Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130342e302f32332d3233203d3e20323635363735.roa
File:                     3134332e3235352e3130342e302f32332d3233203d3e20323635363735.roa (raw, json)
Hash identifier:          EBxM56i5B5/f8RXu5/r/93rtsN+kk2UFRLkyn+ZDIuY=
Subject key identifier:   42:ED:4A:5F:08:AF:19:FC:BA:F6:C4:01:1F:FF:AD:7E:04:D4:FF:8A
Certificate issuer:       /CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
Certificate serial:       619AD2400D2C1D925FE5ECCDFDC9F23D0D4B1FB7
Authority key identifier: E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130342e302f32332d3233203d3e20323635363735.roa
Signing time:             Tue 04 Feb 2025 18:03:27 +0000
ROA not before:           Tue 04 Feb 2025 17:58:27 +0000
ROA not after:            Tue 03 Feb 2026 18:03:27 +0000
asID:                     265675
IP address blocks:        143.255.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9a:d2:40:0d:2c:1d:92:5f:e5:ec:cd:fd:c9:f2:3d:0d:4b:1f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
        Validity
            Not Before: Feb  4 17:58:27 2025 GMT
            Not After : Feb  3 18:03:27 2026 GMT
        Subject: CN=42ED4A5F08AF19FCBAF6C4011FFFAD7E04D4FF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:3f:b5:d1:84:a7:2f:62:25:8d:98:46:4d:
                    a8:c4:e5:c1:ab:63:9a:f4:a4:eb:9f:2e:75:b3:c6:
                    fc:3a:7e:ed:c3:67:b3:18:d9:3e:8c:01:94:f5:6d:
                    7d:2b:62:eb:d6:96:cf:9f:ca:83:38:71:d3:4e:f4:
                    a4:92:e4:a1:05:5b:98:3a:b2:0e:fc:e1:8a:f0:c6:
                    3f:8e:9a:da:6a:04:54:eb:e7:68:9e:7c:d2:a7:17:
                    58:c3:67:46:cb:7f:32:70:35:e3:f2:6b:52:14:91:
                    85:c5:0c:b2:ee:c4:28:f9:14:39:8e:cd:8e:2d:d8:
                    55:46:fa:a3:49:6a:0f:48:04:42:b4:f0:2a:b8:5d:
                    32:94:44:30:87:0f:92:f9:6c:c2:8a:e5:c8:dd:9d:
                    cf:65:58:63:52:6a:d9:83:bb:c0:3b:f6:2c:0c:95:
                    52:a4:8f:37:51:dd:f4:8a:e1:1f:87:76:a9:80:7a:
                    14:da:0d:fc:64:89:e3:0c:a6:5b:d1:c4:16:ca:1e:
                    bb:57:8e:e4:f2:cf:eb:c3:0d:19:68:2a:21:45:e2:
                    cf:d2:fd:e7:84:08:05:a5:50:29:6a:7c:87:d6:a8:
                    95:38:86:76:3a:92:12:87:da:3d:da:df:9f:09:ec:
                    8b:0c:98:f7:b7:f7:5e:3e:e0:a2:8f:2d:a9:36:8a:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:ED:4A:5F:08:AF:19:FC:BA:F6:C4:01:1F:FF:AD:7E:04:D4:FF:8A
            X509v3 Authority Key Identifier:
                keyid:E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130342e302f32332d3233203d3e20323635363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:78:75:8f:9e:99:ac:5f:60:ad:37:03:5f:22:c7:61:25:b2:
         d4:06:b9:d8:c2:47:07:93:8c:04:7b:14:f5:8e:f8:c3:cf:98:
         94:10:d3:59:d5:b0:39:31:3f:1c:64:0d:8e:cf:de:19:89:ef:
         ed:cb:5e:01:18:4c:55:70:76:5c:be:bd:ac:d6:79:78:e5:00:
         0a:00:00:16:a9:0b:01:b7:a9:ed:73:b0:f3:d8:06:da:10:e3:
         0f:e6:78:9f:85:49:28:f0:9d:3f:b6:89:5b:68:a4:cd:56:ee:
         e4:24:3b:b3:f2:d3:60:2d:1b:e4:56:e5:13:35:f7:26:6f:55:
         ae:bb:48:85:d5:a8:4e:e2:17:a6:2f:05:07:b1:f5:3e:3a:32:
         ea:8b:e3:66:75:cf:5e:32:37:d1:61:d8:24:d6:65:43:cf:34:
         d5:82:fa:a1:5d:a5:7a:be:56:a9:f7:bb:9a:05:10:b6:8a:6c:
         fa:00:79:d6:93:0a:63:bd:de:3e:09:ce:61:c7:ea:51:e6:ce:
         31:3e:3f:ca:78:2d:c6:0d:67:90:00:70:ee:d9:dc:e7:ec:37:
         67:5e:58:58:ff:24:ae:af:cb:fd:b2:ea:c7:ef:8e:e6:11:90:
         58:73:d1:90:c3:d5:fd:9c:31:da:79:bd:78:68:e1:a8:2b:f1:
         60:b4:cf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:13 2025 by rpki-client