Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3133312e37322e3135362e302f32322d3234203d3e203238333138.roa
File:                     3133312e37322e3135362e302f32322d3234203d3e203238333138.roa (raw, json)
Hash identifier:          d8n6g2nr7nfH9VlLrPlsDapQpnGWyDXh8qOVtmmQ888=
Subject key identifier:   83:CC:1D:52:EE:1C:79:C8:F3:D0:17:FD:51:81:6F:50:DF:6B:41:13
Certificate issuer:       /CN=6901373ADF0D0461CC1A44926DE5F2462E477F44
Certificate serial:       741AAF3FC86AEE46E4FC0144A8335920909190C0
Authority key identifier: 69:01:37:3A:DF:0D:04:61:CC:1A:44:92:6D:E5:F2:46:2E:47:7F:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3133312e37322e3135362e302f32322d3234203d3e203238333138.roa
Signing time:             Tue 04 Feb 2025 20:08:49 +0000
ROA not before:           Tue 04 Feb 2025 20:03:49 +0000
ROA not after:            Tue 03 Feb 2026 20:08:49 +0000
asID:                     28318
IP address blocks:        131.72.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1a:af:3f:c8:6a:ee:46:e4:fc:01:44:a8:33:59:20:90:91:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6901373ADF0D0461CC1A44926DE5F2462E477F44
        Validity
            Not Before: Feb  4 20:03:49 2025 GMT
            Not After : Feb  3 20:08:49 2026 GMT
        Subject: CN=83CC1D52EE1C79C8F3D017FD51816F50DF6B4113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:85:38:79:59:59:30:f7:a4:a8:60:6b:10:
                    a6:ee:6f:1f:2f:d0:e3:88:ff:22:91:4b:d2:f3:22:
                    77:70:8e:72:e5:ea:91:7a:d6:5a:66:ac:be:13:b3:
                    fc:76:75:a2:45:eb:4a:01:0d:21:9b:b1:14:9d:2e:
                    77:2a:32:6c:62:5e:7d:5e:2e:3e:c1:41:65:3e:31:
                    46:0a:1f:70:3e:4c:8b:b8:9a:26:8c:73:d6:e4:ed:
                    24:cd:f5:c3:bd:ef:a8:76:87:f3:67:c8:32:e3:36:
                    0b:6f:73:bd:4b:67:64:a6:dc:6e:fe:f1:bb:b9:68:
                    38:2c:71:86:b6:73:0d:a3:96:7f:dc:0c:78:a5:14:
                    6a:1a:b0:3e:74:9a:cb:80:d0:50:ce:bc:a3:0e:79:
                    98:78:7e:41:3b:b1:f5:00:00:14:ee:b3:6e:b8:7a:
                    6a:08:6d:28:6e:ed:8b:a8:af:b5:41:64:67:eb:a0:
                    75:69:62:e7:a5:66:a0:0a:97:68:39:ef:7b:63:26:
                    ac:a0:da:5d:d1:0f:42:72:5a:4c:df:41:10:0a:98:
                    f9:a9:0a:cd:e6:2a:d6:c7:9d:b8:ab:f5:ac:1f:22:
                    aa:f7:05:12:0a:0c:58:e2:0d:1e:b6:02:2c:8e:43:
                    2b:16:24:da:b0:4d:2f:40:a1:7c:ad:cd:fd:18:65:
                    9c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CC:1D:52:EE:1C:79:C8:F3:D0:17:FD:51:81:6F:50:DF:6B:41:13
            X509v3 Authority Key Identifier:
                keyid:69:01:37:3A:DF:0D:04:61:CC:1A:44:92:6D:E5:F2:46:2E:47:7F:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3133312e37322e3135362e302f32322d3234203d3e203238333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:40:ab:42:83:e9:a0:8d:c1:ba:73:02:62:89:c4:1a:90:c7:
         e4:0a:c1:4d:b4:e2:a4:09:b8:bb:2e:cc:07:7b:c9:cd:59:08:
         7f:c6:80:77:17:a8:d7:3a:f2:c0:46:be:49:7e:b4:dd:e8:29:
         56:aa:fc:12:40:c1:ae:bd:77:b4:01:89:0f:1a:af:b1:b6:9c:
         42:a8:6d:78:2c:a7:49:75:b4:da:b4:99:81:6f:46:88:35:89:
         fa:06:f2:74:98:58:9d:98:0b:88:1c:13:ad:cb:6b:25:58:aa:
         bf:43:db:05:0f:83:41:40:85:de:cc:94:8d:d3:38:5c:ee:03:
         c9:a8:cc:ca:96:6d:53:b6:75:3e:6c:17:e8:a3:d8:50:ac:04:
         7b:28:3e:18:0f:47:c0:14:f2:01:f3:ea:b1:55:5a:58:14:4f:
         62:26:db:1e:d9:14:09:c2:27:0e:05:49:d9:54:e9:7d:86:8b:
         27:dd:f2:82:d5:0e:bf:d9:87:40:36:41:ba:5a:e7:8a:c5:f8:
         bc:95:55:df:ce:d4:63:39:ad:83:cd:f5:ee:a9:c5:9f:10:5c:
         2d:be:84:30:fd:ba:7f:4a:27:c1:0b:50:dd:ce:54:32:c4:fc:
         83:b9:34:44:51:91:26:c7:fb:aa:77:53:79:63:c4:a3:7b:bc:
         ac:82:10:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:17 2025 by rpki-client