Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/3134332e3235352e3135362e302f32342d3234203d3e203335343135.roa
File:                     3134332e3235352e3135362e302f32342d3234203d3e203335343135.roa (raw, json)
Hash identifier:          ALM/+IDJfda67hMWaLlgIyJgAa8NVsMkTixLG0tkv7s=
Subject key identifier:   F0:4C:ED:B9:29:71:7B:F9:7E:27:34:E4:D2:D1:03:95:1E:8F:0D:F0
Certificate issuer:       /CN=C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D
Certificate serial:       620E04310711F007949840D8CEF2BDBBBCC08DD6
Authority key identifier: C0:B7:88:66:22:A5:38:FD:5E:3C:3C:91:D6:B6:A0:DF:26:65:C7:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/3134332e3235352e3135362e302f32342d3234203d3e203335343135.roa
Signing time:             Tue 04 Feb 2025 18:18:37 +0000
ROA not before:           Tue 04 Feb 2025 18:13:37 +0000
ROA not after:            Tue 03 Feb 2026 18:18:37 +0000
asID:                     35415
IP address blocks:        143.255.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0e:04:31:07:11:f0:07:94:98:40:d8:ce:f2:bd:bb:bc:c0:8d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D
        Validity
            Not Before: Feb  4 18:13:37 2025 GMT
            Not After : Feb  3 18:18:37 2026 GMT
        Subject: CN=F04CEDB929717BF97E2734E4D2D103951E8F0DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:44:77:67:8b:46:a6:00:2c:f8:50:f6:a2:ca:
                    1e:43:6f:95:14:b8:02:4a:a7:33:e2:a6:ad:98:c0:
                    dd:6a:7b:63:2f:18:fa:17:76:0a:68:e6:a0:16:53:
                    96:a1:1f:ae:05:32:77:45:78:a4:df:8a:60:3d:b8:
                    05:29:3f:a7:25:48:be:eb:0e:a9:ff:fb:3c:97:28:
                    fd:e7:09:5b:f8:6e:da:ba:7e:97:d8:b6:17:0c:ac:
                    f6:f9:4c:66:13:fd:c6:86:5f:5b:9e:e7:74:fe:93:
                    cc:f4:0d:6e:dd:89:26:f0:d5:8b:a3:4f:1f:73:b9:
                    21:6c:f4:6f:81:32:22:83:52:f2:c1:d9:12:68:fb:
                    f8:6b:96:c0:29:da:54:ba:86:c4:9d:e6:7e:95:63:
                    d5:13:34:08:bb:ce:29:ae:dd:f9:26:f7:e2:99:fa:
                    f8:9b:30:c7:01:6b:ca:f8:c1:0b:ee:07:1c:07:e8:
                    f4:56:ed:41:6d:27:15:27:3d:74:17:e1:0e:89:0b:
                    9d:ef:4e:a9:23:8d:39:47:cc:f2:e7:ec:87:13:49:
                    26:bb:60:ff:4b:13:de:b0:44:b7:35:2a:c8:6d:36:
                    77:15:c3:48:61:0c:a1:66:09:81:63:9f:90:25:58:
                    b7:6f:d0:1f:f1:00:fa:f9:c0:e3:68:35:aa:99:f6:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4C:ED:B9:29:71:7B:F9:7E:27:34:E4:D2:D1:03:95:1E:8F:0D:F0
            X509v3 Authority Key Identifier:
                keyid:C0:B7:88:66:22:A5:38:FD:5E:3C:3C:91:D6:B6:A0:DF:26:65:C7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0B7886622A538FD5E3C3C91D6B6A0DF2665C78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14C42BDE910BAA62EDD4E8746D255602440A5CFED3B4A483B3E30AB84CCFDE2A/0/3134332e3235352e3135362e302f32342d3234203d3e203335343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:15:0f:53:e0:fa:5e:93:f3:a2:78:e4:93:61:b0:25:17:1d:
         c9:a6:71:f5:e3:a5:96:51:cc:ed:4c:aa:68:3a:54:e5:fb:b9:
         91:6c:0a:00:86:bd:f7:fa:17:2d:84:6d:00:73:61:d9:bd:c3:
         27:dc:99:eb:ec:eb:00:ce:36:06:2e:57:93:65:c4:92:fa:5b:
         47:1c:d4:8a:a9:83:6b:67:95:d0:61:59:aa:01:f6:0a:b6:c6:
         74:72:03:5a:1d:32:32:0d:85:38:02:30:29:f7:15:70:65:f6:
         54:ca:0c:2b:4c:f0:b5:c3:b2:7d:06:60:26:1d:a3:17:59:ca:
         2e:c8:13:7e:6e:88:14:f5:18:7e:4a:e6:2a:44:17:88:50:3c:
         37:d1:e9:db:6b:6b:03:a5:72:57:3f:5f:e6:16:99:f2:e4:d8:
         c7:1f:d6:3f:4b:41:0e:89:11:6e:7e:82:25:41:e3:29:69:eb:
         6d:f9:ea:6d:ee:65:7a:9c:78:a9:da:61:9b:34:b5:47:33:23:
         dd:e0:73:f0:66:92:d1:ac:56:af:b8:6e:39:0a:23:96:1b:0a:
         5b:2c:3b:1a:94:8d:4e:1c:c2:29:9e:c9:80:80:33:33:ac:34:
         c0:fb:ed:c6:7e:e3:9d:9b:3f:96:d9:61:32:50:4a:b6:01:29:
         5d:67:a6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:30 2025 by rpki-client