Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233302e302f32342d3234203d3e20323730303037.roa
File:                     3134382e3232322e3233302e302f32342d3234203d3e20323730303037.roa (raw, json)
Hash identifier:          5KNU+cN/ZRhcoMRKHxoaN0iqUcr/AUuD67lRaRU8YX8=
Subject key identifier:   EE:79:6A:4B:60:77:AD:33:5B:07:65:5D:5E:6F:E8:0C:71:C2:22:14
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       48C7489989F0A9D7A6DE5F1BBE079BE7E0121E7F
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233302e302f32342d3234203d3e20323730303037.roa
Signing time:             Mon 09 Jun 2025 18:21:24 +0000
ROA not before:           Mon 09 Jun 2025 18:16:24 +0000
ROA not after:            Mon 08 Jun 2026 18:21:24 +0000
asID:                     270007
IP address blocks:        148.222.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 15:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c7:48:99:89:f0:a9:d7:a6:de:5f:1b:be:07:9b:e7:e0:12:1e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Jun  9 18:16:24 2025 GMT
            Not After : Jun  8 18:21:24 2026 GMT
        Subject: CN=EE796A4B6077AD335B07655D5E6FE80C71C22214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:15:f5:4a:74:ca:36:b0:d7:a1:5b:cb:5e:
                    1d:00:04:2f:9f:78:95:28:bb:b8:e1:ab:e0:73:09:
                    fb:90:f7:bb:14:dc:7a:d0:10:f1:ce:1d:98:73:7a:
                    31:a4:08:d9:69:38:35:a5:5d:7d:fe:71:0a:7c:33:
                    64:e6:c3:4b:86:07:ac:66:c5:8f:80:a8:a4:1c:97:
                    71:9a:68:1b:a2:d0:5c:78:24:96:5f:e5:81:f3:f8:
                    74:a0:7b:8b:2d:26:04:de:36:80:89:2f:46:fa:84:
                    d3:4a:98:01:b6:58:64:2f:d4:30:9a:af:f5:e3:2a:
                    ce:ba:d1:29:1a:9b:b1:30:a0:35:04:1e:57:88:a6:
                    96:78:db:56:c3:e0:72:44:62:95:d4:c4:57:b3:ff:
                    71:d1:50:70:6c:09:a0:1a:dd:0c:c7:75:c7:05:5c:
                    c4:49:39:14:91:02:23:f2:16:14:2e:09:97:fc:3d:
                    b9:e4:6a:45:94:e2:b2:37:b3:11:26:32:47:0c:6c:
                    c8:2d:9f:56:74:b8:7b:eb:10:72:29:71:34:00:df:
                    34:48:af:9e:a7:fb:19:fd:78:fc:93:6a:de:9e:b4:
                    63:72:27:a1:db:e5:a5:58:db:54:c5:da:93:82:74:
                    b6:3b:44:bb:40:1c:72:17:f2:55:44:26:06:16:eb:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:79:6A:4B:60:77:AD:33:5B:07:65:5D:5E:6F:E8:0C:71:C2:22:14
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3134382e3232322e3233302e302f32342d3234203d3e20323730303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:23:3a:11:52:08:47:16:be:db:9a:6d:5b:27:d0:e2:85:0e:
         f7:8d:59:4f:cd:bb:e9:65:be:48:2a:69:81:4d:0d:66:94:00:
         7a:f5:24:63:96:1b:c9:1d:dd:10:5e:ac:d8:15:46:53:ce:f3:
         af:30:c3:e3:7c:7c:d8:59:5d:01:17:33:c5:48:e6:6c:23:e4:
         e6:da:2f:37:97:c6:43:95:0a:e2:0d:8f:16:1d:8d:27:78:41:
         36:e6:f2:48:bd:c2:23:62:83:29:83:30:da:20:97:44:2b:b8:
         b6:1d:46:70:a0:e1:bc:6e:fd:48:3c:28:68:af:b8:93:63:31:
         76:7d:7d:6b:1b:3e:7c:cc:6b:d7:bc:8b:5d:d1:cb:c7:86:52:
         ea:29:fd:15:bb:59:47:01:5c:4b:fa:09:d6:36:b6:2f:0a:82:
         7e:af:e8:8d:cf:22:63:97:f2:7c:33:90:83:9d:75:50:cd:da:
         2d:ec:9f:6d:ff:f1:72:02:7b:8b:d1:7f:24:b7:4d:96:92:e6:
         4d:ae:cb:9c:88:b1:50:bd:99:91:76:ea:73:e2:f4:71:e7:1d:
         68:67:8b:4c:73:3f:4a:50:3e:93:1b:56:89:df:da:61:12:32:
         fa:15:79:fa:03:8d:65:32:9e:ba:a4:eb:f4:38:6e:68:ac:0e:
         29:60:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:07:05 2025 by rpki-client