f9:6a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:31:00 2025 by rpki-client