Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3134382e3232342e32372e302f32342d3234203d3e203634313630.roa
File:                     3134382e3232342e32372e302f32342d3234203d3e203634313630.roa (raw, json)
Hash identifier:          LKlqoQY9ZFDp8dK+wt5T8lgUAI/qvUCxFO8SVho18cc=
Subject key identifier:   50:FD:FA:73:36:34:89:C2:F3:92:B9:D7:96:8E:8B:60:EA:F7:2F:53
Certificate issuer:       /CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
Certificate serial:       66A74923672C9E0A126B0949DD24B74B7131E71E
Authority key identifier: A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3134382e3232342e32372e302f32342d3234203d3e203634313630.roa
Signing time:             Fri 12 Sep 2025 09:05:00 +0000
ROA not before:           Fri 12 Sep 2025 09:00:00 +0000
ROA not after:            Fri 11 Sep 2026 09:05:00 +0000
asID:                     64160
IP address blocks:        148.224.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 Oct 2025 13:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a7:49:23:67:2c:9e:0a:12:6b:09:49:dd:24:b7:4b:71:31:e7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E327225027297E52F4D3DA0FC282D0C4BD353B
        Validity
            Not Before: Sep 12 09:00:00 2025 GMT
            Not After : Sep 11 09:05:00 2026 GMT
        Subject: CN=50FDFA73363489C2F392B9D7968E8B60EAF72F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:e6:89:90:b4:41:9c:e1:07:ac:b4:16:e1:
                    a6:bc:2f:dc:ee:20:e0:a1:57:a2:fb:88:01:e1:78:
                    b9:56:0e:45:2a:fe:7a:8b:0a:41:69:75:60:4a:49:
                    57:27:1d:a4:7c:66:0f:c0:8f:fe:0c:1c:77:50:d4:
                    a3:07:bf:0e:cb:b4:b8:da:d2:f8:0c:b6:bb:f1:e2:
                    43:f9:1d:af:96:5c:d6:01:26:53:52:bb:e3:96:0a:
                    40:e7:d2:99:35:32:1f:b8:b1:e7:36:00:61:71:f5:
                    77:38:af:1e:fc:94:f4:64:95:ca:87:c5:72:59:65:
                    18:13:99:14:d3:0f:21:f7:33:36:12:51:6a:51:b9:
                    b6:3c:60:93:27:c8:ed:ac:47:16:b0:05:45:66:30:
                    10:4b:25:7e:98:a1:bb:73:56:ef:02:77:2d:05:d6:
                    87:ef:b2:42:99:1a:a4:c9:0c:81:f0:7c:66:ae:3c:
                    f7:99:5c:d3:d7:58:17:81:d9:ad:e8:92:63:7b:89:
                    5a:38:4e:d9:ab:bb:64:dc:00:9d:2f:eb:45:0d:36:
                    8f:af:c3:2b:12:e9:62:7b:66:5e:e9:29:a3:76:91:
                    67:e9:9c:f0:88:85:72:91:91:2e:05:58:17:6f:41:
                    19:ca:d3:af:51:89:7b:80:6f:11:5c:5a:ae:98:ac:
                    92:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FD:FA:73:36:34:89:C2:F3:92:B9:D7:96:8E:8B:60:EA:F7:2F:53
            X509v3 Authority Key Identifier:
                keyid:A1:E3:27:22:50:27:29:7E:52:F4:D3:DA:0F:C2:82:D0:C4:BD:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E327225027297E52F4D3DA0FC282D0C4BD353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0C7538EE576CE1CC9BC4F07F488976E87D72ABA96F6E3A57A9EFD2EED4455FC/0/3134382e3232342e32372e302f32342d3234203d3e203634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:7d:84:0c:7d:7d:9a:9f:6f:72:15:16:67:6e:e0:fd:46:bd:
         7e:6c:2a:cd:69:b0:fe:4a:36:20:ac:8d:73:07:6f:75:32:1b:
         4d:46:ac:5b:c9:fa:b1:ec:b4:34:19:8a:d3:31:ac:14:d9:6b:
         45:69:c3:f8:2f:68:c7:30:54:0a:8b:db:f9:fd:b3:95:e2:53:
         b3:1e:e5:d9:57:43:d5:cd:54:37:6e:fd:9d:4f:58:af:6c:b3:
         99:49:ce:1f:c9:7a:f4:2c:67:fa:33:6d:e5:3e:ba:6c:c9:56:
         e5:91:14:a1:9a:d6:9f:1b:e8:43:1c:95:78:1b:b0:92:72:c9:
         42:59:4c:96:fa:56:88:65:f3:3c:6e:9b:59:69:d0:f1:ab:08:
         54:37:32:be:22:13:1e:18:b5:a6:f2:b1:b0:cf:ee:1e:93:76:
         c3:aa:f0:d0:77:7e:37:6e:f7:90:72:34:bc:d3:69:9a:a0:19:
         b1:8c:2d:96:b1:8d:c1:d2:cf:8c:b4:99:60:72:b5:36:c7:e9:
         a8:e3:d0:87:a3:8d:e9:16:8d:37:f5:0f:ac:96:1c:70:26:68:
         66:c7:6d:51:3b:9c:26:9d:2c:d2:cb:af:d5:15:12:49:1f:a4:
         03:4a:a0:2c:bf:ea:dc:46:49:59:e6:55:b1:c0:10:38:8b:ef:
         fe:09:36:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:30:55 2025 by rpki-client