Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232342e302f32342d3234203d3e203634313532.roa
File:                     3134382e3232322e3232342e302f32342d3234203d3e203634313532.roa (raw, json)
Hash identifier:          nUD1rnyFpjwWVgT/WDEUw33h2IXNFezMM8AQNBqvSqo=
Subject key identifier:   F1:9C:30:3A:4B:57:F1:AE:17:67:30:79:72:88:9F:BA:88:12:B6:94
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       29B75BDBEEB5795189CA84B2FBF8DDF828A7884C
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232342e302f32342d3234203d3e203634313532.roa
Signing time:             Fri 03 Apr 2026 00:37:20 +0000
ROA not before:           Fri 03 Apr 2026 00:32:20 +0000
ROA not after:            Fri 02 Apr 2027 00:37:20 +0000
asID:                     64152
IP address blocks:        148.222.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b7:5b:db:ee:b5:79:51:89:ca:84:b2:fb:f8:dd:f8:28:a7:88:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Apr  3 00:32:20 2026 GMT
            Not After : Apr  2 00:37:20 2027 GMT
        Subject: CN=F19C303A4B57F1AE1767307972889FBA8812B694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:8c:63:22:ba:17:e5:27:98:17:6c:af:97:
                    c7:9f:96:cc:73:58:ba:fc:ae:87:90:e8:2c:dd:b8:
                    70:8e:0d:9e:83:76:5c:4b:54:56:c9:b1:6d:df:21:
                    8f:e9:df:fb:44:76:86:b6:d7:73:ef:55:7c:cd:93:
                    00:17:c0:fb:ac:1c:d0:13:4b:4c:bb:e9:bb:6a:f8:
                    9b:62:9a:3a:4a:17:8d:55:34:2a:38:e0:e2:e0:78:
                    80:59:bf:9b:1d:ae:13:74:85:9d:ab:59:f6:f1:f6:
                    ad:8d:29:80:3c:44:b9:c2:aa:90:22:c1:09:15:fa:
                    96:55:2c:30:bd:67:95:89:59:35:13:c7:c1:55:f9:
                    67:ad:6f:42:00:5a:f8:c8:7b:c1:fc:f0:4f:eb:45:
                    ba:42:41:39:6e:29:85:dd:16:34:9c:b5:4f:e9:98:
                    d7:5b:85:1e:ea:8a:1b:f8:09:f3:ef:ac:66:ff:47:
                    99:a7:86:3e:1e:65:be:2e:0d:1b:a0:a8:5c:c0:1e:
                    86:03:55:b7:c6:71:f7:f2:cc:bc:9d:cb:53:0e:6b:
                    96:58:9e:c9:81:16:e3:a2:1a:03:ab:bd:72:45:06:
                    99:af:9e:ad:d4:dd:88:74:54:d0:d8:a7:a9:4b:2b:
                    79:2c:ae:dd:39:a4:89:bd:94:ae:8e:3f:e8:79:49:
                    68:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9C:30:3A:4B:57:F1:AE:17:67:30:79:72:88:9F:BA:88:12:B6:94
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232342e302f32342d3234203d3e203634313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:9c:cd:1d:c0:38:65:b9:31:43:fd:ad:c7:ba:85:54:4a:7d:
         13:f2:e7:80:1c:43:92:22:bc:19:65:13:6a:4e:b1:bf:a5:ef:
