Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6815A2F265B5FC8BFDEA487B6BDE5DBE2FBB5C16885D03FB892CAFAB884C3C34/0/3134332e302e3130322e302f32332d3234203d3e20323634363437.roa
File:                     3134332e302e3130322e302f32332d3234203d3e20323634363437.roa (raw, json)
Hash identifier:          ndJGAj/eazwci+1H8+kmWOXA0Pn8nAXCcE1Svx+w3BM=
Subject key identifier:   A2:E6:33:C5:AE:4B:0A:C4:51:81:25:44:6E:D5:FF:F9:B1:35:5E:F7
Certificate issuer:       /CN=6896E8DB6AE7C7838F549236D16A22273ABF26D8
Certificate serial:       587FD463633BC4EDB0323529410CAE73F9B9E674
Authority key identifier: 68:96:E8:DB:6A:E7:C7:83:8F:54:92:36:D1:6A:22:27:3A:BF:26:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6896E8DB6AE7C7838F549236D16A22273ABF26D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6815A2F265B5FC8BFDEA487B6BDE5DBE2FBB5C16885D03FB892CAFAB884C3C34/0/3134332e302e3130322e302f32332d3234203d3e20323634363437.roa
Signing time:             Tue 04 Feb 2025 18:19:09 +0000
ROA not before:           Tue 04 Feb 2025 18:14:09 +0000
ROA not after:            Tue 03 Feb 2026 18:19:09 +0000
asID:                     264647
IP address blocks:        143.0.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6815A2F265B5FC8BFDEA487B6BDE5DBE2FBB5C16885D03FB892CAFAB884C3C34/0/6896E8DB6AE7C7838F549236D16A22273ABF26D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6815A2F265B5FC8BFDEA487B6BDE5DBE2FBB5C16885D03FB892CAFAB884C3C34/0/6896E8DB6AE7C7838F549236D16A22273ABF26D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6896E8DB6AE7C7838F549236D16A22273ABF26D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7f:d4:63:63:3b:c4:ed:b0:32:35:29:41:0c:ae:73:f9:b9:e6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6896E8DB6AE7C7838F549236D16A22273ABF26D8
        Validity
            Not Before: Feb  4 18:14:09 2025 GMT
            Not After : Feb  3 18:19:09 2026 GMT
        Subject: CN=A2E633C5AE4B0AC4518125446ED5FFF9B1355EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:0f:9c:a3:f2:71:88:ac:28:f5:9b:63:07:
                    c7:6d:c1:3c:30:f1:85:5f:6e:21:76:96:88:82:28:
                    08:c2:ad:3f:aa:23:7d:0e:e9:85:a9:70:7d:d4:f1:
                    d3:25:67:6b:50:80:8a:be:3b:b3:21:ff:72:a3:d1:
                    34:6f:26:da:51:a8:3f:18:3d:63:b1:c6:f3:3f:cb:
                    34:18:ff:70:87:3d:ae:8c:6d:77:77:42:e3:41:85:
                    2e:99:8c:d7:b7:9a:2c:34:1b:59:58:8e:58:46:a2:
                    03:89:7e:40:80:2a:e3:33:63:17:4d:30:43:33:ef:
                    25:07:0e:4c:e8:fb:f7:e4:0a:d8:4a:02:12:89:9f:
                    11:a3:5b:78:fb:a1:d7:73:81:d6:2e:64:52:1b:ee:
                    a5:22:c5:02:88:6f:d6:cd:46:2b:e0:a6:25:71:1e:
                    da:21:c9:3d:36:3b:09:4b:53:63:24:8c:5d:72:bc:
                    76:8d:83:43:0a:3b:e2:37:d0:05:28:f0:7d:c0:13:
                    f0:80:64:99:84:0a:b7:a5:ae:9d:36:07:1c:a6:ea:
                    f5:5d:4e:95:bc:fb:98:6d:6f:8c:2b:8b:c6:05:71:
                    ed:b1:79:7c:8a:48:b1:70:57:27:07:47:19:e6:51:
                    74:ff:45:9b:8a:64:fd:aa:33:25:29:a7:22:8a:0b:
                    43:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E6:33:C5:AE:4B:0A:C4:51:81:25:44:6E:D5:FF:F9:B1:35:5E:F7
            X509v3 Authority Key Identifier:
                keyid:68:96:E8:DB:6A:E7:C7:83:8F:54:92:36:D1:6A:22:27:3A:BF:26:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6815A2F265B5FC8BFDEA487B6BDE5DBE2FBB5C16885D03FB892CAFAB884C3C34/0/6896E8DB6AE7C7838F549236D16A22273ABF26D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6896E8DB6AE7C7838F549236D16A22273ABF26D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6815A2F265B5FC8BFDEA487B6BDE5DBE2FBB5C16885D03FB892CAFAB884C3C34/0/3134332e302e3130322e302f32332d3234203d3e20323634363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:c7:0b:05:f8:d3:b3:62:ce:93:2c:1c:a6:93:cb:d9:13:40:
         61:a7:fb:e3:83:c3:08:49:89:8a:95:c9:b4:00:e4:e7:b5:11:
         93:c3:fb:84:9a:f3:44:fd:63:8b:28:67:89:23:97:2d:ad:d9:
         9b:8c:a3:96:b7:bf:4b:8f:b0:aa:ff:5e:61:5f:ef:ff:b3:d1:
         7e:70:f8:c9:b7:0b:9e:3e:69:d8:58:7f:d7:55:67:0b:e9:1c:
         ca:33:23:aa:ac:78:43:d3:ab:11:fd:cc:8b:b4:5c:41:f8:04:
         34:a2:59:bc:90:c8:df:cf:82:5a:6d:82:eb:39:89:33:96:d1:
         8a:7f:47:31:11:b9:7e:b5:4a:14:1d:95:cd:70:42:2a:3a:ea:
         65:ec:59:5a:5f:95:3b:6e:cf:73:1f:d9:07:fb:4d:6f:76:09:
         62:cd:58:bc:7c:ec:93:c4:64:16:05:41:5d:9d:f1:7c:db:2e:
         e0:f9:18:1a:07:da:23:29:40:4e:f9:09:8f:81:ad:da:85:e8:
         91:94:d4:60:78:ef:49:98:6a:df:73:4c:3b:66:89:a4:ed:00:
         1d:c9:9a:c6:0c:13:8f:e5:fe:2b:a3:d9:79:30:80:7e:7e:7e:
         32:9d:72:a4:49:8a:e7:13:17:32:b5:e6:68:01:1a:a8:35:85:
         88:22:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:26:30 2025 by rpki-client