Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232352e302f32342d3234203d3e203634313234.roa
File:                     3134382e3232322e3232352e302f32342d3234203d3e203634313234.roa (raw, json)
Hash identifier:          T9N9s5PeWrBBUTK/zQYSVGaCZaiNX5OzKOX8qdcgfEQ=
Subject key identifier:   04:A5:C9:33:CE:0C:6D:5D:D7:2B:55:3B:CA:DC:04:F6:52:0C:B9:50
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       1C0D87DCCD7D3F62FCFF609DA61989CC449ABFD4
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232352e302f32342d3234203d3e203634313234.roa
Signing time:             Fri 03 Apr 2026 00:37:19 +0000
ROA not before:           Fri 03 Apr 2026 00:32:19 +0000
ROA not after:            Fri 02 Apr 2027 00:37:19 +0000
asID:                     64124
IP address blocks:        148.222.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Apr 2026 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0d:87:dc:cd:7d:3f:62:fc:ff:60:9d:a6:19:89:cc:44:9a:bf:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Apr  3 00:32:19 2026 GMT
            Not After : Apr  2 00:37:19 2027 GMT
        Subject: CN=04A5C933CE0C6D5DD72B553BCADC04F6520CB950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:87:7e:7f:d7:d6:a3:6c:fa:2a:c0:81:12:
                    95:ba:1a:b6:f0:94:c8:ab:ac:f8:0f:08:81:f7:99:
                    80:9c:b1:d8:68:02:0b:51:af:66:98:11:ac:86:a0:
                    12:e9:c2:f6:b1:aa:37:29:7f:55:49:98:13:9a:1d:
                    eb:9f:b1:4a:ad:a8:32:ef:f8:ee:ef:94:3e:0f:52:
                    20:31:39:10:f5:d7:ee:54:f3:17:e0:ba:1d:26:54:
                    b9:3f:13:ce:8a:82:37:e5:60:ef:02:01:17:55:1b:
                    ae:fa:fb:59:68:39:1a:77:c2:c0:cb:15:fd:4b:ca:
                    5e:79:b2:17:ff:5b:45:3c:76:b4:c5:c8:fc:a0:a2:
                    ab:d5:6b:84:3a:f9:2c:07:e8:b1:10:1e:9d:e5:50:
                    9e:17:42:42:c9:8b:7b:5e:66:3f:91:03:ff:7d:17:
                    c2:4f:cd:0b:ab:5f:07:21:ef:13:c4:8f:ce:83:5b:
                    d1:a2:f3:ae:08:9a:66:06:79:d7:34:89:71:7d:1b:
                    e2:fa:45:cd:c9:f9:2b:8c:fb:e0:e5:6a:1a:b8:6e:
                    26:1b:a2:71:7c:70:6c:0b:25:3a:25:bf:9d:bf:28:
                    c6:6e:16:fe:4a:3d:cb:b3:f9:6a:8f:1e:61:a3:8b:
                    90:0e:5d:7d:bc:44:d3:cc:54:20:86:ec:9e:01:76:
                    88:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A5:C9:33:CE:0C:6D:5D:D7:2B:55:3B:CA:DC:04:F6:52:0C:B9:50
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3232352e302f32342d3234203d3e203634313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:8b:16:a0:dd:1b:41:02:ef:f8:59:c9:41:9f:bc:28:15:28:
         ae:4f:25:45:74:d6:22:87:65:e4:34:2c:3a:2c:f0:39:dc:5b:
         70:67:9a:d1:08:5e:b4:c7:58:25:27:4a:45:b1:f1:34:64:2a:
         cd:92:be:d7:ea:4a:3f:ab:3f:49:99:e1:80:e5:f8:6c:2f:a9:
         1d:da:6d:17:5b:63:09:98:7d:3e:a3:d6:5d:cd:14:49:c7:e9:
         fc:39:6e:95:7e:41:a4:fe:3b:37:2a:be:ca:73:ae:37:12:17:
         d9:72:da:a9:6f:da:e5:41:4a:65:c6:df:fd:96:51:18:cf:fd:
         06:e2:a5:a2:37:5d:5f:aa:90:6d:94:80:5d:17:46:6a:b5:54:
         db:17:ca:ef:d8:7f:e0:25:f0:5c:62:31:a3:87:3a:42:b4:0f:
         d5:1a:0f:53:26:56:20:db:8c:58:33:fc:43:c3:63:ea:f5:40:
         82:d7:f7:eb:87:5a:7b:9a:cf:ff:67:50:8f:c2:15:c7:2c:a0:
         81:a0:3e:d2:ac:a1:17:9f:a6:6b:4f:b1:a1:e6:cc:7e:9f:85:
         cb:b1:77:62:f2:f0:71:c6:de:ce:c7:e9:40:e4:42:85:6e:4c:
         90:c3:fb:52:78:9c:d9:fa:3f:ee:97:39:78:97:bc:c8:e7:10:
         6f:28:01:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:45:22 2026 by rpki-client