Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3134332e3133372e3134342e302f32322d3234203d3e203232343131.roa
File:                     3134332e3133372e3134342e302f32322d3234203d3e203232343131.roa (raw, json)
Hash identifier:          XGwtOih+mZgbY31e45xU2aYj+vIwySXnfA2BbGnEmbc=
Subject key identifier:   72:DD:60:5E:D0:B3:76:24:79:A7:59:A4:82:88:BF:23:63:E6:BC:FE
Certificate issuer:       /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial:       5536610B2041165DA512E882FAEE5AC86D2BD019
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3134332e3133372e3134342e302f32322d3234203d3e203232343131.roa
Signing time:             Tue 04 Feb 2025 18:00:49 +0000
ROA not before:           Tue 04 Feb 2025 17:55:49 +0000
ROA not after:            Tue 03 Feb 2026 18:00:49 +0000
asID:                     22411
IP address blocks:        143.137.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:36:61:0b:20:41:16:5d:a5:12:e8:82:fa:ee:5a:c8:6d:2b:d0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
        Validity
            Not Before: Feb  4 17:55:49 2025 GMT
            Not After : Feb  3 18:00:49 2026 GMT
        Subject: CN=72DD605ED0B3762479A759A48288BF2363E6BCFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:ae:17:8b:b7:9c:a1:9c:e8:93:0b:42:e9:
                    6a:8b:28:90:df:ec:df:6d:ec:07:58:b1:b7:53:fb:
                    9a:60:2c:7e:eb:c2:f3:8b:5b:8e:73:4a:05:84:e5:
                    81:6a:91:74:7a:61:53:f4:42:c1:59:0e:66:2e:43:
                    c8:e6:fb:dc:27:aa:84:56:08:be:99:5c:ab:7f:99:
                    d0:5a:85:a9:40:b1:e6:01:15:f0:43:ed:05:da:82:
                    57:32:3f:aa:5d:23:c8:60:98:07:b5:bc:c3:2e:eb:
                    71:d2:28:c0:df:04:ff:16:06:10:d2:58:4c:c2:9c:
                    20:4d:a4:e5:28:15:93:48:a6:0a:54:9e:d4:19:92:
                    0d:b8:41:7f:56:2c:fb:89:b1:3a:83:89:3c:a4:59:
                    e7:09:db:c1:5a:f3:3c:cb:3f:52:b3:4e:44:1a:88:
                    3a:18:0a:92:51:a5:8d:7d:e9:e8:99:15:83:8f:b0:
                    2b:0e:fa:8e:4d:2a:ae:d9:f7:f8:59:a7:be:0f:c3:
                    52:21:9a:d2:01:aa:44:2f:63:f5:14:9a:d7:87:9c:
                    78:2d:5a:79:4c:ad:39:dc:29:91:7f:8e:54:53:70:
                    b1:50:34:f8:8f:0b:f8:47:fe:b1:f4:9a:f1:5f:6c:
                    92:0c:01:e2:50:ce:4a:ce:32:fb:5b:bd:ac:70:64:
                    39:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DD:60:5E:D0:B3:76:24:79:A7:59:A4:82:88:BF:23:63:E6:BC:FE
            X509v3 Authority Key Identifier:
                keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3134332e3133372e3134342e302f32322d3234203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:6e:ae:8a:07:8c:b3:7e:1d:4b:c9:7e:e5:31:e0:d0:e3:4d:
         1d:56:52:0c:81:42:c4:19:5d:a5:38:50:16:ee:4a:e3:a6:c9:
         04:e4:af:e6:9e:c1:b1:9b:72:13:8f:10:3a:ff:75:84:e6:29:
         0b:71:bb:dd:8a:27:22:f6:eb:03:22:f8:d1:1a:e9:9e:29:e4:
         1e:76:52:47:d4:4f:ea:8e:d2:dd:9b:1d:c9:7f:97:7f:ac:b0:
         92:36:96:bc:db:d1:07:7f:1a:97:57:2b:91:61:70:49:cb:87:
         15:46:25:08:8a:3b:09:cc:cb:78:9e:8f:8a:62:94:c0:96:2b:
         ef:0c:90:95:cb:0f:f9:ac:74:ad:03:bb:2f:34:36:d3:9b:ef:
         4e:a9:f1:ed:50:29:53:80:a9:0f:53:1a:7d:82:91:02:4a:ea:
         5c:23:e3:20:54:4c:45:71:36:ab:35:46:05:40:f6:2e:cb:8a:
         f8:23:4d:5f:ed:33:16:cf:85:74:82:9a:72:fe:5d:c0:95:a9:
         b3:73:a1:97:ce:df:ca:11:c5:42:54:53:c0:6d:64:7c:1e:1d:
         29:d5:f0:9d:bd:6a:37:2d:3b:5f:4b:35:0c:55:e2:f0:00:d2:
         cb:f2:c8:d0:98:2a:db:ca:ec:61:6b:ab:7d:73:32:33:14:7f:
         72:0c:0b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:49:12 2025 by rpki-client