Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/026CF02C4ED29BE51A5CF7349FEF7F5AEE84C01AD4960B2C3BE10F9D37B17BE0/0/3133312e3139362e3131322e302f32322d3234203d3e20323634363638.roa
File:                     3133312e3139362e3131322e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          Fp2/VNzZ+CAERzYARYHVEt9gfTjiH77ICTJDlmrsrQM=
Subject key identifier:   0B:C7:7D:F6:13:27:1E:B2:11:35:C2:C6:AE:00:83:AC:5A:46:B1:42
Certificate issuer:       /CN=575E8C6CA1804CEB8830FE8544A39CB633AA341C
Certificate serial:       227799ED3EA6FDE9AF5F65626596CA26F31C9931
Authority key identifier: 57:5E:8C:6C:A1:80:4C:EB:88:30:FE:85:44:A3:9C:B6:33:AA:34:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/575E8C6CA1804CEB8830FE8544A39CB633AA341C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/026CF02C4ED29BE51A5CF7349FEF7F5AEE84C01AD4960B2C3BE10F9D37B17BE0/0/3133312e3139362e3131322e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:00:12 +0000
ROA not before:           Tue 04 Feb 2025 17:55:12 +0000
ROA not after:            Tue 03 Feb 2026 18:00:12 +0000
asID:                     264668
IP address blocks:        131.196.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/026CF02C4ED29BE51A5CF7349FEF7F5AEE84C01AD4960B2C3BE10F9D37B17BE0/0/575E8C6CA1804CEB8830FE8544A39CB633AA341C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/026CF02C4ED29BE51A5CF7349FEF7F5AEE84C01AD4960B2C3BE10F9D37B17BE0/0/575E8C6CA1804CEB8830FE8544A39CB633AA341C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/575E8C6CA1804CEB8830FE8544A39CB633AA341C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:77:99:ed:3e:a6:fd:e9:af:5f:65:62:65:96:ca:26:f3:1c:99:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575E8C6CA1804CEB8830FE8544A39CB633AA341C
        Validity
            Not Before: Feb  4 17:55:12 2025 GMT
            Not After : Feb  3 18:00:12 2026 GMT
        Subject: CN=0BC77DF613271EB21135C2C6AE0083AC5A46B142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:ff:7d:61:6b:28:46:be:61:05:aa:89:65:
                    a2:75:ad:de:4d:91:30:c5:ab:b2:7d:f6:a7:af:0b:
                    1a:fb:59:42:6d:97:3a:a3:68:f1:f9:3b:44:2e:b3:
                    9a:12:e8:6f:cd:22:74:f5:c0:02:12:ed:de:89:3c:
                    e8:30:d9:29:e8:93:ba:97:0d:56:01:f4:16:94:85:
                    8c:a8:52:00:61:35:e5:9d:6c:38:7b:4c:ce:69:d5:
                    88:7a:f4:5e:c6:27:19:11:93:59:2f:27:e5:31:b9:
                    86:5e:74:ce:3e:1a:e2:a5:45:be:22:1f:c0:1c:ff:
                    32:fe:fc:87:de:93:2e:14:7d:41:ad:c1:59:d3:91:
                    04:71:83:78:f2:55:f2:11:4b:dc:da:25:3b:42:f5:
                    9e:6e:9c:64:0c:85:29:c5:05:63:57:b2:73:17:1d:
                    9f:50:9b:03:71:c9:45:7c:1a:81:d8:9a:6d:c2:24:
                    88:1a:6f:51:41:b7:67:d1:35:3d:a2:0b:a5:64:09:
                    fb:71:b0:3a:1e:2b:ac:19:a6:75:7a:98:52:b3:15:
                    9b:5d:c5:79:cf:69:c8:24:33:c4:57:dc:64:2b:b8:
                    c9:1e:83:d4:3a:a4:8f:64:ac:58:64:b6:e0:49:bf:
                    e3:48:35:fb:22:49:69:ac:a2:bc:19:cc:bb:c1:3c:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C7:7D:F6:13:27:1E:B2:11:35:C2:C6:AE:00:83:AC:5A:46:B1:42
            X509v3 Authority Key Identifier:
                keyid:57:5E:8C:6C:A1:80:4C:EB:88:30:FE:85:44:A3:9C:B6:33:AA:34:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/026CF02C4ED29BE51A5CF7349FEF7F5AEE84C01AD4960B2C3BE10F9D37B17BE0/0/575E8C6CA1804CEB8830FE8544A39CB633AA341C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/575E8C6CA1804CEB8830FE8544A39CB633AA341C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/026CF02C4ED29BE51A5CF7349FEF7F5AEE84C01AD4960B2C3BE10F9D37B17BE0/0/3133312e3139362e3131322e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:fa:1f:39:34:b6:8a:e7:df:ca:07:24:0d:4e:77:9f:79:db:
         75:10:41:a2:41:de:70:b2:2b:e0:b6:66:cc:41:ce:0b:f0:e4:
         81:bb:45:af:fd:b4:1d:41:aa:7a:45:ef:14:81:b7:70:a4:ed:
         c9:a9:53:1f:42:67:54:eb:7c:5d:19:e5:5d:96:27:f4:2e:59:
         2e:52:70:21:82:16:ba:c8:b9:a9:39:60:41:62:0a:17:e0:4e:
         ab:ae:7d:28:38:43:a1:40:3e:23:5d:81:f4:99:34:01:e2:b9:
         6b:15:38:e9:39:ab:7a:dc:6a:13:6f:7c:5b:8b:20:c2:08:c3:
         52:93:9d:1a:8a:c9:bb:64:13:4b:53:0e:8f:e9:c7:f5:31:39:
         fc:a9:b0:4d:d2:c4:50:5a:73:c1:5a:69:c8:e3:41:33:40:05:
         06:ad:3c:64:5d:9e:47:2f:fb:73:6f:9d:f2:4f:7d:02:4f:f8:
         47:ae:ca:96:7e:72:42:c7:2b:f4:2e:c4:c1:c3:93:a1:58:90:
         e5:29:65:9d:dc:48:51:59:b0:3b:2c:b8:29:d9:f8:51:98:3a:
         c2:97:bb:81:9b:24:50:6d:ef:ed:c0:55:d3:6e:34:e8:41:e3:
         87:52:68:32:e3:44:1a:c0:65:33:dd:b7:1e:57:4e:c5:e0:0d:
         f0:c8:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:08 2025 by rpki-client