Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3134332e302e3234382e302f32322d3234203d3e203237383433.roa
File:                     3134332e302e3234382e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          Q6EJqRvENSStLEuHaviqE5E/Y+lKUFc2fUZS8HN1oys=
Subject key identifier:   E5:13:2A:61:66:7B:31:25:50:80:0B:70:82:40:E8:5F:82:E9:E3:97
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       20BD9CA0D530467E298B1021E9C69300BFA57A67
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3134332e302e3234382e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 04 Feb 2025 18:06:09 +0000
ROA not before:           Tue 04 Feb 2025 18:01:09 +0000
ROA not after:            Tue 03 Feb 2026 18:06:09 +0000
asID:                     27843
IP address blocks:        143.0.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bd:9c:a0:d5:30:46:7e:29:8b:10:21:e9:c6:93:00:bf:a5:7a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Feb  4 18:01:09 2025 GMT
            Not After : Feb  3 18:06:09 2026 GMT
        Subject: CN=E5132A61667B312550800B708240E85F82E9E397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f1:0a:bc:e9:2b:45:f0:ff:a3:ca:53:16:6c:
                    af:2d:8e:fb:ce:c4:30:58:17:e7:34:21:33:cd:17:
                    b4:7d:9c:cc:64:41:42:5e:73:51:d1:ab:34:92:23:
                    9f:85:ce:bf:5b:c5:e5:7e:a0:e4:0e:db:4a:61:8e:
                    2a:a2:c9:b6:03:6e:0b:3b:37:08:2d:71:67:50:52:
                    e9:9e:71:3a:04:ad:c6:38:48:10:85:c9:ce:36:76:
                    91:43:36:39:71:11:3e:57:b1:1d:93:45:c1:c2:2d:
                    46:8e:36:1a:8a:cb:ec:d0:74:f6:bf:fe:15:68:86:
                    3c:b5:cd:92:a7:45:bd:db:d0:1f:de:99:59:a3:1e:
                    a6:a6:54:67:b5:a7:52:eb:91:d4:a1:12:7b:67:42:
                    82:e0:44:19:2c:c7:94:e1:fc:9f:ed:48:6a:b7:0a:
                    36:5d:50:d9:5b:5a:e2:e5:62:3b:15:20:fd:f4:9c:
                    d5:ff:8e:45:94:a7:78:92:fb:b6:23:17:2d:25:d7:
                    71:e3:8e:13:9e:67:dd:b2:2c:44:c5:c5:fa:8a:38:
                    3c:8d:37:23:23:ea:0b:9c:46:50:ce:46:79:6e:74:
                    eb:31:92:41:ad:ca:40:d5:10:0d:27:bf:89:55:25:
                    d7:86:e1:0a:c8:85:91:a4:11:d9:c6:fb:a9:a2:9d:
                    c6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:13:2A:61:66:7B:31:25:50:80:0B:70:82:40:E8:5F:82:E9:E3:97
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3134332e302e3234382e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:59:95:07:22:75:b4:e6:b9:0b:30:01:57:63:da:95:26:cf:
         5d:73:30:5d:26:d5:f9:a3:d9:01:0b:38:45:83:3f:1d:06:7d:
         34:57:1d:1a:56:ce:c0:50:2e:14:3a:48:1e:d9:f3:08:61:b6:
         83:22:63:73:bb:97:6e:f7:75:c9:0c:eb:82:5f:3b:0a:8c:41:
         d0:2f:1b:f7:16:4e:b9:6a:9a:e3:b9:07:d8:bf:60:65:76:b4:
         04:04:d3:95:fe:74:77:ad:c9:58:ca:f0:7b:d8:de:d5:e6:e0:
         4c:fd:72:da:19:e2:db:f1:ee:20:72:c6:ee:97:04:58:ff:e3:
         31:d4:91:31:2b:8a:fc:99:e4:6f:f6:70:79:13:23:76:7e:42:
         2c:7c:46:f6:1f:c1:2b:c0:48:d3:fe:08:5a:20:6b:65:41:5c:
         70:d8:f1:76:3c:da:c0:94:e2:3e:40:ba:cf:67:21:c6:ba:21:
         ba:e9:c1:fc:0d:61:d1:48:15:85:91:db:f7:de:67:69:d7:5d:
         f4:2c:39:87:29:0c:f7:a4:30:d1:9d:d6:2a:84:17:d6:6d:b6:
         78:54:9e:f4:ad:23:4c:4d:04:f7:77:a7:9d:0e:41:fb:cb:a4:
         8d:51:ce:2d:64:09:9b:65:2c:07:f3:49:12:b6:b7:bb:79:a1:
         8c:83:a5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:01 2025 by rpki-client on console.sobornost.net