         bb:5c:a1:f7:0d:26:c9:06:59:ba:b7:26:b9:cb:b1:05:84:f2:
         3a:55:14:97:a3:8e:5b:b7:45:38:90:a1:ae:ba:05:7c:10:f4:
         24:1d:ac:0f:6f:66:ec:8b:a7:76:3f:b6:f2:0d:30:e6:62:00:
         a9:c2:b2:1d:34:a5:72:82:98:b4:ed:12:46:ff:4b:0f:28:d7:
         96:83:c6:de:b6:37:46:f1:86:36:cb:1e:49:71:07:b7:47:b8:
         b0:f0:2d:ee:39:a0:be:67:56:41:c3:62:47:11:be:b5:98:1c:
         74:21:c4:70:2f:80:4d:f1:ed:56:c4:9e:11:e0:8c:fd:e5:70:
         84:e3:4d:d4:f5:31:cb:06:e0:13:ea:a0:b9:a7:7e:45:37:66:
         26:d7:8a:0f:3a:60:25:ee:cb:ad:22:0f:a1:e7:65:ad:24:6d:
         67:7e:68:fb:64:3c:79:07:49:94:91:aa:d8:ff:f2:55:f7:c0:
         6b:5f:2e:41:1d:27:b8:ce:36:b8:a4:f5:23:68:d0:c1:91:ba:
         fa:21:c8:48:3b:8e:9b:88:bd:d8:fa:de:2b:db:33:b0:81:35:
         27:f7:ca:14
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKbdb2+61eVGJyoSy+/jd+CiniEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCRTg1MzUxNkE2RDM1OTBGMkM5RUQ0QjZCOTQ2OTZD
NDE1Rjg4RjAeFw0yNjA0MDMwMDMyMjBaFw0yNzA0MDIwMDM3MjBaMDMxMTAvBgNV
BAMTKEYxOUMzMDNBNEI1N0YxQUUxNzY3MzA3OTcyODg5RkJBODgxMkI2OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ZIxjIroX5SeYF2yvl8eflsxz
WLr8roeQ6CzduHCODZ6DdlxLVFbJsW3fIY/p3/tEdoa213PvVXzNkwAXwPusHNAT
S0y76btq+JtimjpKF41VNCo44OLgeIBZv5sdrhN0hZ2rWfbx9q2NKYA8RLnCqpAi
wQkV+pZVLDC9Z5WJWTUTx8FV+Wetb0IAWvjIe8H88E/rRbpCQTluKYXdFjSctU/p
mNdbhR7qihv4CfPvrGb/R5mnhj4eZb4uDRugqFzAHoYDVbfGcffyzLydy1MOa5ZY
nsmBFuOiGgOrvXJFBpmvnq3U3Yh0VNDYp6lLK3ksrt05pIm9lK6OP+h5SWivAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU8ZwwOktX8a4XZzB5coifuogStpQwHwYDVR0j
BBgwFoAUkr6FNRam01kPLJ7UtrlGlsQV+I8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzY4REYwMENDOTI4QTBGREVERUUxQkE1M0NCOUM0NjI2
RTVFMTA1MDc2RUVFQjZCQTI0QkUxN0EzNkIxNEYyLzAvOTJCRTg1MzUxNkE2RDM1
OTBGMkM5RUQ0QjZCOTQ2OTZDNDE1Rjg4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkJFODUzNTE2QTZEMzU5MEYy
QzlFRDRCNkI5NDY5NkM0MTVGODhGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzc2OERGMDBDQzkyOEEwRkRFREVFMUJBNTNDQjlDNDYyNkU1RTEwNTA3
NkVFRUI2QkEyNEJFMTdBMzZCMTRGMi8wLzMxMzQzODJlMzIzMjMyMmUzMjMyMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjM0MzEzNTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlN7g
MA0GCSqGSIb3DQEBCwUAA4IBAQAcnM0dwDhluTFD/a3HuoVUSn0T8ueAHEOSIrwZ
ZRNqTrG/pe+7XKH3DSbJBlm6tya5y7EFhPI6VRSXo45bt0U4kKGuugV8EPQkHawP
b2bsi6d2P7byDTDmYgCpwrIdNKVygpi07RJG/0sPKNeWg8betjdG8YY2yx5JcQe3
R7iw8C3uOaC+Z1ZBw2JHEb61mBx0IcRwL4BN8e1WxJ4R4Iz95XCE403U9THLBuAT
6qC5p35FN2Ym14oPOmAl7sutIg+h52WtJG1nfmj7ZDx5B0mUkarY//JV98BrXy5B
HSe4zja4pPUjaNDBkbr6IchIO46biL3Y+t4r2zOwgTUn98oU
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:48:53 2026 by rpki-client