Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E8EE137F31BFC2FB483D7933EA47F7EDF74645FF2AB5A4B2B19660B13CF336D2/0/3134332e302e3136302e302f32322d3234203d3e20323634363231.roa
File:                     3134332e302e3136302e302f32322d3234203d3e20323634363231.roa (raw, json)
Hash identifier:          6zu0x0vhBZwKifKwL07t4sCAa6yFiFALW82n8YrptOk=
Subject key identifier:   10:3F:AB:FC:AF:57:BD:A0:6D:ED:18:FD:6F:49:80:24:1A:78:AB:A9
Certificate issuer:       /CN=1C67ED603AB9DD6B49B7C22C2376590B955AB82C
Certificate serial:       16AEA5C40FD4F5C15F209B67B129A57EFFD2B6E6
Authority key identifier: 1C:67:ED:60:3A:B9:DD:6B:49:B7:C2:2C:23:76:59:0B:95:5A:B8:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C67ED603AB9DD6B49B7C22C2376590B955AB82C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E8EE137F31BFC2FB483D7933EA47F7EDF74645FF2AB5A4B2B19660B13CF336D2/0/3134332e302e3136302e302f32322d3234203d3e20323634363231.roa
Signing time:             Tue 04 Feb 2025 18:08:50 +0000
ROA not before:           Tue 04 Feb 2025 18:03:50 +0000
ROA not after:            Tue 03 Feb 2026 18:08:50 +0000
asID:                     264621
IP address blocks:        143.0.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E8EE137F31BFC2FB483D7933EA47F7EDF74645FF2AB5A4B2B19660B13CF336D2/0/1C67ED603AB9DD6B49B7C22C2376590B955AB82C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E8EE137F31BFC2FB483D7933EA47F7EDF74645FF2AB5A4B2B19660B13CF336D2/0/1C67ED603AB9DD6B49B7C22C2376590B955AB82C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C67ED603AB9DD6B49B7C22C2376590B955AB82C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ae:a5:c4:0f:d4:f5:c1:5f:20:9b:67:b1:29:a5:7e:ff:d2:b6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C67ED603AB9DD6B49B7C22C2376590B955AB82C
        Validity
            Not Before: Feb  4 18:03:50 2025 GMT
            Not After : Feb  3 18:08:50 2026 GMT
        Subject: CN=103FABFCAF57BDA06DED18FD6F4980241A78ABA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2a:e1:92:85:2e:54:11:d8:52:07:bc:0e:bf:
                    dd:2e:04:35:1a:47:65:37:98:50:f2:6d:45:45:e5:
                    4f:30:cc:40:20:9a:c3:2b:a9:c6:ac:79:61:8e:f8:
                    d1:21:c2:33:47:40:a8:1e:39:06:bd:81:52:dd:b0:
                    f1:11:4d:e1:5d:91:37:0d:09:60:e4:70:9f:bd:04:
                    f9:0f:e1:65:18:b5:0d:19:af:54:78:55:6e:dc:9c:
                    65:05:6e:86:2d:f5:fd:f4:fd:2d:a0:59:d7:60:10:
                    63:62:a7:ef:84:12:d0:d4:1d:3b:6d:82:9d:bf:02:
                    8c:e8:6f:15:73:e7:36:e4:8b:f7:2f:5c:08:d9:25:
                    b3:73:78:e0:95:aa:4c:36:34:c0:62:1a:5a:bd:ec:
                    ff:b5:c9:04:ba:14:47:ae:23:00:58:1e:a3:a8:54:
                    04:a3:d9:19:d7:49:12:d3:63:f9:87:5a:9b:aa:40:
                    e5:a3:1b:19:12:b7:dc:33:1b:5d:17:cb:47:39:54:
                    8e:89:47:7c:85:be:ad:67:13:50:4e:8d:b4:3f:2e:
                    62:da:0d:5c:f1:18:ef:bf:b6:72:50:49:eb:31:a4:
                    82:6d:79:fd:00:50:14:8e:11:39:cd:9d:a5:fb:7f:
                    99:b8:09:0e:6e:64:57:a3:64:9c:b7:44:f4:23:47:
                    7d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3F:AB:FC:AF:57:BD:A0:6D:ED:18:FD:6F:49:80:24:1A:78:AB:A9
            X509v3 Authority Key Identifier:
