Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130342e302f32322d3234203d3e20323635363735.roa
File:                     3134332e3235352e3130342e302f32322d3234203d3e20323635363735.roa (raw, json)
Hash identifier:          zILMBo/3U/bh8XyeyxohSyhtFE5521pS6oyG+WJjjW8=
Subject key identifier:   36:EB:11:BD:6F:B4:85:B7:F7:39:DA:22:60:2B:51:AA:A9:66:AA:B8
Certificate issuer:       /CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
Certificate serial:       710692F180906D1DC4574B931CA9547639254BC5
Authority key identifier: E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130342e302f32322d3234203d3e20323635363735.roa
Signing time:             Wed 07 May 2025 17:35:00 +0000
ROA not before:           Wed 07 May 2025 17:30:00 +0000
ROA not after:            Wed 06 May 2026 17:35:00 +0000
asID:                     265675
IP address blocks:        143.255.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 15:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:06:92:f1:80:90:6d:1d:c4:57:4b:93:1c:a9:54:76:39:25:4b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C
        Validity
            Not Before: May  7 17:30:00 2025 GMT
            Not After : May  6 17:35:00 2026 GMT
        Subject: CN=36EB11BD6FB485B7F739DA22602B51AAA966AAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:63:3f:d9:bc:b8:c6:d4:90:fa:f5:95:5a:
                    c5:4c:83:56:b5:0e:0a:f0:d1:bb:5c:47:3c:8e:32:
                    c8:51:6a:bb:d1:09:7d:92:c5:f7:d5:44:55:87:62:
                    e9:5c:6b:ad:fb:1c:88:64:20:82:e8:2a:4c:81:00:
                    38:2c:2a:03:f7:74:29:4c:8e:0d:61:31:ab:1f:b0:
                    af:b1:e4:6b:69:e5:f7:07:bd:ee:58:f8:72:0e:a4:
                    2b:0a:c3:b7:10:00:92:6e:ba:9b:6c:7b:c7:aa:41:
                    85:8a:9d:17:26:a5:97:da:19:72:4e:67:50:51:96:
                    7c:dc:00:fa:27:e8:d4:6c:07:8f:21:ff:61:be:6b:
                    07:51:61:3d:8d:69:f2:32:6b:6b:f6:5e:9a:ae:bf:
                    44:de:6c:f1:7f:d4:de:5a:83:e6:0d:fa:70:a8:13:
                    ca:03:ae:24:3a:b9:ef:74:06:38:ac:88:08:76:d8:
                    7d:97:2d:53:6c:e9:d9:12:65:86:94:76:f5:28:66:
                    07:c5:97:ee:b4:ff:ad:e0:74:3a:37:9f:f0:e3:1e:
                    60:ac:dc:e2:09:b9:ac:b4:1e:c4:49:9f:13:31:a4:
                    3e:ad:e1:ca:01:f0:c0:06:8f:8f:cf:ca:89:13:3c:
                    1b:dd:f2:4b:04:31:7e:96:6b:d9:62:8e:6c:ff:ba:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EB:11:BD:6F:B4:85:B7:F7:39:DA:22:60:2B:51:AA:A9:66:AA:B8
            X509v3 Authority Key Identifier:
                keyid:E9:AC:B4:5B:E7:06:89:C5:BD:CD:2D:9B:FC:FF:00:20:38:7F:92:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9ACB45BE70689C5BDCD2D9BFCFF0020387F921C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F25641352DADC73F54833C1CD86226E6D22713782D7B04666C97D94B9D6CA9A6/0/3134332e3235352e3130342e302f32322d3234203d3e20323635363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:27:fa:58:7a:95:0c:0b:f3:f5:9a:5c:93:08:23:3a:8c:0b:
         38:f2:3c:b9:88:25:44:4d:14:e3:7a:05:87:4a:68:fd:92:7d:
         62:1e:e4:76:85:5a:5c:de:27:c4:92:4c:c5:69:bf:24:88:75:
         34:2d:bd:ec:98:dc:0e:8a:14:fc:c0:83:f7:16:82:c6:87:82:
         5e:db:de:03:e4:a0:67:a6:1c:2c:8b:0a:88:de:be:b7:2e:d3:
         e6:17:d7:9c:99:be:e6:b2:05:e8:19:f5:e2:26:4f:c9:05:b4:
         fe:37:18:e8:29:90:87:5a:65:7e:e9:2f:71:d9:33:60:c0:37:
         8e:84:a0:81:6d:14:56:76:25:8b:e1:99:a4:cd:b4:ed:36:cf:
         5e:bd:06:86:b9:d9:63:e7:e3:c8:9f:4a:e0:b6:dc:50:37:2c:
         59:95:6d:5b:16:c5:aa:8e:ec:35:a9:85:50:ba:b1:ea:45:41:
         4f:3a:71:95:b4:9e:f9:0a:7b:ef:48:ed:1d:15:53:1c:22:b7:
         b0:44:f6:e3:bf:10:5c:a8:e3:37:dc:3a:a6:a7:70:e7:11:20:
         d8:bc:36:c3:1c:4e:b2:fb:d3:2d:da:ff:a5:12:06:97:35:dc:
         ac:76:15:1e:05:16:5f:49:6c:2c:14:8b:cc:85:d7:bc:df:d6:
         da:2d:80:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:16:32 2025 by rpki-client