Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/3134332e302e38302e302f32322d3234203d3e20323632323331.roa
File:                     3134332e302e38302e302f32322d3234203d3e20323632323331.roa (raw, json)
Hash identifier:          swrsgDe0o9qSKgaY5vzkAmT9scHwb/lYIccWTU1JQlo=
Subject key identifier:   F8:4A:75:D4:55:20:33:BD:E6:43:83:DC:10:90:BE:2F:0A:F6:2A:84
Certificate issuer:       /CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
Certificate serial:       5CB5FFB66F4FD6D25FE820F3A837C619ED9176E7
Authority key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/3134332e302e38302e302f32322d3234203d3e20323632323331.roa
Signing time:             Tue 04 Feb 2025 18:00:31 +0000
ROA not before:           Tue 04 Feb 2025 17:55:31 +0000
ROA not after:            Tue 03 Feb 2026 18:00:31 +0000
asID:                     262231
IP address blocks:        143.0.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 22:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b5:ff:b6:6f:4f:d6:d2:5f:e8:20:f3:a8:37:c6:19:ed:91:76:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
        Validity
            Not Before: Feb  4 17:55:31 2025 GMT
            Not After : Feb  3 18:00:31 2026 GMT
        Subject: CN=F84A75D4552033BDE64383DC1090BE2F0AF62A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:86:0d:fb:73:b5:89:e3:fe:af:af:dc:80:
                    7a:e3:10:e0:eb:3e:1c:ed:84:c2:69:55:75:75:cd:
                    cc:c1:01:74:bb:82:20:dc:be:c0:cc:7b:a6:c2:88:
                    fc:1a:1e:b0:dd:10:ef:9c:a0:c7:c6:e3:c2:57:78:
                    9c:90:d5:28:6f:e8:73:5e:e1:3d:fa:77:07:27:ce:
                    bb:4e:a8:80:bf:31:bb:f9:4d:b1:69:9d:90:e0:78:
                    1c:18:5e:4a:2f:18:dc:2b:f5:33:25:bc:55:8b:a2:
                    fc:fe:9c:fe:d7:d2:06:df:47:4b:8f:f2:db:e9:f7:
                    46:a7:85:6b:3d:eb:c0:ac:ee:d8:f2:80:2e:11:e6:
                    4d:ec:66:fe:4c:89:a4:dc:67:00:6e:6d:f0:c5:8f:
                    44:25:6f:cc:ca:b0:c3:26:15:cc:cc:c0:35:2d:70:
                    ee:0f:d8:d7:c0:cd:70:0c:57:f1:cf:1e:33:24:0e:
                    c3:e6:7b:29:92:1d:ea:9b:0e:7e:81:20:d1:72:39:
                    05:cb:04:5b:68:4b:01:f3:63:67:0f:c6:a8:9a:53:
                    8b:e7:d4:3a:e9:2d:ee:95:6c:44:aa:82:f3:89:8b:
                    d5:a1:8b:d7:60:50:01:28:de:43:72:f1:f9:37:3d:
                    9c:dd:23:f5:57:3a:77:c4:9d:30:10:b1:20:5f:3b:
                    30:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4A:75:D4:55:20:33:BD:E6:43:83:DC:10:90:BE:2F:0A:F6:2A:84
            X509v3 Authority Key Identifier:
                keyid:42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/3134332e302e38302e302f32322d3234203d3e20323632323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:4e:ee:2a:b4:94:67:6f:72:f8:c3:8f:5e:95:2f:b1:49:ec:
         2e:3b:34:d4:3c:8f:56:ee:d4:b6:1f:28:3b:c0:c1:8f:85:ee:
         15:1f:f4:16:7a:c8:fb:80:bb:95:46:d5:73:18:17:02:cc:7f:
         ca:70:35:c8:df:fa:e3:60:2a:40:16:68:bc:18:24:99:18:d8:
         70:46:73:da:a6:cf:34:9d:c4:c2:63:7f:7d:6e:08:3b:f9:f3:
         ab:a6:be:40:30:ea:76:51:01:f9:34:57:29:52:a4:2d:fb:6b:
         5d:c2:37:f2:f7:9a:a6:46:2a:60:6a:de:f7:c6:5a:cf:79:6d:
         3d:e1:c7:f2:d9:9c:09:ac:c5:18:23:5e:23:1d:b3:54:be:c0:
         df:38:8c:56:66:97:7e:76:15:55:b2:ce:30:5d:d1:64:2f:3e:
         ca:75:32:51:af:52:16:77:6c:9f:38:7f:70:45:aa:aa:4a:5b:
         47:85:19:bc:c7:1b:08:54:6d:01:da:24:ec:45:47:6e:1f:66:
         ce:9f:93:a2:0b:e9:ca:17:a9:83:5c:1c:e7:1f:39:af:ad:8f:
         22:44:58:8e:8a:19:a5:de:96:e1:0e:fc:27:5f:48:5d:8c:e1:
         f7:8b:1a:82:7a:c1:14:29:5d:f7:bd:04:66:78:3b:f8:a3:1e:
         af:04:02:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:01 2025 by rpki-client