Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131312e302f32342d3234203d3e203231353735.roa
File:                     3134382e3130322e3131312e302f32342d3234203d3e203231353735.roa (raw, json)
Hash identifier:          uuOZWtuvdUtyRwxYjr9Buk3thAw1/w9Qb14fDCRe04M=
Subject key identifier:   0E:B1:F3:48:05:08:6F:56:99:91:29:74:DE:38:71:44:A1:35:05:B9
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       7FAAC773AE5135C519F2E250FF42D90218D0F137
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131312e302f32342d3234203d3e203231353735.roa
Signing time:             Tue 04 Feb 2025 18:42:33 +0000
ROA not before:           Tue 04 Feb 2025 18:37:33 +0000
ROA not after:            Tue 03 Feb 2026 18:42:33 +0000
asID:                     21575
IP address blocks:        148.102.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 11:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:aa:c7:73:ae:51:35:c5:19:f2:e2:50:ff:42:d9:02:18:d0:f1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Feb  4 18:37:33 2025 GMT
            Not After : Feb  3 18:42:33 2026 GMT
        Subject: CN=0EB1F34805086F5699912974DE387144A13505B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f4:16:be:8f:33:3b:09:fd:a0:06:8f:c0:ea:
                    33:d5:eb:83:4c:41:12:52:99:aa:ad:6c:f4:1c:14:
                    72:97:45:22:30:95:20:78:7d:bd:c7:c9:b0:87:58:
                    da:a9:6c:b0:f7:22:a8:63:1f:d3:5e:13:c3:d6:09:
                    61:42:f6:0c:23:b9:eb:cd:43:2d:3b:2a:3d:09:6f:
                    f4:a1:f5:ac:03:86:6d:58:bb:0d:87:8c:e8:0d:02:
                    c0:63:c8:b3:a9:c3:6a:87:54:7c:50:32:09:1d:70:
                    97:aa:b0:35:4f:98:79:7a:b5:83:c8:7b:6a:65:43:
                    3a:c1:f5:33:8d:50:fd:48:89:14:67:b3:a7:8b:8c:
                    22:2c:db:25:f8:6f:4b:f5:7c:1f:75:23:58:32:ef:
                    6b:14:50:f5:7d:32:4e:1c:22:0c:3f:b7:73:ba:1e:
                    a3:60:90:cf:75:cf:35:b5:a3:94:3c:bd:85:c9:ff:
                    72:6f:52:3f:a3:eb:86:ae:e5:cc:dd:66:ae:50:f2:
                    e3:fe:91:d5:ca:ef:af:43:e1:e3:eb:ae:06:82:7f:
                    b1:72:5f:33:20:70:7a:08:b5:38:6a:7d:8d:22:ab:
                    2d:c7:72:be:40:5e:03:78:08:ce:2d:9e:01:66:9e:
                    ef:ae:35:ec:3a:e5:aa:29:5d:b0:40:95:a7:4f:00:
                    9f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B1:F3:48:05:08:6F:56:99:91:29:74:DE:38:71:44:A1:35:05:B9
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3134382e3130322e3131312e302f32342d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:51:22:b3:32:b3:e9:a4:80:66:c4:2c:82:9a:60:a7:95:a3:
         7d:b6:e8:61:49:5c:78:8b:ba:0d:74:4c:ee:59:12:4a:a0:71:
         4a:f0:22:b1:e0:13:b9:26:10:73:58:d3:2a:0a:61:9c:2b:32:
         3b:c4:e0:8d:cf:aa:99:0f:bb:81:ca:8f:9c:59:2c:df:6f:4e:
         20:20:f1:59:a4:cb:85:27:81:24:8a:b3:0d:7d:2a:47:e7:f5:
         a2:86:91:40:cd:6c:cc:c9:5a:c9:c7:64:b3:4b:0f:3c:87:cb:
         38:16:c5:52:da:26:a3:b4:99:59:c6:d9:c7:43:f5:7d:31:9f:
         dc:f1:29:f2:91:8e:f8:71:b6:03:0d:bf:8b:d9:98:56:dd:bb:
         32:84:d3:24:a7:a4:54:32:1d:8d:65:e8:ab:61:56:30:ca:a2:
         68:47:0d:48:04:f1:6a:63:19:b8:68:8a:b2:ee:56:be:0a:78:
         34:7c:3e:34:63:01:18:ab:31:dc:68:49:ff:a6:e4:4b:63:c4:
         bb:d0:b7:49:fe:0d:ae:42:0c:4d:df:3a:8b:48:70:a7:af:dc:
         12:68:02:f9:a3:e1:9e:fc:59:2d:8c:8b:36:da:9b:d5:09:19:
         bf:69:e4:ad:78:0d:f5:35:a8:1f:8a:47:be:75:e7:12:ef:50:
         98:9c:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:41:51 2025 by rpki-client