Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/3230332e3134322e352e302f32342d3234203d3e203238343437.roa
File:                     3230332e3134322e352e302f32342d3234203d3e203238343437.roa (raw, json)
Hash identifier:          /b1zUttyAwxdUxTiU76KS3OpyhV8VKXDQTNpqNqdGG4=
Subject key identifier:   9E:2C:E6:AA:8A:CC:D7:41:33:6D:86:49:32:D2:3F:6F:6E:70:0B:03
Certificate issuer:       /CN=E785855AE57240B2FBDD57CDBA7782BF3C0A1D53
Certificate serial:       136E569DB0E221CA69CC5633D20E3E4DC635F9BB
Authority key identifier: E7:85:85:5A:E5:72:40:B2:FB:DD:57:CD:BA:77:82:BF:3C:0A:1D:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/3230332e3134322e352e302f32342d3234203d3e203238343437.roa
Signing time:             Mon 30 Jun 2025 20:24:09 +0000
ROA not before:           Mon 30 Jun 2025 20:19:09 +0000
ROA not after:            Mon 29 Jun 2026 20:24:09 +0000
asID:                     28447
IP address blocks:        203.142.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Jul 2025 11:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6e:56:9d:b0:e2:21:ca:69:cc:56:33:d2:0e:3e:4d:c6:35:f9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E785855AE57240B2FBDD57CDBA7782BF3C0A1D53
        Validity
            Not Before: Jun 30 20:19:09 2025 GMT
            Not After : Jun 29 20:24:09 2026 GMT
        Subject: CN=9E2CE6AA8ACCD741336D864932D23F6F6E700B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fe:4b:60:7b:82:b1:7f:d3:23:a8:27:6a:23:
                    32:f6:95:7a:60:d2:61:77:98:15:cf:4e:d6:aa:79:
                    7b:ca:95:be:42:a0:6b:c3:95:5e:0b:f8:a2:f6:42:
                    60:98:2f:5b:63:69:b0:59:0a:48:8c:32:71:0e:67:
                    40:33:ff:a9:7f:a4:a5:00:9c:a9:37:2b:dc:47:0d:
                    5a:2c:df:75:44:99:6d:f7:a2:8f:a4:11:88:9c:e8:
                    8e:7f:3d:b0:9e:fb:ba:59:8e:25:1e:1f:f0:61:42:
                    57:ea:69:11:d0:7a:3a:e0:21:31:41:65:01:cf:9e:
                    af:6f:23:dd:4c:f4:65:e2:02:1d:4c:ae:03:54:0d:
                    bd:0b:34:42:ff:3a:75:26:e8:1e:11:d0:a5:f0:16:
                    4d:cc:cb:cc:9a:06:bc:1c:bb:4f:12:22:eb:23:75:
                    7a:d5:c0:9b:09:63:51:30:7d:a6:97:3d:bf:9c:bc:
                    15:06:fa:8d:2e:7a:1d:71:57:bb:5e:37:38:f9:42:
                    0c:9e:b1:a7:01:c2:07:c1:20:80:56:d8:bc:86:88:
                    10:ba:98:59:cf:0d:b4:f2:ee:25:a3:37:80:24:2c:
                    af:f5:cc:f0:da:21:d3:79:bf:84:f7:7e:c8:aa:9c:
                    b6:69:0b:ca:c1:67:08:64:fd:b1:c3:69:27:2d:09:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2C:E6:AA:8A:CC:D7:41:33:6D:86:49:32:D2:3F:6F:6E:70:0B:03
            X509v3 Authority Key Identifier:
                keyid:E7:85:85:5A:E5:72:40:B2:FB:DD:57:CD:BA:77:82:BF:3C:0A:1D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E785855AE57240B2FBDD57CDBA7782BF3C0A1D53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0AECA48C518AB28DA334F5849684C2C61D7EA13104E2C2771751882D9C4BB23/0/3230332e3134322e352e302f32342d3234203d3e203238343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:59:22:23:b2:c2:e7:da:10:78:91:83:39:6b:2a:22:4d:e7:
         2f:fc:92:b1:ef:55:41:05:ef:32:55:53:7e:84:45:bd:90:65:
         bd:67:26:64:ac:ae:d0:dd:3f:28:92:b5:36:5a:5b:f6:32:45:
         c7:2c:90:04:9f:6d:3c:71:cd:33:8c:b9:ea:9c:ec:a6:ea:2a:
         17:d6:ab:8e:bf:8d:ca:17:bc:dc:08:38:56:96:76:60:4f:31:
         f6:fd:9f:00:79:ab:c2:86:7f:bb:12:92:01:a3:cb:b6:a4:58:
         23:39:d6:24:6d:49:83:08:06:92:c1:b3:30:cd:2d:02:c3:91:
         0b:ac:49:df:47:d3:78:59:6a:30:5a:8f:ca:59:1b:7d:cf:96:
         06:3b:74:a5:92:f6:5d:83:ab:81:2b:29:6b:a0:ed:97:15:bd:
         5f:fd:f7:da:37:29:11:62:24:2c:5b:f8:5b:86:78:5e:b3:7e:
         61:84:1e:54:68:a3:61:5c:7c:1e:68:66:b9:08:9f:be:2f:79:
         f1:1f:16:c1:4a:e0:aa:56:5c:21:e7:8a:1a:bb:bb:22:9e:cb:
         ce:24:f8:09:16:5f:e8:31:9a:b4:1d:bd:96:0f:8c:19:47:2a:
         14:d4:49:6c:df:63:38:90:0c:43:99:27:28:29:f3:16:39:a8:
         51:4e:f6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:06:31 2025 by rpki-client