Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130352e302f32342d3234203d3e20323635363735.roa
File:                     3134332e3235352e3130352e302f32342d3234203d3e20323635363735.roa (raw, json)
Hash identifier:          tGTJMqi4nqNHvX1Y0+obX2I88zaSL+V/qR4oeHUf0Y8=
Subject key identifier:   86:78:1A:04:DA:7C:5B:0B:53:EE:F0:C1:EC:D0:AC:C9:D1:B7:34:77
Certificate issuer:       /CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
Certificate serial:       57F904C14B22827669B4682F6F6558EDC1D16124
Authority key identifier: E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130352e302f32342d3234203d3e20323635363735.roa
Signing time:             Tue 05 Mar 2024 18:00:15 +0000
ROA not before:           Tue 05 Mar 2024 17:55:15 +0000
ROA not after:            Tue 04 Mar 2025 18:00:15 +0000
asID:                     265675
IP address blocks:        143.255.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 17 May 2024 21:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f9:04:c1:4b:22:82:76:69:b4:68:2f:6f:65:58:ed:c1:d1:61:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
        Validity
            Not Before: Mar  5 17:55:15 2024 GMT
            Not After : Mar  4 18:00:15 2025 GMT
        Subject: CN=86781A04DA7C5B0B53EEF0C1ECD0ACC9D1B73477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:eb:04:65:7a:b1:f0:f3:cf:e1:29:f7:1a:
                    c3:2a:80:cb:47:24:e3:86:84:81:a6:63:b5:a0:12:
                    38:8e:c0:01:f6:a1:52:8e:34:69:43:a3:17:f7:dd:
                    9c:fa:8c:f7:bc:25:2b:32:ee:42:fb:ec:61:4a:c3:
                    4f:76:a7:5e:07:1a:6a:1e:e2:e1:cc:37:db:51:8e:
                    ee:6c:f6:77:d0:92:27:a3:ef:11:d7:34:47:6a:c4:
                    f5:c0:f8:74:14:ee:c1:d4:8c:9d:a5:45:81:e2:7f:
                    1f:d6:7d:41:e0:c3:2d:20:ae:d1:f4:81:52:a9:ce:
                    e8:2b:32:0f:0b:40:75:0c:db:94:b2:52:6d:95:83:
                    c7:d8:a1:4e:ea:ee:68:74:55:31:9d:37:f2:9c:4f:
                    c4:ed:1f:98:23:98:d7:bd:a1:65:ab:aa:67:b4:cb:
                    4d:1a:d0:06:45:9e:16:51:f6:af:de:02:97:f3:8e:
                    78:10:3b:5b:31:87:ff:7d:55:c5:e6:7b:4f:35:f1:
                    73:d1:3e:87:9f:90:fe:c7:c2:4b:ae:a2:9f:21:c1:
                    85:a7:fb:97:0f:9b:e5:86:f6:ce:c1:5a:e5:89:46:
                    fd:2c:f8:7c:51:00:be:43:d1:37:2f:c9:e8:6b:cd:
                    a2:37:cb:84:7d:04:7c:be:f8:bc:36:c9:3f:29:f3:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:78:1A:04:DA:7C:5B:0B:53:EE:F0:C1:EC:D0:AC:C9:D1:B7:34:77
            X509v3 Authority Key Identifier:
                keyid:E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130352e302f32342d3234203d3e20323635363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:85:37:20:aa:07:c4:fe:73:a5:8f:2a:6e:d8:1d:ae:82:2f:
         20:b4:eb:79:e2:87:14:05:51:bb:6f:4d:39:13:e9:ae:03:97:
         e4:8a:a6:c4:ad:32:60:b6:7a:ff:a9:e9:45:89:f3:2e:ce:f5:
         fb:e0:9d:47:77:e3:92:4f:f4:e4:28:f3:8f:0c:55:51:57:37:
         98:1f:e6:98:5b:f9:e5:e2:5f:7b:1e:e4:c5:08:87:02:d2:f3:
         4b:81:b6:44:7e:1b:27:a6:66:c7:c5:17:5d:8b:45:54:19:99:
         7e:aa:85:54:18:eb:1b:d3:b2:78:a0:d3:65:71:f9:55:b4:2a:
         fe:a2:8c:f8:ef:74:53:8f:0d:43:08:8a:94:24:a4:47:f2:21:
         41:73:3f:b1:99:9e:6c:51:9a:f6:3e:35:b7:45:9b:1e:3c:dd:
         d3:2e:8a:17:82:1a:dd:05:4f:91:3f:99:c7:a7:90:cd:d0:63:
         a3:74:a9:87:39:37:67:c0:f2:67:b4:b2:4c:c7:0b:61:a2:64:
         b8:f6:d4:2e:e3:b4:87:31:32:a3:37:fc:13:5c:09:bf:83:6a:
         5c:89:d5:82:da:c7:0f:c4:cb:2c:ff:f7:96:bd:22:01:91:8b:
         1f:d4:6b:50:71:4b:28:07:77:b5:3d:0b:1b:fb:5a:6e:1f:a0:
         ea:9e:3b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 23:33:40 2024 by rpki-client on console-fra.rpki-client.org