Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa
File:                     3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa (raw, json)
Hash identifier:          f7c9bcvM/FrtMuCnFu1B5phSyPDPmpffyZEjzw8ZDJk=
Subject key identifier:   85:2A:B9:33:22:5A:23:0C:FF:05:E9:3D:B4:75:F3:5D:3D:7C:DF:E6
Certificate issuer:       /CN=4212A4C43151C156150D9BDED03D7236921BF9B8
Certificate serial:       28A5C1963335BC51CEE7A74B317973123927A11B
Authority key identifier: 42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa
Signing time:             Tue 26 Nov 2024 11:45:00 +0000
ROA not before:           Tue 26 Nov 2024 11:40:00 +0000
ROA not after:            Tue 25 Nov 2025 11:45:00 +0000
asID:                     273065
IP address blocks:        143.208.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a5:c1:96:33:35:bc:51:ce:e7:a7:4b:31:79:73:12:39:27:a1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4212A4C43151C156150D9BDED03D7236921BF9B8
        Validity
            Not Before: Nov 26 11:40:00 2024 GMT
            Not After : Nov 25 11:45:00 2025 GMT
        Subject: CN=852AB933225A230CFF05E93DB475F35D3D7CDFE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:e7:ae:f2:9d:b0:4c:c4:51:d1:ec:7d:c2:
                    95:64:73:d3:32:b5:09:c8:ba:8f:72:23:ae:c0:53:
                    55:44:ae:cd:a1:ec:73:9d:dd:b8:86:da:59:9d:37:
                    e9:4e:cc:cf:77:92:9b:4c:0c:ae:67:03:cd:a2:10:
                    13:3c:e3:dc:65:6a:0e:01:61:30:9e:d0:2b:07:81:
                    27:e8:98:37:0a:f6:c5:65:cb:b0:2f:e6:c5:3b:71:
                    e3:f5:5c:85:29:57:7f:71:a8:7f:bf:c0:42:e7:7b:
                    c0:4a:a0:8b:43:44:e4:db:a6:23:95:90:77:6f:38:
                    d4:13:e4:68:bc:3f:2b:ad:0e:2c:3a:4c:2f:ab:6d:
                    a1:aa:a1:d8:40:83:d0:38:54:b0:03:51:37:54:e2:
                    a3:72:92:93:15:39:bf:e7:db:c3:cf:dd:24:4f:bf:
                    34:18:4c:be:82:98:52:f8:e4:ea:6b:ef:35:d4:6a:
                    79:f9:11:16:a2:37:51:1d:88:3e:de:7e:38:f5:7c:
                    f1:54:c1:15:f1:02:f6:b9:e7:f2:59:21:48:9d:98:
                    5a:31:bb:3a:e5:b6:a9:0f:b9:cc:9e:89:85:c3:c2:
                    7f:95:b8:06:d6:98:2b:89:c8:4e:22:58:e9:a7:0d:
                    20:6f:51:58:84:2d:05:da:99:78:31:21:74:a8:a5:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2A:B9:33:22:5A:23:0C:FF:05:E9:3D:B4:75:F3:5D:3D:7C:DF:E6
            X509v3 Authority Key Identifier:
                keyid:42:12:A4:C4:31:51:C1:56:15:0D:9B:DE:D0:3D:72:36:92:1B:F9:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/4212A4C43151C156150D9BDED03D7236921BF9B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4212A4C43151C156150D9BDED03D7236921BF9B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D7058253696DFF1FEC4669384362D7586DA0A2EED40691E84A3763175DE13F0/0/3134332e3230382e34382e302f32322d3234203d3e20323733303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:a5:c1:5b:4a:fe:5f:a9:af:e7:1e:c6:6d:67:cf:e4:3d:3b:
         f4:66:21:a7:96:6b:63:b3:f5:20:75:22:8f:f0:53:c8:4b:17:
         63:a8:1d:12:5a:63:21:59:d2:c9:ea:03:b7:e4:78:01:ad:aa:
         c5:7b:2d:6b:34:24:e3:bd:7a:bb:6d:bb:b3:ed:4c:42:b2:c1:
         68:aa:c5:51:c5:96:39:56:d2:bc:70:c6:4f:ae:88:02:e1:4b:
         0d:0e:5c:c3:d1:d1:16:06:47:0f:49:f6:ca:0c:8d:18:99:30:
         11:bf:3c:3e:f6:7a:2d:c8:8d:8e:2b:36:ac:af:25:f0:b7:d6:
         64:03:58:c3:8f:3f:0c:13:26:9e:d0:1d:a5:00:99:75:22:5a:
         13:d3:2a:af:86:3d:77:44:93:8d:5b:39:2d:18:08:ba:29:c9:
         0d:19:3a:48:07:14:cf:cc:6f:85:5d:66:07:2e:88:b6:17:9a:
         bb:b1:f1:85:b4:f2:e5:6b:c0:66:4b:3f:ff:76:c7:a9:9d:3f:
         16:c0:da:f8:3f:bb:fe:56:b1:7f:6f:14:96:b8:a5:8d:4a:fe:
         15:cc:99:22:af:67:b8:da:38:09:06:e0:64:fa:88:e0:ce:20:
         23:27:4c:7c:45:ed:76:ca:ca:a1:2d:27:84:96:ce:7f:27:6a:
         41:bf:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:31 2025 by rpki-client