Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36372e302f32342d3234203d3e20323732303036.roa
File:                     3134332e302e36372e302f32342d3234203d3e20323732303036.roa (raw, json)
Hash identifier:          juS8zQ2DK0E21TZAA4GvZAwHQkPEWMIgA9Apde3gTVc=
Subject key identifier:   A6:CD:6F:BB:94:A9:BA:39:71:8C:82:D7:76:53:3C:4F:FD:27:9D:D8
Certificate issuer:       /CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
Certificate serial:       165E0E53E3FC4D804C97969E2C35899520A0FAFC
Authority key identifier: 8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36372e302f32342d3234203d3e20323732303036.roa
Signing time:             Fri 18 Jul 2025 14:25:54 +0000
ROA not before:           Fri 18 Jul 2025 14:20:54 +0000
ROA not after:            Fri 17 Jul 2026 14:25:54 +0000
asID:                     272006
IP address blocks:        143.0.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 22:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5e:0e:53:e3:fc:4d:80:4c:97:96:9e:2c:35:89:95:20:a0:fa:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC4B3EBC3ADB80107711DD87A95CA1625852301
        Validity
            Not Before: Jul 18 14:20:54 2025 GMT
            Not After : Jul 17 14:25:54 2026 GMT
        Subject: CN=A6CD6FBB94A9BA39718C82D776533C4FFD279DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:a5:5b:77:41:25:c6:06:4a:20:b3:55:14:
                    94:e5:0b:31:c9:57:c3:ee:d2:2f:84:d1:e6:a0:9f:
                    1e:c8:cb:fb:d8:05:70:f9:e6:15:a5:0a:c3:8f:08:
                    8a:7b:e2:ed:6c:4a:1a:95:41:81:d0:e2:01:af:eb:
                    ff:bc:83:53:6d:eb:9f:e4:d5:6c:9b:24:38:48:f3:
                    29:22:14:22:1a:26:8b:da:47:39:60:09:56:fe:e4:
                    da:c8:83:b8:2a:55:ad:41:51:9d:a8:13:bd:ae:83:
                    67:45:bf:5f:1e:d0:81:e9:14:4c:46:dd:10:70:b1:
                    5a:fd:1b:38:bb:85:27:50:b8:12:22:67:b0:7b:78:
                    91:93:65:9f:29:15:42:68:18:35:2b:1a:57:2a:b6:
                    7c:94:02:3c:3f:32:24:42:cf:53:f9:b4:8a:34:f6:
                    f5:b4:62:4c:2c:bf:bd:55:9e:4f:ca:65:0d:34:a7:
                    48:3a:e1:4e:ac:1e:07:df:b2:cb:4e:26:08:de:c5:
                    3c:96:7c:0d:15:ee:7e:4e:34:df:29:b4:74:21:ee:
                    1d:5b:1b:69:21:7c:a8:61:8b:4b:09:2a:06:d7:f0:
                    97:de:ad:2d:d1:a8:2c:74:23:50:05:a9:89:c7:93:
                    dd:d4:ac:f5:04:90:a1:b8:98:8b:de:a1:4a:48:17:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CD:6F:BB:94:A9:BA:39:71:8C:82:D7:76:53:3C:4F:FD:27:9D:D8
            X509v3 Authority Key Identifier:
                keyid:8A:C4:B3:EB:C3:AD:B8:01:07:71:1D:D8:7A:95:CA:16:25:85:23:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AC4B3EBC3ADB80107711DD87A95CA1625852301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86189BDFBC3D149CB43B597A46FAF1CAE399A277652B28DBF2887C051286ABB8/0/3134332e302e36372e302f32342d3234203d3e20323732303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:9b:77:38:5a:28:d4:45:93:a0:a3:fb:08:6e:92:f3:f8:89:
         8b:da:22:43:5f:6d:2f:a9:45:a2:a4:b6:a7:bb:40:8b:57:a9:
         e2:45:bf:3c:ab:28:df:f8:53:51:91:eb:38:a1:da:55:e0:5c:
         a0:2c:85:34:d5:87:18:41:8b:c3:6c:97:da:e3:bb:fc:9d:93:
         ca:fc:de:74:04:eb:92:aa:d4:80:78:93:1c:8a:26:fe:30:a0:
         b6:e2:9d:07:4c:69:f6:0d:69:ec:2b:da:7e:52:66:df:fd:43:
         f0:bf:48:85:90:c6:34:68:e8:cd:d5:bd:70:81:f8:6e:6b:44:
         29:76:71:be:92:55:d6:98:f2:97:6a:9c:fb:85:f5:d7:16:ca:
         87:63:5f:84:81:0e:0f:f2:11:91:1b:54:ad:e3:13:70:23:d1:
         fb:d8:f5:44:43:9c:40:26:c0:2e:3f:8c:2a:df:ad:51:b2:e0:
         e3:9d:d1:9a:88:e1:c4:48:d5:9c:b4:da:e9:38:9c:00:f6:88:
         5a:ad:2d:37:0c:80:5e:36:8c:57:57:89:a4:86:42:8c:83:4b:
         18:da:a9:aa:0c:f3:06:6f:f0:d7:d7:26:97:58:ff:c2:5c:42:
         7f:1f:cc:67:17:c4:a6:46:21:6e:11:eb:b1:73:b3:28:07:35:
         28:d5:f0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 11:18:30 2025 by rpki-client