Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/3134382e3232322e3131392e302f32342d3234203d3e20323733343237.roa
File:                     3134382e3232322e3131392e302f32342d3234203d3e20323733343237.roa (raw, json)
Hash identifier:          2n/lP/vTYhCJ/lE5KHOn8yLpNMAj/OEVg+f272ZSk2I=
Subject key identifier:   55:08:6E:B4:FA:07:D3:BE:B0:21:13:70:00:B5:21:1D:FD:E2:73:1F
Certificate issuer:       /CN=2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED
Certificate serial:       65A5124D20C5982543C95793406678A17F5E74C9
Authority key identifier: 2A:ED:E3:E0:FD:44:F5:06:E2:EE:63:64:B7:D5:11:11:BA:4E:A1:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/3134382e3232322e3131392e302f32342d3234203d3e20323733343237.roa
Signing time:             Sat 07 Jun 2025 11:05:00 +0000
ROA not before:           Sat 07 Jun 2025 11:00:00 +0000
ROA not after:            Sat 06 Jun 2026 11:05:00 +0000
asID:                     273427
IP address blocks:        148.222.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a5:12:4d:20:c5:98:25:43:c9:57:93:40:66:78:a1:7f:5e:74:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED
        Validity
            Not Before: Jun  7 11:00:00 2025 GMT
            Not After : Jun  6 11:05:00 2026 GMT
        Subject: CN=55086EB4FA07D3BEB021137000B5211DFDE2731F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:b3:f3:4b:cc:bb:dd:6d:b2:9c:84:21:ce:
                    b3:47:5d:52:f4:c0:e0:37:a8:d6:d5:fa:23:6f:51:
                    e8:59:b1:4f:b1:9b:0e:f4:07:1f:ca:2a:d8:b1:5a:
                    90:f4:2f:5f:b2:37:69:a3:bc:0b:78:3a:d2:cb:86:
                    08:2d:32:9a:16:d3:d4:d6:34:20:e8:16:c4:e4:03:
                    bd:ea:70:3e:42:b5:73:77:03:56:69:7d:07:78:d2:
                    84:ec:f5:d8:11:c0:11:3d:e4:00:39:4e:ff:8a:02:
                    7b:2e:17:17:6f:ca:7c:23:6d:eb:83:40:e1:4a:5b:
                    7e:22:4e:5f:8c:16:d9:ad:f0:95:db:ec:73:7e:37:
                    6a:e3:3b:ed:3c:43:db:e5:58:69:bf:bb:e3:16:72:
                    bf:31:ea:77:ab:57:d2:d6:ee:3b:7f:66:05:5a:ce:
                    15:bc:e1:e6:41:b2:6b:e7:70:28:7e:27:c4:58:1a:
                    50:9a:8e:87:be:72:25:e0:a7:29:1a:2c:dc:cf:76:
                    a5:ae:1c:54:c3:4b:ae:00:f7:0e:d3:f0:6a:d6:bd:
                    8c:84:33:f4:bc:34:23:be:02:52:dd:b3:69:41:56:
                    e6:72:37:77:b2:cc:f8:a3:f3:c5:6e:5e:a5:f4:fb:
                    8f:65:19:1a:30:93:8d:be:3b:1c:7b:7f:75:59:ac:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:08:6E:B4:FA:07:D3:BE:B0:21:13:70:00:B5:21:1D:FD:E2:73:1F
            X509v3 Authority Key Identifier:
                keyid:2A:ED:E3:E0:FD:44:F5:06:E2:EE:63:64:B7:D5:11:11:BA:4E:A1:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/3134382e3232322e3131392e302f32342d3234203d3e20323733343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b0:8a:36:cc:1c:8b:35:09:76:fa:d1:f2:c1:07:3b:41:78:
         b5:9b:3b:f3:52:12:97:e0:5b:28:b8:24:c5:8b:17:b6:40:94:
         e0:3f:13:64:8f:60:fd:d3:0a:e7:eb:3e:9a:f4:6b:52:03:54:
         72:87:66:d4:12:4b:66:7b:08:0c:14:29:62:6e:2c:f0:9e:b2:
         d9:3d:84:d0:0d:49:be:a9:92:45:1f:84:29:5d:85:5a:17:bd:
         b8:ab:0d:83:fc:4a:16:ca:0f:dd:a0:1a:2d:f8:6f:c4:ec:e4:
         79:2d:f7:c7:67:96:b3:77:68:0c:87:29:d5:bd:fc:2f:fe:c1:
         2d:7f:d4:fd:59:9d:06:0f:f5:af:f6:8b:52:f5:22:f6:9d:6e:
         e2:cb:8a:f7:86:9a:49:61:d6:c1:0d:0e:4c:cd:b8:77:b2:86:
         9f:bb:ba:a1:5b:ff:52:a7:f8:02:91:16:a4:92:9f:24:ee:bd:
         37:21:3b:fe:51:7d:01:62:d7:d8:5c:89:74:07:d8:d0:70:36:
         7c:fc:c9:4d:d2:2e:73:05:6b:c6:4f:5d:e3:bd:61:ca:0b:b0:
         57:54:42:e0:2e:5b:ef:6d:83:f3:45:c7:e4:c1:95:7a:0c:ff:
         06:00:23:2c:80:50:08:45:15:25:bf:05:38:99:1b:3c:b3:7d:
         c4:07:71:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:25:13 2025 by rpki-client