Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/3138372e3130332e32342e302f32342d3234203d3e20323730313230.roa
File:                     3138372e3130332e32342e302f32342d3234203d3e20323730313230.roa (raw, json)
Hash identifier:          d+oHTbijazzuI8KY5LIl5uMLYWookMZ0o9GSGMdRqis=
Subject key identifier:   A9:E0:81:99:74:82:E1:59:1F:EE:A8:39:36:76:A0:EB:72:D7:7E:6C
Certificate issuer:       /CN=FE06B7E29234D0773837167ECDC2EA8823E3C308
Certificate serial:       509153D8A7FC8954AB0025C7E1E581106DED6E48
Authority key identifier: FE:06:B7:E2:92:34:D0:77:38:37:16:7E:CD:C2:EA:88:23:E3:C3:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/3138372e3130332e32342e302f32342d3234203d3e20323730313230.roa
Signing time:             Tue 04 Feb 2025 20:06:27 +0000
ROA not before:           Tue 04 Feb 2025 20:01:27 +0000
ROA not after:            Tue 03 Feb 2026 20:06:27 +0000
asID:                     270120
IP address blocks:        187.103.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:91:53:d8:a7:fc:89:54:ab:00:25:c7:e1:e5:81:10:6d:ed:6e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE06B7E29234D0773837167ECDC2EA8823E3C308
        Validity
            Not Before: Feb  4 20:01:27 2025 GMT
            Not After : Feb  3 20:06:27 2026 GMT
        Subject: CN=A9E081997482E1591FEEA8393676A0EB72D77E6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:33:77:bd:7a:61:98:8b:a5:7f:37:62:de:
                    3b:f0:97:6c:ad:75:58:72:08:c7:fe:7b:97:38:4e:
                    91:2d:0e:bf:6c:9a:0d:06:c3:f2:fd:ef:4d:4d:5f:
                    ef:1d:4c:29:cf:0c:e2:04:a4:6d:71:ea:ad:5f:a1:
                    2a:61:89:1b:02:e7:ab:45:61:1e:ee:f7:46:ea:ce:
                    c8:15:b2:32:b8:2f:3d:94:5f:6e:ce:eb:b1:3d:c1:
                    2a:60:21:b0:40:1f:30:54:e1:8b:cb:a2:18:f1:12:
                    b0:b1:c7:e7:59:bb:ce:26:f8:ba:9f:84:15:ea:0c:
                    49:62:a5:19:09:6b:06:fb:a5:cc:d5:11:31:c4:dd:
                    94:c4:ed:d4:51:1c:be:03:39:1a:e0:ed:e3:07:21:
                    99:76:26:0e:38:2c:f7:dd:60:74:a8:66:b0:9e:1c:
                    4f:ef:d3:32:45:e8:b0:86:aa:88:6f:d5:32:4b:e8:
                    20:30:12:90:76:c6:81:ae:9b:e6:d2:da:c6:81:55:
                    46:75:c9:db:85:dd:74:16:1a:ab:ff:a5:5f:9c:b0:
                    f1:f0:0c:71:3e:ba:01:32:df:85:21:c8:90:e5:e5:
                    9f:f8:c3:c6:bc:b4:b8:db:a8:cc:58:e0:0d:7d:dc:
                    28:fb:2a:1a:1f:5a:af:a1:5b:5a:8d:fe:01:fe:7c:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E0:81:99:74:82:E1:59:1F:EE:A8:39:36:76:A0:EB:72:D7:7E:6C
            X509v3 Authority Key Identifier:
                keyid:FE:06:B7:E2:92:34:D0:77:38:37:16:7E:CD:C2:EA:88:23:E3:C3:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE06B7E29234D0773837167ECDC2EA8823E3C308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F30941EAD1AFD61852FA51FBF39408D64548EFAB8232984DD18E6C60B7719F4F/0/3138372e3130332e32342e302f32342d3234203d3e20323730313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:8b:37:e2:a2:68:c9:3e:4b:4b:a2:b0:49:cd:76:26:2d:
         46:cb:ab:4d:9e:51:b6:ec:11:88:0a:d1:09:e6:0b:d3:a1:32:
         ab:a8:91:e6:5a:06:00:0e:77:da:a5:a0:b8:8c:27:2e:20:6f:
         2b:f2:4e:5f:2e:10:6d:60:0d:7a:35:ed:51:2e:25:41:1d:e5:
         5b:54:a9:4f:d1:78:fd:85:eb:92:b2:40:49:58:e1:09:52:db:
         03:e3:58:34:3c:4a:99:e1:99:f1:f8:77:ad:49:0d:d6:d4:36:
         fd:48:1a:70:42:fa:01:d3:10:36:81:c2:6e:bf:50:b1:c9:37:
         74:ff:64:24:6b:98:50:45:68:af:4f:d8:eb:51:62:78:88:2e:
         a0:7b:f0:6e:43:ce:45:6f:1c:5b:18:b6:2b:a7:e7:0d:46:7c:
         36:a2:29:cf:28:7f:cd:26:e2:5d:5a:c3:e8:99:cb:0c:68:ad:
         96:8a:fd:a0:ea:81:bd:d1:e0:2f:e0:d4:27:24:7b:7a:ca:1d:
         04:5f:fe:f5:a7:7c:39:7a:07:63:95:b3:ba:2e:d6:12:1a:ec:
         bb:aa:c5:ac:95:29:42:75:69:b3:8e:ac:48:0f:66:8a:41:a2:
         f8:37:3a:0b:64:d2:3f:35:2b:df:04:6a:24:e3:2b:16:46:23:
         a3:9a:8f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:46 2025 by rpki-client