                keyid:1C:67:ED:60:3A:B9:DD:6B:49:B7:C2:2C:23:76:59:0B:95:5A:B8:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E8EE137F31BFC2FB483D7933EA47F7EDF74645FF2AB5A4B2B19660B13CF336D2/0/1C67ED603AB9DD6B49B7C22C2376590B955AB82C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C67ED603AB9DD6B49B7C22C2376590B955AB82C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E8EE137F31BFC2FB483D7933EA47F7EDF74645FF2AB5A4B2B19660B13CF336D2/0/3134332e302e3136302e302f32322d3234203d3e20323634363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:0c:96:87:94:d1:e2:6e:7f:4a:fc:ba:4e:f2:86:34:1a:36:
         bd:be:7e:b9:a2:db:ed:1b:f6:25:11:51:06:04:30:64:13:39:
         65:4f:9e:8c:cc:d2:9b:aa:ad:f1:87:16:f2:aa:10:44:cd:54:
         82:a2:1b:5f:96:00:6c:14:d2:31:a4:e2:5a:96:45:30:25:7c:
         12:88:c5:c4:c2:85:2e:d1:c1:c5:83:00:af:ea:62:a6:e0:47:
         25:70:79:8d:ec:51:c6:7d:d9:e0:a9:c1:dc:8c:32:32:d6:e2:
         fd:d8:4d:6f:d4:ea:1b:fd:0a:10:0a:5c:70:d4:19:87:4a:b2:
         1d:a1:89:69:69:1e:40:a7:81:b1:a1:53:90:9b:bf:ae:05:00:
         d7:ef:70:56:a7:2b:20:c2:8c:dc:d9:6d:41:68:a1:90:35:43:
         9b:a5:44:78:ea:bd:3e:e9:ca:09:7e:d6:c5:a2:ea:1c:b5:62:
         fa:e3:9b:c0:90:76:e7:56:2e:fe:82:ee:c3:ff:09:0c:c7:a5:
         af:75:e4:27:78:b3:0f:7d:a0:6e:1b:e4:de:c6:05:46:eb:90:
         9b:85:d8:19:a4:f3:b9:81:0e:67:2f:ea:ba:1e:28:28:51:b0:
         ef:97:29:9b:86:39:16:11:d2:64:a7:9f:35:b7:a6:23:f6:55:
         5e:c1:86:02
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUFq6lxA/U9cFfIJtnsSmlfv/StuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM2N0VENjAzQUI5REQ2QjQ5QjdDMjJDMjM3NjU5MEI5
NTVBQjgyQzAeFw0yNTAyMDQxODAzNTBaFw0yNjAyMDMxODA4NTBaMDMxMTAvBgNV
BAMTKDEwM0ZBQkZDQUY1N0JEQTA2REVEMThGRDZGNDk4MDI0MUE3OEFCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKuGShS5UEdhSB7wOv90uBDUa
R2U3mFDybUVF5U8wzEAgmsMrqcaseWGO+NEhwjNHQKgeOQa9gVLdsPERTeFdkTcN
CWDkcJ+9BPkP4WUYtQ0Zr1R4VW7cnGUFboYt9f30/S2gWddgEGNip++EEtDUHTtt
gp2/AozobxVz5zbki/cvXAjZJbNzeOCVqkw2NMBiGlq97P+1yQS6FEeuIwBYHqOo
VASj2RnXSRLTY/mHWpuqQOWjGxkSt9wzG10Xy0c5VI6JR3yFvq1nE1BOjbQ/LmLa
DVzxGO+/tnJQSesxpIJtef0AUBSOETnNnaX7f5m4CQ5uZFejZJy3RPQjR32HAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUED+r/K9XvaBt7Rj9b0mAJBp4q6kwHwYDVR0j
BBgwFoAUHGftYDq53WtJt8IsI3ZZC5VauCwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FOEVFMTM3RjMxQkZDMkZCNDgzRDc5MzNFQTQ3RjdFREY3
NDY0NUZGMkFCNUE0QjJCMTk2NjBCMTNDRjMzNkQyLzAvMUM2N0VENjAzQUI5REQ2
QjQ5QjdDMjJDMjM3NjU5MEI5NTVBQjgyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQzY3RUQ2MDNBQjlERDZCNDlC
N0MyMkMyMzc2NTkwQjk1NUFCODJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRThFRTEzN0YzMUJGQzJGQjQ4M0Q3OTMzRUE0N0Y3RURGNzQ2NDVGRjJB
QjVBNEIyQjE5NjYwQjEzQ0YzMzZEMi8wLzMxMzQzMzJlMzAyZTMxMzYzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM2MzIzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAo8AoDAN
BgkqhkiG9w0BAQsFAAOCAQEAEgyWh5TR4m5/Svy6TvKGNBo2vb5+uaLb7Rv2JRFR
BgQwZBM5ZU+ejMzSm6qt8YcW8qoQRM1UgqIbX5YAbBTSMaTiWpZFMCV8EojFxMKF
LtHBxYMAr+pipuBHJXB5jexRxn3Z4KnB3IwyMtbi/dhNb9TqG/0KEApccNQZh0qy
HaGJaWkeQKeBsaFTkJu/rgUA1+9wVqcrIMKM3NltQWihkDVDm6VEeOq9PunKCX7W
xaLqHLVi+uObwJB251Yu/oLuw/8JDMelr3XkJ3izD32gbhvk3sYFRuuQm4XYGaTz
uYEOZy/quh4oKFGw75cpm4Y5FhHSZKefNbemI/ZVXsGGAg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:22:37 2025 by rpki-client