Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3134332e302e3233362e302f32322d3234203d3e203237383834.roa
File:                     3134332e302e3233362e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier:          +gFzA2zTUmDtx9sdh3k7NwaHhBjF2aTCsZW1cxTS1F0=
Subject key identifier:   54:F4:A7:52:16:83:F5:94:12:FD:AA:AA:4B:EB:AA:C8:12:68:91:DB
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       20222446DE00D7BEE0AD1A88D6AF57A14B9A4718
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3134332e302e3233362e302f32322d3234203d3e203237383834.roa
Signing time:             Tue 04 Feb 2025 20:01:22 +0000
ROA not before:           Tue 04 Feb 2025 19:56:22 +0000
ROA not after:            Tue 03 Feb 2026 20:01:22 +0000
asID:                     27884
IP address blocks:        143.0.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:22:24:46:de:00:d7:be:e0:ad:1a:88:d6:af:57:a1:4b:9a:47:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Feb  4 19:56:22 2025 GMT
            Not After : Feb  3 20:01:22 2026 GMT
        Subject: CN=54F4A7521683F59412FDAAAA4BEBAAC8126891DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:b5:c9:cd:a9:e7:d5:f6:b4:9a:f3:1b:c8:
                    e3:4f:44:37:77:2b:fc:48:88:8d:ef:f6:8a:24:5d:
                    b4:dd:40:38:53:d9:c1:8e:9c:92:0f:2e:1f:31:1c:
                    47:70:07:f1:56:a0:80:69:77:48:eb:cb:92:f8:2b:
                    e2:f6:0c:5d:1d:b9:af:3b:bd:89:6d:15:be:3c:95:
                    03:74:ec:94:17:3b:d3:a9:a6:0b:24:be:89:52:f7:
                    f8:a8:f5:7d:98:18:51:c5:02:42:e9:79:35:ac:74:
                    fe:d4:f9:42:90:2e:5a:76:32:0c:f9:e6:52:e1:a8:
                    23:8e:fb:35:0d:32:3e:26:61:a2:68:de:10:91:d3:
                    b8:4a:1b:74:76:35:6d:59:4f:a2:22:34:85:b7:39:
                    62:fb:ae:9c:17:f1:9b:d8:13:f0:f7:b5:62:f7:aa:
                    e2:31:1a:e3:06:b8:b5:a9:5c:93:1e:d8:89:ed:a8:
                    a2:ca:5a:8d:61:72:e0:15:9f:73:ef:a7:1c:64:a8:
                    a9:1a:51:1f:52:cf:b3:7f:14:b4:b6:f1:90:a0:5f:
                    0d:14:60:39:32:e1:7e:3c:48:4c:be:2c:b3:e8:bc:
                    ee:1c:51:54:ac:ec:2a:6b:16:9a:1b:67:b5:6b:76:
                    93:0e:c4:8f:71:5b:0c:1e:7c:00:a0:39:70:55:37:
                    a2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:A7:52:16:83:F5:94:12:FD:AA:AA:4B:EB:AA:C8:12:68:91:DB
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3134332e302e3233362e302f32322d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:d6:a9:68:d9:55:0b:df:40:e6:2d:61:c3:dc:77:8f:bc:b9:
         4c:85:d5:8b:87:08:cf:6b:9a:32:29:85:1f:74:37:f2:3b:2e:
         71:4d:47:1e:cb:96:5f:29:db:21:2a:18:6a:d7:18:3e:e7:17:
         21:de:86:22:74:dd:c0:cc:e8:1e:3f:3d:33:df:41:30:ba:3f:
         6f:ef:a7:36:2d:cb:39:46:92:27:16:ef:56:0a:2c:12:23:6e:
         fb:ce:bd:dd:f0:aa:4e:3b:ad:cc:10:9a:c7:56:7b:18:c9:d2:
         ce:ca:6c:10:6f:d6:b7:7d:1c:b2:14:42:83:09:ca:5c:91:a6:
         8b:d4:86:a4:0b:b9:fe:b2:8e:f3:e3:b3:80:44:fd:fb:b2:3e:
         8b:ff:8f:b6:a4:de:37:40:05:ea:18:64:6e:86:2c:0e:f5:6d:
         26:82:30:0f:d5:bf:cf:5d:5d:2a:e2:86:21:69:41:78:cc:f9:
         9e:65:9b:1c:c6:91:d0:c1:ca:41:c7:2d:ba:88:70:14:3a:9b:
         b3:ca:9a:e1:7d:de:7c:e1:ef:11:15:b1:4f:4b:7e:8c:d9:7c:
         61:c2:66:2a:45:b7:ed:1c:03:4e:ee:65:31:49:1c:45:e3:6e:
         e8:d9:4e:f7:f6:b3:b3:7d:37:0e:eb:b9:07:21:9b:6d:4e:fd:
         73:f6:fd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:27 2025 by rpki-client