Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37312e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e37312e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          uPG+QLNZg6dKxhoGfEoGQIcbsgVPLoan7EAcauERn6c=
Subject key identifier:   80:FF:DE:36:6A:06:72:47:D5:2D:FF:0A:E2:36:35:3B:C3:9E:ED:4E
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       68E7B4325F0F0D21FB07CB21DB11A625C368A9F9
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37312e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 04 Feb 2025 18:18:54 +0000
ROA not before:           Tue 04 Feb 2025 18:13:54 +0000
ROA not after:            Tue 03 Feb 2026 18:18:54 +0000
asID:                     22011
IP address blocks:        148.243.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e7:b4:32:5f:0f:0d:21:fb:07:cb:21:db:11:a6:25:c3:68:a9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:54 2025 GMT
            Not After : Feb  3 18:18:54 2026 GMT
        Subject: CN=80FFDE366A067247D52DFF0AE236353BC39EED4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:29:dc:d1:99:09:19:07:a3:50:e4:d4:2d:
                    1b:ef:68:d5:d5:45:29:48:73:0c:78:84:38:a5:19:
                    4e:c6:1f:32:70:8d:da:e3:04:59:3b:88:61:de:60:
                    1b:7a:14:ef:66:c2:99:cf:d5:3c:6f:28:0d:d9:40:
                    35:f1:75:ba:05:92:d4:17:23:1d:45:52:f5:95:bd:
                    84:3f:83:b8:36:d4:d2:8a:d9:67:c1:4d:78:81:fc:
                    87:9e:a3:0c:9e:02:f8:53:e3:17:bb:71:b6:e9:ea:
                    06:2f:5c:65:68:6e:30:52:7f:2f:71:62:72:21:c8:
                    15:96:d7:bd:7d:e2:67:1d:5b:1d:c4:75:ff:ab:29:
                    b4:c4:e6:14:61:4c:49:15:a1:b8:58:18:94:d5:47:
                    10:02:8e:b6:f9:80:46:41:9e:e7:d4:22:31:78:cc:
                    12:0a:c2:4e:f9:cb:fa:9f:81:92:bd:8d:c4:25:13:
                    ff:b5:a8:b0:02:39:ba:0d:51:76:ec:d1:e7:9a:b7:
                    ad:ba:27:31:40:5c:db:a9:3d:0f:49:cb:53:e3:f8:
                    88:3c:05:09:70:9d:82:29:a6:fd:67:e3:b6:fe:18:
                    b7:2c:03:0c:48:b2:18:31:fe:ac:69:47:86:57:e5:
                    d1:92:1f:20:de:36:6b:81:d8:ae:82:70:16:23:02:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FF:DE:36:6A:06:72:47:D5:2D:FF:0A:E2:36:35:3B:C3:9E:ED:4E
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37312e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:7d:e9:8b:4a:10:dc:f2:32:47:48:50:58:32:f4:74:e2:e1:
         ad:59:9c:bf:2c:c0:60:54:51:58:45:14:0c:5e:5f:90:80:5d:
         a5:93:b7:21:1d:a7:43:e8:43:d2:24:b7:cf:ad:cd:33:03:7f:
         61:ab:76:36:66:f5:d5:bc:2e:88:b7:30:9a:92:4e:a8:41:f3:
         b4:54:48:5e:57:26:25:30:af:54:55:87:39:04:ec:d4:fc:bc:
         a4:bf:42:2a:8e:bc:22:0c:bb:3e:c2:e4:a6:1e:11:62:9f:bb:
         59:a5:39:de:75:c6:59:30:e4:d2:41:41:13:8c:e5:43:cd:bd:
         9f:1b:c8:d1:e4:93:14:af:c6:42:0b:be:50:50:4c:8f:ca:a3:
         a1:a1:11:db:0b:39:1b:88:df:bc:f8:70:7a:ba:db:ef:87:5a:
         a6:9b:6d:42:a4:f7:a8:83:ef:90:06:b0:e3:d6:b5:08:b6:24:
         b0:4a:34:a6:d8:48:44:ca:72:92:e4:9c:8a:fa:43:90:b4:44:
         ba:50:fe:22:5c:6b:a1:9a:29:2d:db:ae:6b:19:ec:07:f7:19:
         66:70:7a:4c:12:84:fe:9b:07:4c:19:da:2d:07:c9:0d:dc:55:
         a6:e0:86:40:7e:8f:50:b4:19:c0:f4:3d:f4:0f:65:b7:fb:cf:
         89:59:67:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:35:36 2025 by rpki-client