Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/3230312e3133312e37332e302f32342d3234203d3e20323633373134.roa
File:                     3230312e3133312e37332e302f32342d3234203d3e20323633373134.roa (raw, json)
Hash identifier:          bVBJ3FA+P/HnfBYxtB6Ui4rlF3gKuRiuJ38eYqYDUBo=
Subject key identifier:   96:D3:16:29:19:ED:3F:37:C6:B1:F9:5E:A0:73:34:C1:2F:85:0E:03
Certificate issuer:       /CN=F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0
Certificate serial:       76C2825EF311375ADFF0F46D7CEF45FCE4A04C5A
Authority key identifier: F7:F1:9F:4D:67:57:FD:02:7B:2B:99:C5:1C:B9:BA:27:D3:2F:14:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/3230312e3133312e37332e302f32342d3234203d3e20323633373134.roa
Signing time:             Tue 04 Feb 2025 18:11:06 +0000
ROA not before:           Tue 04 Feb 2025 18:06:06 +0000
ROA not after:            Tue 03 Feb 2026 18:11:06 +0000
asID:                     263714
IP address blocks:        201.131.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c2:82:5e:f3:11:37:5a:df:f0:f4:6d:7c:ef:45:fc:e4:a0:4c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0
        Validity
            Not Before: Feb  4 18:06:06 2025 GMT
            Not After : Feb  3 18:11:06 2026 GMT
        Subject: CN=96D3162919ED3F37C6B1F95EA07334C12F850E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:e2:52:03:fd:4b:0f:75:8e:36:63:df:d2:
                    b7:14:ae:dd:32:7e:cc:be:d2:2d:b4:8d:2a:00:b2:
                    ad:d4:a0:c7:be:6a:5e:e2:21:20:ca:0e:ad:22:88:
                    36:5c:de:27:3f:b6:f3:be:6a:73:9d:e8:f2:a7:5e:
                    d6:d7:d3:24:1e:e1:9f:9f:4e:f6:56:b7:e2:d0:59:
                    cd:af:8b:25:29:0c:f2:2d:01:8d:e6:48:97:8e:cf:
                    df:48:43:7e:90:17:22:fa:3d:61:5b:9b:ba:e5:2c:
                    65:99:60:1d:86:31:9b:f3:d0:9b:bb:17:9b:b9:32:
                    40:b4:51:b3:3e:f5:21:7d:dc:05:03:e2:4c:51:2f:
                    20:6b:cd:08:c9:19:19:ef:ce:5d:44:19:46:56:16:
                    b6:86:26:68:25:a6:84:98:82:9b:95:e4:2b:10:6b:
                    79:9f:78:92:e1:e0:58:7c:a5:ca:67:27:3e:54:cb:
                    97:c5:1b:62:9b:ac:a2:3b:b5:e4:b2:de:8c:0a:a4:
                    3e:9a:8e:28:7c:d4:51:10:2b:60:29:82:a8:70:32:
                    4c:ec:86:08:09:c7:bb:32:7c:f5:39:58:7f:e4:a0:
                    76:e2:3e:d0:5d:7f:14:61:50:d2:d7:0a:bc:45:81:
                    fc:6d:18:22:04:27:24:bb:b8:34:11:ea:52:81:37:
                    0e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D3:16:29:19:ED:3F:37:C6:B1:F9:5E:A0:73:34:C1:2F:85:0E:03
            X509v3 Authority Key Identifier:
                keyid:F7:F1:9F:4D:67:57:FD:02:7B:2B:99:C5:1C:B9:BA:27:D3:2F:14:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7F19F4D6757FD027B2B99C51CB9BA27D32F14F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1AB6002FA225E98BF4708A328BA01449B0AD3EAB2F65C249FFB9048DF966F64/0/3230312e3133312e37332e302f32342d3234203d3e20323633373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:94:c1:60:82:f8:fb:5e:f9:6d:7a:8e:b3:de:41:41:1d:e1:
         a0:0a:ef:9f:6d:b5:1c:13:23:a8:fc:4f:79:53:4e:00:ec:52:
         b7:e2:3f:1c:f2:ae:9f:15:18:7c:fb:f4:f8:95:99:d1:42:7f:
         3e:cd:bb:d5:e9:1e:4d:39:89:94:ee:b7:73:21:52:1f:16:9e:
         4b:01:cb:76:a4:91:84:f7:36:7b:69:de:92:a5:c9:f5:68:58:
         b5:f8:a5:ad:10:a7:e8:0b:e8:22:f0:32:01:e8:37:f9:f1:9a:
         90:27:39:73:4b:e3:63:af:7f:ce:7c:44:7c:38:61:39:c6:9c:
         2c:c1:e4:19:b7:5e:09:2a:36:f6:d9:93:05:41:2e:04:cd:1c:
         e0:82:0a:52:8a:11:b4:5e:b5:d2:8f:83:91:5a:c6:3c:c2:2c:
         d3:b3:97:08:f3:db:c9:4a:72:76:20:d0:5e:68:14:63:25:18:
         ac:a3:c1:b6:27:d1:f3:86:f5:a5:15:71:bf:4c:48:ee:e5:42:
         57:51:5e:04:f4:74:1c:05:cd:69:79:69:0a:07:fa:92:ed:41:
         69:15:2b:fc:05:3e:41:53:0f:e5:86:de:fd:40:23:9a:14:b8:
         38:94:50:fb:25:74:1b:77:c3:5d:fc:c9:a0:8f:2f:18:a0:bc:
         d7:4d:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:06 2025 by rpki-client on console.sobornost.net