Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3134382e3232342e32342e302f32342d3234203d3e203634313630.roa
File:                     3134382e3232342e32342e302f32342d3234203d3e203634313630.roa (raw, json)
Hash identifier:          FiR3dj0CNz4AVQ0ulLbPQ7i9Lj00dVrMnM33V98/jXc=
Subject key identifier:   AE:62:96:52:C1:D1:B5:14:88:03:AF:1F:34:86:A8:FE:80:D4:73:1A
Certificate issuer:       /CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
Certificate serial:       66A383D12EDCCAE7A970A41B8C6AFE5696388C33
Authority key identifier: A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3134382e3232342e32342e302f32342d3234203d3e203634313630.roa
Signing time:             Fri 12 Sep 2025 09:00:00 +0000
ROA not before:           Fri 12 Sep 2025 08:55:00 +0000
ROA not after:            Fri 11 Sep 2026 09:00:00 +0000
asID:                     64160
IP address blocks:        148.224.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 13:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a3:83:d1:2e:dc:ca:e7:a9:70:a4:1b:8c:6a:fe:56:96:38:8c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
        Validity
            Not Before: Sep 12 08:55:00 2025 GMT
            Not After : Sep 11 09:00:00 2026 GMT
        Subject: CN=AE629652C1D1B5148803AF1F3486A8FE80D4731A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:10:70:a0:12:7c:f7:ab:89:44:cd:17:46:
                    52:b3:08:b3:9e:24:e5:43:51:ce:2e:e4:94:73:02:
                    0e:e7:a4:5f:c5:a6:5b:19:2d:78:b3:b3:0e:2d:e9:
                    3d:55:df:c2:3c:77:f7:fd:f3:2f:ef:f0:c1:fc:81:
                    53:b2:78:cf:5e:86:e9:4d:0d:e0:26:6e:ca:01:e5:
                    17:96:6b:5d:37:ca:55:e1:9a:bd:9d:11:f5:f8:b5:
                    d5:6f:85:04:09:48:fb:f4:a2:02:9a:8e:90:aa:fe:
                    18:90:80:6b:d7:b6:e3:88:45:b0:a4:26:9f:a8:b8:
                    3b:18:07:1f:83:0b:41:8d:eb:cd:7c:2c:4a:59:35:
                    a0:64:ee:28:cb:c7:92:d4:15:5d:26:bc:18:8a:64:
                    a1:0f:9f:e1:3e:19:a7:53:10:77:4e:db:9e:03:71:
                    2e:dc:9e:1a:24:bf:ef:46:3f:f7:a4:28:68:a8:61:
                    c5:c6:5c:b6:9a:da:a2:7b:74:12:b2:1c:ec:6b:ef:
                    9a:6a:ba:73:12:c5:da:99:c5:ce:4f:a1:9c:1e:8b:
                    ae:25:8e:7f:6e:7d:c8:88:41:11:ba:ab:ca:af:df:
                    c1:7c:06:ae:6d:bc:58:da:41:e0:ee:93:d2:b0:0f:
                    66:57:99:48:19:b4:a5:31:c7:27:69:ae:6a:de:94:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:62:96:52:C1:D1:B5:14:88:03:AF:1F:34:86:A8:FE:80:D4:73:1A
            X509v3 Authority Key Identifier:
                keyid:A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3134382e3232342e32342e302f32342d3234203d3e203634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:bc:17:7c:63:15:d8:a8:8e:b3:28:60:5f:7b:bc:32:55:d3:
         34:cf:30:69:10:0d:03:d5:52:ce:35:35:3e:e8:f1:09:e7:eb:
         88:d8:34:de:d1:21:9c:67:55:25:3c:f8:6e:9f:63:b7:25:ef:
         83:47:4e:28:9d:14:53:65:c3:46:5a:1b:b7:38:a0:4e:74:f1:
         51:f7:26:a3:47:93:34:84:6a:c0:7c:c1:a3:58:79:77:ad:7e:
         a8:3a:69:fe:61:f8:09:26:71:5f:43:a0:2c:3f:85:6d:a0:84:
         c9:f7:c4:b2:94:18:d0:a2:f8:94:7c:f4:3a:c6:5e:e0:3a:dd:
         cc:7c:24:0d:27:cc:ea:95:5d:2f:e8:fb:c6:98:d5:0f:d2:a5:
         95:91:41:dc:37:bf:f8:41:55:f5:e3:a1:e0:ab:4a:30:a8:25:
         0c:19:1d:b5:61:0c:3a:d6:6a:d2:bd:78:39:d8:9e:30:da:b6:
         66:b1:3d:dd:d2:04:43:be:3c:0d:be:91:e9:bb:7c:50:87:fd:
         79:b2:c7:27:99:9d:2d:8c:62:37:f8:35:6f:0c:1a:db:b9:89:
         25:82:24:f4:f1:59:dd:cc:21:48:89:a3:a6:0d:3d:ef:6e:64:
         09:57:c3:55:11:a2:fa:ec:bc:7b:91:85:42:0d:c6:23:55:09:
         5b:55:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:30:54 2025 by rpki-client