Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3134382e3233302e342e302f32342d3234203d3e20323635363036.roa
File:                     3134382e3233302e342e302f32342d3234203d3e20323635363036.roa (raw, json)
Hash identifier:          a/gojYHCvsFM6jBHuxepap7EE9LkCtyN8QYEF5Zr+XU=
Subject key identifier:   B7:81:94:CB:FA:AB:BC:FC:DB:64:61:6A:49:A0:A5:24:55:F1:A7:56
Certificate issuer:       /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial:       4A278F9E559C025D035F63A9B663DED70DBDE8C9
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3134382e3233302e342e302f32342d3234203d3e20323635363036.roa
Signing time:             Fri 13 Jun 2025 17:22:08 +0000
ROA not before:           Fri 13 Jun 2025 17:17:08 +0000
ROA not after:            Fri 12 Jun 2026 17:22:08 +0000
asID:                     265606
IP address blocks:        148.230.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 10:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:27:8f:9e:55:9c:02:5d:03:5f:63:a9:b6:63:de:d7:0d:bd:e8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
        Validity
            Not Before: Jun 13 17:17:08 2025 GMT
            Not After : Jun 12 17:22:08 2026 GMT
        Subject: CN=B78194CBFAABBCFCDB64616A49A0A52455F1A756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:b5:b5:16:8b:51:04:3b:1d:99:bd:17:18:
                    35:79:43:a9:cc:9e:73:86:a2:9d:b8:fb:e0:d1:24:
                    9b:ea:a2:cd:b2:5b:aa:ac:4f:2c:45:df:42:e6:7d:
                    76:61:f8:81:6b:f8:34:04:bd:cb:78:9f:d4:d8:bf:
                    19:31:ab:e6:de:b4:8e:8d:b4:47:bd:b2:e0:9f:79:
                    57:19:00:37:45:a5:d1:0e:dc:10:5e:b3:43:ce:58:
                    3a:ff:fe:db:d7:98:06:95:9b:bd:a8:b9:18:7e:fa:
                    03:08:31:8c:47:6c:3d:f4:fe:c7:7b:e3:02:b0:48:
                    4d:c2:fd:18:15:83:b1:8e:7b:a5:b0:1b:ca:09:4a:
                    76:6f:64:d9:e3:1e:8a:fb:d9:e4:e7:bc:f2:a7:e1:
                    f5:16:c1:32:8a:ca:2a:ca:2d:ba:aa:fb:69:03:10:
                    30:57:f6:c1:99:f7:ec:c9:b6:05:f7:c4:0f:d7:01:
                    10:46:81:96:e7:f9:39:00:7c:ac:3b:f1:14:c6:72:
                    42:ce:f8:7b:d1:4e:aa:a3:02:4c:28:41:fc:21:52:
                    9c:3f:63:7f:00:6a:b3:18:cf:1b:15:cb:64:0a:15:
                    43:9b:63:9a:ae:1c:ef:5a:c7:d4:fe:ff:0b:1c:f0:
                    19:e6:ba:68:7b:f6:68:6a:f1:4f:44:00:c3:cd:90:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:81:94:CB:FA:AB:BC:FC:DB:64:61:6A:49:A0:A5:24:55:F1:A7:56
            X509v3 Authority Key Identifier:
                keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/3134382e3233302e342e302f32342d3234203d3e20323635363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.230.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:4e:63:96:43:5b:ed:e0:10:41:4a:8c:5f:b1:b9:68:97:57:
         38:81:bd:00:06:bb:08:8d:e7:f5:32:da:1c:9e:55:e1:96:12:
         b0:e3:72:4b:7a:70:75:81:2d:e5:89:ad:8a:6e:0d:78:96:0d:
         20:6a:83:05:4e:4f:74:9f:90:4c:31:6f:08:5e:c2:f3:3d:ad:
         c3:e4:a6:14:f0:19:1b:dd:dc:0d:15:6a:bd:c7:41:54:45:a9:
         9a:87:24:c5:aa:5d:bf:0a:c4:27:69:05:77:26:9a:be:b6:4c:
         08:a7:c3:c7:0d:ac:fb:de:90:cb:25:74:bd:ab:b4:75:0e:d0:
         c8:a1:81:56:05:42:77:78:f7:7e:50:5c:64:10:e0:c0:ea:37:
         13:ef:77:0d:25:81:cd:b9:92:96:0f:4c:78:5b:81:b9:a1:91:
         d7:37:de:5c:5d:98:2f:0b:a7:df:dd:07:1f:4b:a6:66:18:b3:
         74:df:fe:36:4d:eb:60:db:f7:48:a3:ac:86:d9:d8:73:31:9a:
         d5:ef:0e:5e:1a:09:e1:e1:0b:b0:f3:1e:2a:3a:dd:03:8b:68:
         cc:74:6c:70:44:d9:9f:1d:d4:b5:de:da:84:48:48:be:11:bb:
         39:4d:aa:14:cb:bf:b6:46:cc:fc:30:e1:c9:cb:54:0d:c9:30:
         a1:48:8e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 09:23:40 2025 by rpki-client