Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3134332e302e33322e302f32322d3232203d3e203237363934.roa
File:                     3134332e302e33322e302f32322d3232203d3e203237363934.roa (raw, json)
Hash identifier:          qcZsAgAJjldYL/zPVl5O0uaK+yyhEFV9G0vFsZ3fwP8=
Subject key identifier:   82:C3:A7:1A:99:86:13:02:73:B4:88:BA:F4:D0:4E:F9:6B:A8:68:AC
Certificate issuer:       /CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
Certificate serial:       50F6F6288BA7606A8A40305B48C3B7A0F3F5BF98
Authority key identifier: 24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3134332e302e33322e302f32322d3232203d3e203237363934.roa
Signing time:             Tue 04 Feb 2025 18:24:51 +0000
ROA not before:           Tue 04 Feb 2025 18:19:51 +0000
ROA not after:            Tue 03 Feb 2026 18:24:51 +0000
asID:                     27694
IP address blocks:        143.0.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f6:f6:28:8b:a7:60:6a:8a:40:30:5b:48:c3:b7:a0:f3:f5:bf:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24803CA68472E8CAA0E74006A3FA9FA617E6533E
        Validity
            Not Before: Feb  4 18:19:51 2025 GMT
            Not After : Feb  3 18:24:51 2026 GMT
        Subject: CN=82C3A71A9986130273B488BAF4D04EF96BA868AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:59:e2:52:79:46:73:10:35:8f:eb:cf:99:
                    36:13:45:13:c4:42:d9:33:d8:4d:a6:7e:0a:33:48:
                    48:96:92:7b:ab:3d:29:57:9e:ac:1f:0c:97:f5:81:
                    0c:4f:b8:f6:bb:c1:ce:46:87:9b:dc:40:45:16:27:
                    9c:c1:a9:8c:13:74:8d:a8:c3:bf:c1:c1:bd:7e:47:
                    8b:33:39:3a:61:59:30:0e:69:31:fe:c8:e7:d3:47:
                    b3:8d:69:be:92:d0:b4:a4:10:0f:88:1c:b8:29:fa:
                    dd:e2:59:14:6f:9d:78:00:fd:1e:df:fe:ef:7b:f0:
                    23:89:e8:b5:1c:d7:d8:fb:e4:b8:b6:57:c1:e4:e3:
                    96:99:e0:c8:3b:6b:9a:e7:e0:bd:3e:a5:30:e7:4b:
                    75:04:96:6b:cd:08:65:4e:f9:8b:ee:ea:6c:ba:03:
                    40:93:e8:37:fb:10:01:33:78:8d:39:93:09:21:35:
                    6e:32:1d:82:1a:e1:d8:7c:65:a6:d7:6d:af:cc:e0:
                    a6:f4:26:54:15:87:49:31:6a:1e:92:dc:21:df:cd:
                    a9:80:ab:6c:e5:9b:7e:70:46:f2:57:ac:26:f1:cd:
                    b6:95:5b:2d:07:5f:5e:b6:7b:7d:3a:b7:77:24:c2:
                    8e:5a:03:16:d1:f1:3e:66:53:35:fa:6f:50:2a:9c:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C3:A7:1A:99:86:13:02:73:B4:88:BA:F4:D0:4E:F9:6B:A8:68:AC
            X509v3 Authority Key Identifier:
                keyid:24:80:3C:A6:84:72:E8:CA:A0:E7:40:06:A3:FA:9F:A6:17:E6:53:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24803CA68472E8CAA0E74006A3FA9FA617E6533E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEFE62F4D5E7AC21BA35A5003936AF004525C4D0656C93925067B17C80C1103/0/3134332e302e33322e302f32322d3232203d3e203237363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:17:b9:16:fe:f4:37:f6:ef:92:c4:b3:61:fb:a7:9e:a2:8f:
         0b:dd:7b:a8:52:b7:80:62:6e:53:27:9a:d0:67:f5:da:90:cd:
         0c:77:b0:e7:2f:23:75:77:d1:e6:03:98:32:69:ed:bc:d6:10:
         ba:5f:a0:a9:f1:5e:78:04:78:39:56:e5:ee:ff:0d:dc:22:c5:
         26:f0:79:30:7f:b0:30:a2:eb:24:33:5b:04:8b:de:ed:c2:67:
         46:fb:ae:92:43:a4:0a:7c:f3:f5:cf:b2:02:b5:71:be:d6:de:
         a5:35:8a:f1:ac:fd:6a:50:f3:7b:2f:72:f0:5d:cc:4b:ee:a6:
         3a:e7:5f:6c:a8:c9:56:81:b2:ac:8d:b8:37:79:16:f3:4b:a4:
         f4:3a:ba:19:ac:a8:54:7f:bb:48:bb:c3:64:3f:be:57:35:b2:
         a4:c9:b8:72:ed:cb:14:bb:fa:2e:1d:e5:29:34:57:41:15:fe:
         8e:95:15:50:4d:a6:82:96:58:bf:6c:fb:b0:f1:a4:e2:54:1f:
         9d:80:a8:cb:2c:2e:3e:62:3a:fb:1e:5b:b7:e4:7e:be:30:da:
         76:74:ca:a8:1c:46:0b:b1:cd:96:b5:10:a1:cb:fc:79:8c:e0:
         85:1f:bf:dc:d3:79:0e:41:90:33:c3:79:09:bd:a7:9e:c6:c8:
         fa:58:f0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:43 2025 by rpki-client