Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/3130332e3131312e34302e302f32322d3234203d3e20323733383731.roa
File:                     3130332e3131312e34302e302f32322d3234203d3e20323733383731.roa (raw, json)
Hash identifier:          nqJmTD5JK89hj7swKDTD6JIfOABvww1VDCkD/KdYlj8=
Subject key identifier:   D0:BA:44:31:7E:23:2A:95:3A:8B:B3:A8:42:0C:33:38:9F:54:9E:59
Certificate issuer:       /CN=9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97
Certificate serial:       0E2A046E5EA2A5CEA0B48E48C44BF901E75CE7BD
Authority key identifier: 9C:B4:E3:9C:4E:47:95:FB:2F:6A:11:6C:BA:9F:D6:6F:06:F6:4B:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/3130332e3131312e34302e302f32322d3234203d3e20323733383731.roa
Signing time:             Tue 01 Apr 2025 21:55:00 +0000
ROA not before:           Tue 01 Apr 2025 21:50:00 +0000
ROA not after:            Tue 31 Mar 2026 21:55:00 +0000
asID:                     273871
IP address blocks:        103.111.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2a:04:6e:5e:a2:a5:ce:a0:b4:8e:48:c4:4b:f9:01:e7:5c:e7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97
        Validity
            Not Before: Apr  1 21:50:00 2025 GMT
            Not After : Mar 31 21:55:00 2026 GMT
        Subject: CN=D0BA44317E232A953A8BB3A8420C33389F549E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bc:df:70:78:5e:7a:7e:c8:8d:89:4f:94:2c:
                    50:dc:03:7a:0c:8a:ac:5e:33:62:13:c8:44:00:81:
                    00:1e:e3:a8:b3:8b:e2:a9:86:0a:c4:52:cd:d2:b1:
                    b3:e5:cc:f2:62:85:13:22:b9:4f:e7:58:b9:c8:11:
                    e0:ca:f9:0f:f2:f0:96:71:d8:21:35:d3:2d:b5:5a:
                    67:5b:38:70:15:aa:98:eb:49:12:1b:0b:03:1f:9c:
                    3f:5f:9f:94:c9:33:39:e9:93:2f:a3:d0:cd:ca:d8:
                    1c:da:f4:74:6a:fd:99:f2:e8:b2:af:21:08:3b:09:
                    b3:17:e5:4b:6e:30:ec:e5:5d:ce:ec:be:cd:87:01:
                    9f:f1:9c:06:49:17:58:2b:8c:f4:fc:42:47:69:bf:
                    85:67:c0:75:e4:4f:60:9f:49:6c:ef:e5:0e:0c:08:
                    05:74:90:fa:cd:e2:83:0b:bc:03:5d:3f:f3:92:75:
                    25:c7:db:f1:5e:54:6f:45:1e:94:77:fe:a9:16:e9:
                    37:84:1c:aa:39:df:27:27:84:0e:25:f6:ea:e4:8b:
                    4d:e9:50:90:fd:7a:84:6d:fa:04:cc:5a:aa:ed:a1:
                    c0:7f:2b:27:18:55:f3:98:b1:54:e6:71:2d:f8:f2:
                    03:05:f7:d6:5b:4c:75:3d:91:3f:dc:de:96:59:d7:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BA:44:31:7E:23:2A:95:3A:8B:B3:A8:42:0C:33:38:9F:54:9E:59
            X509v3 Authority Key Identifier:
                keyid:9C:B4:E3:9C:4E:47:95:FB:2F:6A:11:6C:BA:9F:D6:6F:06:F6:4B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9CB4E39C4E4795FB2F6A116CBA9FD66F06F64B97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EDC57A066356868B87F146864D5278EF98DD94055450A2BF7A6A77355F9E6C3/0/3130332e3131312e34302e302f32322d3234203d3e20323733383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:3f:e2:7f:5b:64:27:02:04:f7:87:1f:a5:f6:21:8e:81:a8:
         af:89:65:48:e3:a0:0e:21:8b:a9:8e:4a:8b:84:c5:ae:69:6a:
         2f:40:f5:ee:80:ab:f2:90:80:59:6e:0f:2f:41:04:e9:2a:b1:
         42:eb:da:b0:5a:83:84:82:b9:60:60:32:2e:bd:56:26:09:a8:
         17:71:3e:e0:62:d1:3c:d6:ca:e0:8a:4f:51:95:7c:37:02:12:
         56:be:54:15:ed:31:99:af:5e:c9:ad:1e:8c:00:82:b0:07:62:
         ce:a5:8b:33:af:79:15:2c:58:32:79:ac:00:87:67:f7:b5:90:
         17:24:b0:69:49:a5:ed:1a:ce:d4:03:a3:7e:f1:9a:d0:16:98:
         8f:49:c0:47:ee:90:81:b3:fc:fd:2a:0a:e6:ac:6e:b9:23:4a:
         91:d7:f1:47:c2:1b:a3:4a:5d:41:85:85:08:68:ae:c3:e0:0b:
         80:11:26:0a:cc:6f:9d:62:49:01:0f:a3:a1:55:a2:dd:d0:ae:
         94:f3:34:22:c0:68:dd:5e:52:99:ca:a0:07:67:ef:e0:55:44:
         95:8f:78:40:32:36:24:97:37:07:71:89:e0:23:0c:45:ee:24:
         ef:91:55:61:dc:31:57:25:e4:0e:c9:fe:53:54:75:37:e7:e1:
         a8:cc:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:13 2025 by rpki-client on console.sobornost.net