Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A372CFE78FB0EFCB488F414BB739533287F8C49F3DBDCFE41B1F9F4DE5BFF0A4/0/3138372e3130332e32302e302f32322d3234203d3e20323730303536.roa
File:                     3138372e3130332e32302e302f32322d3234203d3e20323730303536.roa (raw, json)
Hash identifier:          tV+e3S9hScB+V+o1Vpu/ZwvYD93qBNCu80iVUAfFA/c=
Subject key identifier:   25:56:A6:0E:FD:99:66:E7:6A:C2:2A:A8:98:54:F8:32:10:1E:D2:0D
Certificate issuer:       /CN=1301C582EF8FE64D6EF596812F19C74F76D7367D
Certificate serial:       74A6EFCB9918CBDCC00F9AB30BA26910DBAB889F
Authority key identifier: 13:01:C5:82:EF:8F:E6:4D:6E:F5:96:81:2F:19:C7:4F:76:D7:36:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1301C582EF8FE64D6EF596812F19C74F76D7367D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A372CFE78FB0EFCB488F414BB739533287F8C49F3DBDCFE41B1F9F4DE5BFF0A4/0/3138372e3130332e32302e302f32322d3234203d3e20323730303536.roa
Signing time:             Tue 05 Mar 2024 18:10:11 +0000
ROA not before:           Tue 05 Mar 2024 18:05:11 +0000
ROA not after:            Tue 04 Mar 2025 18:10:11 +0000
asID:                     270056
IP address blocks:        187.103.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A372CFE78FB0EFCB488F414BB739533287F8C49F3DBDCFE41B1F9F4DE5BFF0A4/0/1301C582EF8FE64D6EF596812F19C74F76D7367D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A372CFE78FB0EFCB488F414BB739533287F8C49F3DBDCFE41B1F9F4DE5BFF0A4/0/1301C582EF8FE64D6EF596812F19C74F76D7367D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1301C582EF8FE64D6EF596812F19C74F76D7367D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a6:ef:cb:99:18:cb:dc:c0:0f:9a:b3:0b:a2:69:10:db:ab:88:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1301C582EF8FE64D6EF596812F19C74F76D7367D
        Validity
            Not Before: Mar  5 18:05:11 2024 GMT
            Not After : Mar  4 18:10:11 2025 GMT
        Subject: CN=2556A60EFD9966E76AC22AA89854F832101ED20D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5e:ef:31:a0:3c:bb:e9:75:4a:2c:10:29:88:
                    b0:e4:2c:94:7d:4f:39:ec:1a:57:86:16:53:cb:88:
                    6d:cf:69:a3:0a:7e:5d:90:39:9f:34:79:59:43:17:
                    51:5e:a9:fa:2b:ae:aa:e9:a9:14:5b:32:6b:cc:7a:
                    50:4c:d8:56:66:a8:b8:d1:1b:f4:25:e3:28:84:66:
                    98:21:a8:8a:ca:77:3f:44:b9:e8:58:4f:61:d8:3f:
                    ee:ea:63:54:9d:92:1d:d7:a8:61:a1:d1:cf:c5:53:
                    a7:8d:cd:80:f0:e4:7d:cd:10:f9:89:ee:66:5c:c6:
                    e2:b2:29:53:1d:be:0b:99:83:d6:2f:83:b5:80:51:
                    d1:13:95:b7:18:db:b8:25:86:a9:fd:43:96:a1:6d:
                    34:88:5c:02:58:50:6c:de:46:0d:1d:3b:a3:97:4a:
                    e1:ac:24:93:10:8a:46:ec:62:2f:84:85:99:f4:43:
                    bd:34:2e:e2:50:d6:cb:c8:c0:eb:45:25:ed:dd:8a:
                    0a:ee:0a:82:22:47:a9:ad:9a:a2:af:1b:be:8c:56:
                    de:20:7f:cb:af:8b:ef:8e:58:2c:dd:90:3e:b9:d9:
                    15:31:3c:a0:90:4d:39:1f:19:e2:6b:65:05:17:d5:
                    d2:36:5f:f4:2f:38:92:0e:81:54:75:82:22:82:a0:
                    66:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:56:A6:0E:FD:99:66:E7:6A:C2:2A:A8:98:54:F8:32:10:1E:D2:0D
            X509v3 Authority Key Identifier:
                keyid:13:01:C5:82:EF:8F:E6:4D:6E:F5:96:81:2F:19:C7:4F:76:D7:36:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A372CFE78FB0EFCB488F414BB739533287F8C49F3DBDCFE41B1F9F4DE5BFF0A4/0/1301C582EF8FE64D6EF596812F19C74F76D7367D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1301C582EF8FE64D6EF596812F19C74F76D7367D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A372CFE78FB0EFCB488F414BB739533287F8C49F3DBDCFE41B1F9F4DE5BFF0A4/0/3138372e3130332e32302e302f32322d3234203d3e20323730303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:23:97:75:03:58:4a:46:bc:09:e5:e0:d8:55:5f:db:71:ac:
         e5:a8:bf:3b:1e:6c:5f:a3:d8:93:29:ca:55:15:1f:83:e7:b6:
         90:5a:e3:bf:27:9a:b3:07:f1:a9:48:94:85:13:c8:5e:5e:d0:
         f9:62:58:aa:63:dd:ca:f1:07:7a:11:4c:bc:39:5b:ad:47:f9:
         06:e9:62:31:21:72:51:8c:09:90:a3:59:4b:24:5e:b1:68:bb:
         97:c4:0b:ab:d6:29:41:36:99:23:5e:14:ea:3c:fb:76:13:c7:
         b8:28:93:50:3c:2e:e9:7b:d6:da:7c:ef:dc:fc:02:e4:2f:55:
         c2:41:f9:e7:b0:57:67:a0:bb:a8:ee:18:22:6f:e0:5f:76:0c:
         5b:76:20:ba:01:cd:29:18:40:7f:1c:e3:12:ec:51:03:9e:0c:
         cf:3c:7a:4c:07:e9:cd:ab:7c:81:30:82:ab:18:fe:6d:39:29:
         23:77:80:34:09:0f:e3:45:05:30:d9:1f:08:c6:a0:6c:18:09:
         59:ea:14:17:ce:2b:02:21:7d:8e:4b:68:b2:58:22:a8:14:10:
         cf:10:74:71:f7:cf:a7:6e:78:ba:47:de:54:22:f4:d4:00:f8:
         c4:99:f3:a8:b0:6f:45:83:dd:22:f6:64:f8:57:2a:e9:20:b2:
         10:03:1a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org