Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134332e3230322e3135362e302f32322d3232203d3e2036353033.roa
File:                     3134332e3230322e3135362e302f32322d3232203d3e2036353033.roa (raw, json)
Hash identifier:          B/43xhlPT+DyubYXA8VqtTvzNznJNVoXFn2o7xoRT60=
Subject key identifier:   88:52:49:CE:2D:81:61:5C:E5:16:47:BA:80:6A:5B:D3:95:72:02:52
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       7F4B8D14870C9EE75F115B6B0E83D8970B39F051
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134332e3230322e3135362e302f32322d3232203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:52:46 +0000
ROA not before:           Tue 04 Feb 2025 18:47:46 +0000
ROA not after:            Tue 03 Feb 2026 18:52:46 +0000
asID:                     6503
IP address blocks:        143.202.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 22:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4b:8d:14:87:0c:9e:e7:5f:11:5b:6b:0e:83:d8:97:0b:39:f0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:46 2025 GMT
            Not After : Feb  3 18:52:46 2026 GMT
        Subject: CN=885249CE2D81615CE51647BA806A5BD395720252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6b:ce:70:53:96:eb:7f:ba:6f:57:5c:a1:e4:
                    46:64:4c:09:3e:69:67:60:77:13:cb:1e:a4:24:ac:
                    eb:f4:a3:5b:a1:1c:ee:7c:83:2c:a7:c8:47:b0:f0:
                    ac:6a:6c:a1:eb:ba:26:fc:84:f7:97:15:f3:3a:d1:
                    a7:f3:fe:76:1d:54:a3:9d:68:70:38:02:b4:2c:fd:
                    89:c6:04:1a:4f:33:c9:25:d4:df:22:79:e4:7d:e5:
                    48:28:af:6b:da:68:b6:d9:c7:ed:33:72:0c:27:30:
                    b0:95:72:66:78:2c:f6:18:2c:41:f1:00:86:a3:bd:
                    83:ab:5d:d6:c3:c4:19:37:25:19:06:2e:ee:8a:61:
                    1f:08:55:b5:7e:68:3b:c7:14:da:94:f7:cf:6c:41:
                    d5:9e:40:ce:2f:9d:75:e4:c6:ed:b7:86:bd:c1:55:
                    16:14:cf:0f:44:ba:58:97:a4:dc:ed:ca:68:f9:84:
                    42:07:c0:43:9b:6f:2c:a8:8d:5f:a5:23:d9:d3:85:
                    d0:c6:4a:79:74:98:e3:47:51:37:2e:af:e3:f0:e1:
                    81:bf:26:7a:26:7b:f8:7e:bb:15:2b:22:f7:03:b7:
                    e8:1f:3b:f0:5e:40:bb:2c:00:5a:da:91:f4:8f:8d:
                    c4:ed:30:f8:ae:ac:c7:c2:f2:ea:b8:be:6e:ae:03:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:52:49:CE:2D:81:61:5C:E5:16:47:BA:80:6A:5B:D3:95:72:02:52
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134332e3230322e3135362e302f32322d3232203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:4f:46:b3:a0:cd:93:fe:09:57:2d:fa:a8:24:92:b6:af:77:
         e2:3b:e1:4f:8f:0f:ab:e6:f7:61:a0:55:b4:26:73:44:d6:ff:
         d9:c8:7b:03:17:b9:0b:fa:70:15:a3:29:44:11:6f:ee:4f:0e:
         25:f3:bc:b8:56:20:df:70:61:ca:17:c9:05:27:ad:96:d8:52:
         98:f2:92:04:b6:5e:37:7f:67:7a:98:5a:d3:e0:af:44:8d:58:
         fd:2e:d1:38:b0:2b:a0:5c:2f:f0:22:a7:a5:f4:f8:a9:6a:44:
         8b:63:4b:8d:2f:72:ba:a5:b3:d2:cd:8b:17:82:05:9f:8d:1a:
         36:0e:da:f3:72:35:c3:21:5a:8f:08:61:22:56:66:4b:32:64:
         24:f0:3d:a8:20:10:eb:46:8a:97:0b:68:02:ce:b9:43:fc:96:
         75:5f:f3:d3:88:81:83:03:96:b8:6c:ab:c0:cf:8b:47:f4:59:
         d0:e2:7e:80:80:bb:04:de:e0:63:c2:61:4e:a8:00:57:e7:f8:
         13:78:50:e8:8e:16:f2:5d:35:cd:f1:e9:e9:b7:4f:8a:9f:73:
         bf:31:91:51:17:7f:78:9d:19:d0:32:4e:32:ad:f7:14:d8:02:
         96:3f:fa:98:3f:33:0b:9f:96:ee:70:cc:1e:78:10:56:0d:55:
         78:5b:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:49:05 2025 by rpki-client