Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134322e302f32342d3234203d3e20323730313036.roa
File:                     3139312e3234312e3134322e302f32342d3234203d3e20323730313036.roa (raw, json)
Hash identifier:          AMTMTI0DyK6gupc+dODMtvLc0RETY2omim8curvDWJ4=
Subject key identifier:   2D:3F:91:06:D1:FB:B4:19:1B:EE:E4:48:76:0E:55:43:E1:40:2A:93
Certificate issuer:       /CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
Certificate serial:       5B06E135EA01B60FB49DE525CB353598D09F6F5D
Authority key identifier: 8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134322e302f32342d3234203d3e20323730313036.roa
Signing time:             Sat 19 Apr 2025 19:45:00 +0000
ROA not before:           Sat 19 Apr 2025 19:40:00 +0000
ROA not after:            Sat 18 Apr 2026 19:45:00 +0000
asID:                     270106
IP address blocks:        191.241.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:06:e1:35:ea:01:b6:0f:b4:9d:e5:25:cb:35:35:98:d0:9f:6f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
        Validity
            Not Before: Apr 19 19:40:00 2025 GMT
            Not After : Apr 18 19:45:00 2026 GMT
        Subject: CN=2D3F9106D1FBB4191BEEE448760E5543E1402A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:ce:f5:de:35:3a:b5:22:56:47:d1:3d:4d:
                    d0:05:15:ca:0b:8c:c7:f6:21:d4:8e:33:39:8b:6a:
                    b1:cc:47:c2:4b:04:d9:99:54:eb:78:cd:7b:7b:54:
                    58:5f:2b:7d:98:d5:80:79:ce:3f:b0:ac:38:9f:af:
                    c5:c7:4e:3e:e1:17:63:58:b3:1a:44:6b:8d:9c:5b:
                    f5:e5:6e:1f:7b:57:f0:56:e5:f3:02:cc:f6:6a:9c:
                    95:2a:95:b6:28:28:30:59:15:1e:9c:fc:73:3d:bb:
                    1f:e3:e6:8d:ab:dd:bc:e5:bd:f8:47:c6:db:74:8a:
                    ae:4c:ad:ee:88:78:bc:6f:75:c7:f3:0f:bd:cf:a3:
                    3f:4f:7d:e3:a5:80:9e:a3:51:ec:59:06:de:71:9f:
                    01:ee:c2:4b:62:da:19:9e:66:51:c3:e0:ec:85:6c:
                    39:60:c4:de:8a:ec:9b:81:f3:a0:e2:c3:46:35:04:
                    f8:26:c9:ac:d8:f6:b6:e8:5d:52:2d:7d:12:3b:b4:
                    c5:c3:78:e5:5c:de:fa:ba:89:0b:e1:3f:b0:b9:e8:
                    e7:f8:da:85:9f:5d:e5:cd:42:fe:51:85:36:87:bb:
                    fc:9b:74:cb:a9:80:81:31:d1:8c:d7:c0:30:34:0c:
                    9d:7c:07:bf:a4:c9:8d:92:5c:74:de:88:43:85:32:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3F:91:06:D1:FB:B4:19:1B:EE:E4:48:76:0E:55:43:E1:40:2A:93
            X509v3 Authority Key Identifier:
                keyid:8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134322e302f32342d3234203d3e20323730313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:2c:37:ed:1c:ed:38:fb:5f:e3:0e:78:03:03:a6:03:9f:83:
         08:f5:2f:46:ad:97:90:ab:56:30:34:16:73:27:d1:fc:c4:29:
         bf:63:c5:fa:cc:ac:6a:92:c4:09:21:a3:4c:b1:c5:0d:c9:ab:
         70:96:00:34:60:47:a8:1d:65:6e:d9:64:ff:5d:f6:fe:a6:f6:
         df:b5:48:17:04:dd:79:4e:01:7d:c0:b0:8e:c4:a2:85:ca:2b:
         38:fb:66:b2:28:cd:20:2f:7b:35:71:46:3b:0b:fd:65:a7:fe:
         9b:6f:d8:31:b2:46:70:60:96:fd:36:99:b3:94:11:9f:da:f6:
         58:02:df:a4:7d:47:43:69:43:e4:49:10:5e:30:99:6a:c6:55:
         c7:3e:d6:0a:72:6f:4b:3d:26:42:68:89:7e:74:d5:86:83:0d:
         8b:59:93:e0:b5:50:da:ef:0a:13:5b:17:9d:1a:f5:b9:39:e2:
         a7:31:4d:f5:51:8e:29:6b:82:35:09:4c:6d:3d:8a:3e:20:48:
         83:38:91:74:61:67:03:85:4f:e1:20:56:dd:0a:23:6f:cd:9c:
         4a:2b:c6:cb:09:cf:0d:ff:bb:37:e9:5b:67:b9:1a:44:c8:ca:
         39:ab:8e:39:8d:ff:85:35:be:cc:fd:92:c1:da:66:e5:ef:37:
         60:70:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:06 2025 by rpki-client on console.sobornost.net