Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/3134332e3230322e33322e302f32322d3234203d3e20323634363239.roa
File:                     3134332e3230322e33322e302f32322d3234203d3e20323634363239.roa (raw, json)
Hash identifier:          Hkp3moGBxM9AMDlLLjqe0KuOTPf/tVZlHU31FWw+VEc=
Subject key identifier:   A2:69:4A:5C:35:3F:BA:D1:7B:87:52:78:57:E4:32:87:CE:5D:5E:F7
Certificate issuer:       /CN=08FB62A084CE347FB5CEE83696FE4D3837F1E456
Certificate serial:       3D7AB20CE15F7381BE52872C612F83A5E1BFE8AC
Authority key identifier: 08:FB:62:A0:84:CE:34:7F:B5:CE:E8:36:96:FE:4D:38:37:F1:E4:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/3134332e3230322e33322e302f32322d3234203d3e20323634363239.roa
Signing time:             Tue 04 Feb 2025 18:18:38 +0000
ROA not before:           Tue 04 Feb 2025 18:13:38 +0000
ROA not after:            Tue 03 Feb 2026 18:18:38 +0000
asID:                     264629
IP address blocks:        143.202.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7a:b2:0c:e1:5f:73:81:be:52:87:2c:61:2f:83:a5:e1:bf:e8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08FB62A084CE347FB5CEE83696FE4D3837F1E456
        Validity
            Not Before: Feb  4 18:13:38 2025 GMT
            Not After : Feb  3 18:18:38 2026 GMT
        Subject: CN=A2694A5C353FBAD17B87527857E43287CE5D5EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ee:bc:d7:51:d0:ad:70:a8:4f:fc:15:44:c9:
                    51:d7:b9:a9:c4:f9:c7:e8:4a:73:db:ac:f4:be:fd:
                    1c:56:e7:91:9d:5a:80:be:12:7f:f3:95:a8:4e:b0:
                    81:8a:ad:b5:b5:b9:28:6d:9d:70:d4:af:0f:05:93:
                    ed:b3:a5:9c:39:64:78:3b:e8:be:db:ad:4d:57:e8:
                    ab:28:f2:fa:dd:ea:89:87:74:e6:3b:b9:92:0d:70:
                    30:ca:cf:f5:05:46:c1:3b:5b:e3:de:13:b9:30:c6:
                    4f:46:98:fb:ad:65:5d:0d:0a:3e:2b:f4:68:68:b3:
                    50:16:e7:1a:8a:c4:01:67:bf:b8:16:13:d3:6f:6d:
                    95:4d:8b:08:45:f9:90:41:55:29:29:8b:33:e0:59:
                    57:26:64:b6:04:81:d9:1e:e5:ad:bf:77:03:ab:2c:
                    50:91:0c:a6:6c:fc:a7:4f:c9:42:d3:07:b6:e4:61:
                    fb:7a:e0:8e:fb:27:b0:94:97:2e:cb:7a:d7:53:8d:
                    a9:a0:f8:95:1f:15:80:8a:fc:00:65:76:45:85:9d:
                    35:ee:5d:a4:2c:db:09:5a:f8:66:42:63:ca:e0:f7:
                    9e:09:8c:c1:08:1e:7e:1c:2c:b5:fe:bf:48:5b:0a:
                    66:5b:98:f3:34:8b:be:19:fc:f9:fb:f6:c3:8f:b3:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:69:4A:5C:35:3F:BA:D1:7B:87:52:78:57:E4:32:87:CE:5D:5E:F7
            X509v3 Authority Key Identifier:
                keyid:08:FB:62:A0:84:CE:34:7F:B5:CE:E8:36:96:FE:4D:38:37:F1:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08FB62A084CE347FB5CEE83696FE4D3837F1E456.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5DFFCE3580001D765733A50303B9C614D470365605A55EA8A03720302F514528/0/3134332e3230322e33322e302f32322d3234203d3e20323634363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:64:1b:fb:2a:cf:aa:42:5d:96:17:3a:4d:bb:b9:53:a5:b9:
         52:9b:7c:1b:a0:60:3c:ff:34:f7:f7:de:bb:20:55:d8:90:6b:
         8b:ed:5b:eb:84:95:cd:0c:b2:d1:13:d7:4f:20:86:4d:db:d9:
         e3:e5:dc:b6:a5:79:81:b9:89:78:57:9d:6f:a6:ba:34:e6:d5:
         2b:cb:e6:9e:c4:84:0b:2c:44:ac:e1:ab:3a:2a:b6:3b:82:b3:
         4f:c9:6f:fa:d5:b0:23:fe:0f:c4:72:ed:74:a4:a9:84:a1:96:
         70:db:b2:82:d0:16:4d:ab:dc:65:a5:0f:3f:b6:6c:dd:74:95:
         f1:e4:5f:1b:39:98:cc:91:14:6a:33:bb:8c:38:b9:bd:14:86:
         da:4d:4b:74:71:51:16:e8:e8:ea:55:d1:47:ca:df:28:d7:35:
         92:87:79:21:58:17:ef:02:60:04:7f:d8:e2:ba:fd:9c:10:5f:
         c1:b0:dd:88:c4:13:86:aa:ef:cd:c9:eb:27:1a:fc:16:fe:0a:
         e1:65:46:9e:d8:4b:86:b3:47:dc:b6:62:e7:ba:03:26:9b:21:
         fb:fa:9a:60:4f:0a:68:dd:45:14:ff:c4:f6:b3:a4:7c:db:1f:
         a6:36:7d:43:63:ed:eb:3e:6c:90:39:7e:f8:b4:23:26:5e:fc:
         46:69:db:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:38 2025 by rpki-client