Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e36382e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e36382e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          E8Cf2h68TgCciJiw82j6rpv9LqCjqeGH50u6k+rF6ZQ=
Subject key identifier:   AB:38:B0:B2:D2:77:2C:F0:AE:AD:D6:93:AB:06:1D:50:D4:EF:70:CC
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       058E4162604DF53397C97898C17551119633F02A
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e36382e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 04 Feb 2025 18:18:49 +0000
ROA not before:           Tue 04 Feb 2025 18:13:49 +0000
ROA not after:            Tue 03 Feb 2026 18:18:49 +0000
asID:                     22011
IP address blocks:        148.243.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8e:41:62:60:4d:f5:33:97:c9:78:98:c1:75:51:11:96:33:f0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:49 2025 GMT
            Not After : Feb  3 18:18:49 2026 GMT
        Subject: CN=AB38B0B2D2772CF0AEADD693AB061D50D4EF70CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:9f:57:89:31:da:6c:98:f7:5f:77:9f:d5:
                    76:dc:b4:92:f6:bd:29:ee:91:af:0a:56:75:4a:de:
                    86:4a:17:7a:05:fd:bf:2c:53:45:c3:3d:39:d7:72:
                    e8:09:7b:ff:50:42:57:93:c4:b5:dd:2d:ef:74:f4:
                    64:5a:2f:9c:0e:a2:ba:48:ff:79:04:8c:b9:61:64:
                    61:da:5e:40:36:7b:32:b0:3a:98:02:ca:21:68:d9:
                    35:60:af:a1:21:a9:47:26:4e:c9:80:68:e1:a9:ef:
                    5a:de:13:fb:00:8f:14:59:1d:a8:55:a4:6e:e2:ee:
                    d6:87:31:d8:b3:b5:08:d0:8d:19:88:75:ef:67:bf:
                    f1:bb:1c:bb:60:c8:bb:cb:e1:55:29:32:69:45:b9:
                    10:02:a1:b9:66:86:33:7f:8f:50:e8:8f:1b:f4:12:
                    eb:78:9e:5e:76:bd:5c:4b:af:8b:92:62:82:42:af:
                    dc:00:39:6f:30:90:50:32:73:c2:16:c2:22:ca:8d:
                    e1:48:2f:56:cf:c4:a2:b9:90:91:1a:e3:1a:ca:d9:
                    8e:19:4e:70:b6:c9:8f:0f:f9:16:46:fa:21:45:a0:
                    d3:02:f1:75:54:89:02:36:a0:3b:4a:46:d5:04:e8:
                    3d:56:42:17:45:22:fd:6e:b7:4d:10:70:44:53:9f:
                    89:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:38:B0:B2:D2:77:2C:F0:AE:AD:D6:93:AB:06:1D:50:D4:EF:70:CC
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e36382e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:98:8f:72:f2:9b:ce:fe:22:be:00:7f:c7:b7:79:22:2d:57:
         67:96:a8:22:b2:d1:5e:37:19:a0:0a:38:79:bc:ab:de:fc:26:
         29:86:64:86:2d:91:25:e5:14:9d:f9:57:77:46:b0:22:c8:f2:
         20:27:0c:45:97:ce:c0:1c:1c:ac:73:15:ef:bc:e3:2e:7e:4c:
         7b:c0:74:17:3a:ca:bf:e7:d4:41:ea:b4:34:d2:5e:69:89:89:
         c3:51:01:58:70:ec:0c:80:36:72:7b:84:49:b5:b1:6b:5d:73:
         5c:2e:da:48:80:9c:70:30:71:45:8e:62:71:ea:81:01:81:3f:
         e7:35:7e:e9:2c:65:70:69:b3:08:6e:c5:53:bc:7b:9c:22:b5:
         64:64:09:92:76:29:14:87:80:55:85:36:3e:bd:da:c6:12:20:
         10:e2:b9:93:00:19:13:1c:0e:cf:9d:6c:ab:e8:3f:02:6e:67:
         7d:26:f1:60:6d:a8:02:dd:3a:f0:f0:2c:db:c7:f0:28:56:28:
         bc:fa:a6:ce:8b:19:6f:46:3c:4c:db:51:af:2b:ae:3a:c7:a6:
         75:79:99:b3:e9:a6:15:7f:8c:b2:d1:f1:20:2b:26:61:1e:0a:
         76:a8:67:c3:b0:af:fd:11:3b:8c:95:04:c0:07:75:34:f0:f5:
         6d:94:84:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:06 2025 by rpki-client