Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231322e38332e302f32342d3234203d3e20323639383232.roa
File:                     3130332e3231322e38332e302f32342d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          xLNrTBQKbYi52uHtHYUyo/AdzBlQFzsKThRo1X2+iDw=
Subject key identifier:   FB:76:7B:EE:FC:BD:63:84:26:0D:47:D2:A3:A2:B9:C0:E1:CC:C2:93
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       11DEB7CBD936DF38EB7024A7F56100B613E54765
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231322e38332e302f32342d3234203d3e20323639383232.roa
Signing time:             Tue 04 Feb 2025 18:19:23 +0000
ROA not before:           Tue 04 Feb 2025 18:14:23 +0000
ROA not after:            Tue 03 Feb 2026 18:19:23 +0000
asID:                     269822
IP address blocks:        103.212.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:de:b7:cb:d9:36:df:38:eb:70:24:a7:f5:61:00:b6:13:e5:47:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Feb  4 18:14:23 2025 GMT
            Not After : Feb  3 18:19:23 2026 GMT
        Subject: CN=FB767BEEFCBD6384260D47D2A3A2B9C0E1CCC293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:0c:4d:0d:54:4a:63:28:b5:9e:ee:d3:c6:
                    70:77:f3:8e:87:76:57:e3:1c:80:6c:09:e9:61:25:
                    24:24:cd:d2:8b:6d:fc:5b:7a:e3:78:06:da:b9:f9:
                    ba:93:c2:af:55:dc:a2:12:60:01:67:2a:30:23:d0:
                    bd:54:d6:fe:a3:52:50:04:33:5a:f9:b5:fa:8d:ee:
                    2e:6b:c4:59:dd:e1:6a:e6:70:63:1e:59:08:37:7e:
                    93:27:3c:db:46:67:39:e4:a9:4e:88:41:13:5f:37:
                    27:6d:8b:2d:36:54:8f:d3:46:79:84:e7:84:75:db:
                    fa:94:27:d8:77:68:85:b6:da:8e:19:23:e2:38:99:
                    89:ff:7f:22:96:46:e0:ec:da:63:aa:08:7d:97:1a:
                    d0:68:6c:9d:76:0d:a8:b6:7e:4f:eb:ac:96:6c:7f:
                    2b:1e:c4:d6:04:1c:37:59:2e:4f:04:1a:f1:bd:34:
                    ab:a7:40:f9:ad:e9:97:2a:4c:f1:14:fd:5a:a0:3c:
                    98:0d:08:e5:b1:00:28:00:5a:aa:a8:68:ef:ce:34:
                    56:4b:23:92:3f:5e:72:e0:bf:2f:df:bf:43:6d:81:
                    3f:a3:ec:17:34:9d:02:ae:89:b9:38:d3:ca:76:e1:
                    6b:68:74:2d:c9:d4:24:5a:9c:94:bc:c4:55:0e:12:
                    41:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:76:7B:EE:FC:BD:63:84:26:0D:47:D2:A3:A2:B9:C0:E1:CC:C2:93
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3130332e3231322e38332e302f32342d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:54:d8:dd:ab:be:7a:93:8d:e2:f0:bf:31:d2:49:42:04:54:
         66:ab:74:02:64:e1:b4:06:72:bb:01:27:3e:f8:51:76:67:40:
         b2:72:44:7f:12:5a:1c:fb:05:3c:55:fa:f6:c8:33:2e:98:c3:
         80:7e:ec:a4:6a:ac:39:de:f6:90:79:17:91:24:d2:13:ce:c8:
         74:98:cc:e4:aa:b5:7a:69:d4:40:82:ef:66:44:39:92:dc:69:
         da:ac:af:e2:6f:85:63:e8:8f:40:8f:91:08:99:ac:6d:8b:a1:
         95:ac:f4:99:ba:0f:c6:dd:b6:c5:8f:ba:4b:96:fd:66:0f:63:
         c5:68:6a:cd:86:de:2e:1f:c1:b4:a6:6e:17:74:d3:b6:1e:66:
         db:cd:3b:e7:ad:da:b4:bf:07:44:56:5b:05:8e:27:2d:52:18:
         ba:e2:62:c4:e1:77:72:85:e8:70:39:76:33:28:8a:ec:a2:c4:
         ef:c5:2b:39:bd:f1:74:da:05:dd:9e:79:de:a6:3b:bd:56:8c:
         01:a0:02:71:3a:50:9d:cf:df:f6:43:39:be:89:71:79:79:c2:
         94:ca:ce:3c:f2:23:a2:55:c5:2f:18:7f:68:be:2f:5b:c9:11:
         1e:98:c6:bb:42:a4:aa:25:b6:1a:8a:69:6b:b8:0a:b6:3a:c5:
         61:d4:d9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:18 2025 by rpki-client