Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3134332e302e3233362e302f32322d3234203d3e203237383834.roa
File:                     3134332e302e3233362e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier:          kdTtfw/YHAcmqQ7AuOZRZoi9Eu2FmiDKq1aHQLLeyd4=
Subject key identifier:   FE:86:4E:A2:1D:15:B6:8E:E1:7F:05:59:E6:66:77:89:56:61:91:9F
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       65C8FC8B5F5D3D4DAE3ED9E7E0B88D6D3FBF1BA2
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3134332e302e3233362e302f32322d3234203d3e203237383834.roa
Signing time:             Tue 05 Mar 2024 18:12:36 +0000
ROA not before:           Tue 05 Mar 2024 18:07:36 +0000
ROA not after:            Tue 04 Mar 2025 18:12:36 +0000
asID:                     27884
IP address blocks:        143.0.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c8:fc:8b:5f:5d:3d:4d:ae:3e:d9:e7:e0:b8:8d:6d:3f:bf:1b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Mar  5 18:07:36 2024 GMT
            Not After : Mar  4 18:12:36 2025 GMT
        Subject: CN=FE864EA21D15B68EE17F0559E66677895661919F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:ac:d7:c9:85:43:06:b8:4b:10:72:f2:9d:
                    13:60:41:27:a4:c6:da:4c:19:3b:25:23:06:7d:31:
                    d6:40:fa:dc:be:e4:0d:62:aa:cf:e3:c0:eb:41:09:
                    9f:3d:22:e7:25:76:32:b0:ff:44:24:ed:ab:40:52:
                    11:e9:07:6e:5e:a9:99:5a:fd:9f:e2:0a:fe:d4:7a:
                    11:3d:60:b5:8d:59:1d:94:8d:d5:2a:11:4a:fa:ed:
                    0a:bb:90:59:5c:07:dc:20:4d:65:89:aa:41:96:e3:
                    1d:e7:0d:0e:c7:1a:aa:1f:6e:15:29:ae:4d:59:56:
                    47:11:83:dc:e4:e4:78:ca:3a:73:95:cf:81:85:c0:
                    67:b1:bd:73:b6:72:4b:31:0a:f6:51:b7:dd:10:a3:
                    29:71:5e:c7:c0:8a:bc:41:c1:bf:e8:ca:d7:09:01:
                    8e:3d:11:1a:21:67:ed:33:85:5d:f7:76:96:eb:91:
                    3c:28:cd:2b:e6:5c:29:1e:c3:57:fa:17:aa:62:93:
                    58:c7:6d:a6:c7:f7:33:21:89:c7:38:77:c3:b6:c7:
                    61:d5:cc:a9:9c:30:d3:06:a1:02:a5:59:84:77:d8:
                    b4:0f:16:cc:69:2f:1b:de:2a:89:37:00:6e:97:3b:
                    0c:9b:7c:10:4c:3f:3e:84:7f:a4:1c:2e:67:a2:0b:
                    10:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:86:4E:A2:1D:15:B6:8E:E1:7F:05:59:E6:66:77:89:56:61:91:9F
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3134332e302e3233362e302f32322d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:f4:2e:00:88:f4:ac:4d:46:e5:a0:9b:1c:55:5f:11:c9:78:
         ab:6a:6a:08:a0:69:15:bc:e4:c8:45:15:0d:1c:89:14:e4:b0:
         e5:25:da:fb:e9:45:7a:11:f8:8f:d3:10:e1:66:fd:9d:3a:1b:
         a2:df:6c:b3:9c:4e:c9:58:68:d1:1f:55:ac:b1:ed:6e:c7:2f:
         b5:7e:2d:6c:92:e7:eb:2b:93:3e:36:a0:26:10:03:c1:ff:d1:
         27:cf:5e:46:a0:91:23:d5:c9:c6:54:fe:e3:2f:55:ff:0a:b8:
         33:07:63:0d:a5:ed:bf:82:f9:ba:00:e0:b9:a2:51:03:3d:dc:
         aa:e0:cc:e8:e6:21:94:78:28:a6:50:93:be:97:9c:41:3d:1d:
         07:e2:52:c2:98:83:16:9c:e2:5c:3d:15:bc:3b:64:84:96:d7:
         24:7e:8f:aa:aa:cf:b2:3c:ec:f3:d4:6f:ef:ac:61:ef:e1:bb:
         5d:1e:02:f8:95:8f:9e:a5:5c:19:0e:6e:97:e4:bb:3e:0d:12:
         a3:33:7e:1e:49:75:1e:8a:e2:fe:c3:f1:a9:65:43:3b:3f:af:
         80:8c:da:10:40:0e:54:74:a8:4a:77:c5:7c:18:5d:aa:ff:9c:
         22:20:2c:0b:88:ed:8d:8b:2c:bd:5b:81:f4:9d:71:ab:b3:99:
         9d:3c:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:19:51 2024 by rpki-client on console-ams.rpki-client.org