Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37332e302f32342d3234203d3e203232303131.roa
File:                     3134382e3234332e37332e302f32342d3234203d3e203232303131.roa (raw, json)
Hash identifier:          3e2aHN1sQvITdyadNvXLmDbBVfRqgnsBr39s3dnUzhI=
Subject key identifier:   C2:D6:8D:6D:7B:0B:63:A4:36:3B:AE:70:F8:C1:60:BD:2F:B3:14:DE
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       26AB0B046F3D1602CEC7D7B26D27D8A1D7914341
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37332e302f32342d3234203d3e203232303131.roa
Signing time:             Tue 04 Feb 2025 18:18:50 +0000
ROA not before:           Tue 04 Feb 2025 18:13:50 +0000
ROA not after:            Tue 03 Feb 2026 18:18:50 +0000
asID:                     22011
IP address blocks:        148.243.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ab:0b:04:6f:3d:16:02:ce:c7:d7:b2:6d:27:d8:a1:d7:91:43:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:50 2025 GMT
            Not After : Feb  3 18:18:50 2026 GMT
        Subject: CN=C2D68D6D7B0B63A4363BAE70F8C160BD2FB314DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:b6:af:66:f0:3f:ab:07:c2:94:10:c2:c3:
                    4d:97:e3:02:e0:ba:43:18:3c:72:3d:0e:aa:45:e7:
                    ac:63:03:21:39:10:eb:da:6c:71:25:22:1b:e8:93:
                    2f:23:cb:b7:cf:40:af:8c:f2:bd:29:ef:95:02:bc:
                    8c:20:78:96:83:93:22:a8:da:6c:52:ca:56:75:72:
                    2c:74:7e:14:d1:e4:b9:41:fa:de:b0:74:89:75:93:
                    12:5a:b5:04:bd:63:d1:57:7f:6b:e5:41:0b:72:57:
                    7d:ff:8d:0e:77:90:9d:50:ac:2e:32:8c:e4:b9:88:
                    24:97:8e:d8:bf:75:05:93:c6:f9:30:d2:99:46:84:
                    3c:02:c0:cf:ad:9b:49:a9:53:0c:1c:b1:d6:0f:e1:
                    87:36:eb:b2:29:d1:29:55:f7:e2:62:cc:47:0c:a9:
                    57:4d:75:28:a6:38:b8:7e:ff:7f:eb:c2:6f:27:36:
                    7c:db:5f:93:78:0b:74:44:d0:72:13:1b:bd:0d:42:
                    a0:92:ab:c4:16:a9:f0:c4:55:a6:b8:01:77:d2:61:
                    37:ef:b7:88:c2:c9:c5:e2:78:50:97:13:be:d2:41:
                    a7:aa:84:8c:2c:67:64:28:86:78:6c:2d:94:42:67:
                    e3:cd:c3:55:82:d7:c2:52:13:d2:8e:35:6e:66:39:
                    c5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D6:8D:6D:7B:0B:63:A4:36:3B:AE:70:F8:C1:60:BD:2F:B3:14:DE
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e37332e302f32342d3234203d3e203232303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:b6:37:eb:6f:ff:0a:50:cb:86:98:05:b3:3d:53:2d:87:87:
         1e:47:94:e3:b5:1a:69:53:cc:1c:db:ce:4f:d8:2c:08:fd:54:
         22:09:aa:19:6b:13:d6:95:17:47:bd:44:99:72:56:21:17:aa:
         a8:b8:4f:7e:cd:e5:d8:f9:9c:ce:58:25:54:b7:32:50:91:97:
         a7:21:86:50:72:28:dc:20:24:2f:18:82:d1:97:a0:92:a1:54:
         92:7f:7b:d7:31:ce:60:fa:ae:fb:13:d0:2b:c3:e7:db:4f:30:
         6d:91:83:6c:84:31:c3:83:5f:1e:25:7a:f8:44:b7:ed:53:29:
         8d:31:05:f0:ee:e9:12:0b:b3:b0:b2:2c:b9:88:b9:72:96:60:
         18:5b:0b:62:8e:42:66:2a:9d:61:1a:eb:fa:1a:37:f3:96:75:
         82:83:14:28:22:87:30:b3:31:e4:f2:67:94:b8:dd:cb:c4:b8:
         2b:a5:6d:6b:df:87:40:dc:39:e8:bd:d7:aa:f5:ae:0b:29:3d:
         04:e3:34:cd:e5:32:5a:e8:0c:12:56:01:28:cf:35:0a:9d:30:
         af:06:9f:da:0a:4a:af:34:47:01:05:26:11:1a:4f:a0:b9:52:
         0b:94:ce:34:66:36:ec:76:14:3e:1b:c0:67:1f:16:e5:22:40:
         ce:ff:27:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:46 2025 by rpki-client