Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136392e302f32342d3234203d3e20323639393138.roa
File:                     3133312e37322e3136392e302f32342d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          8GbH7RsjSDeq/VwIN2Z6J8bOnyqTM5kKm+Wn4CUbhOI=
Subject key identifier:   B9:DB:D2:11:B8:BF:52:E1:4B:00:BB:86:D9:9B:3F:BD:D7:F1:7E:DD
Certificate issuer:       /CN=D439ACC51BC8AE7294E3E68A83FB67E034B93F54
Certificate serial:       14DA7971128A5A24D988B296D2698BFB04A312F3
Authority key identifier: D4:39:AC:C5:1B:C8:AE:72:94:E3:E6:8A:83:FB:67:E0:34:B9:3F:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136392e302f32342d3234203d3e20323639393138.roa
Signing time:             Tue 01 Apr 2025 16:15:01 +0000
ROA not before:           Tue 01 Apr 2025 16:10:01 +0000
ROA not after:            Tue 31 Mar 2026 16:15:01 +0000
asID:                     269918
IP address blocks:        131.72.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 04:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:da:79:71:12:8a:5a:24:d9:88:b2:96:d2:69:8b:fb:04:a3:12:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D439ACC51BC8AE7294E3E68A83FB67E034B93F54
        Validity
            Not Before: Apr  1 16:10:01 2025 GMT
            Not After : Mar 31 16:15:01 2026 GMT
        Subject: CN=B9DBD211B8BF52E14B00BB86D99B3FBDD7F17EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b9:29:4a:5c:d0:ab:30:bd:63:96:e7:85:8c:
                    32:16:1e:0b:5c:b0:ed:5c:82:13:e7:62:fd:a0:44:
                    96:1d:fc:7e:87:bc:9a:91:f3:22:95:5b:3c:b1:4b:
                    37:c0:58:19:c4:b0:34:bf:d4:6f:66:7d:e9:8f:20:
                    d5:77:2c:b6:39:f4:72:03:1b:c9:0b:9f:e6:d9:14:
                    b0:3e:cb:7b:8f:65:8b:a8:d6:ed:1d:3f:2a:9c:28:
                    e9:c6:f1:51:fb:99:ce:aa:21:3f:2c:1b:89:46:c2:
                    f8:d7:c2:ec:ed:99:41:4d:84:db:64:35:de:27:e8:
                    d1:64:3e:6d:5c:8e:5b:d7:18:70:72:0a:59:0d:a7:
                    28:5f:9d:3a:b3:17:4a:4d:e0:28:5e:72:97:67:ca:
                    34:e2:6d:bf:0d:78:b9:c5:73:7a:ae:f0:87:10:94:
                    62:2d:59:15:b5:6a:40:40:f7:d9:33:2e:90:e5:c3:
                    df:9f:07:87:90:f5:a9:62:94:42:73:c4:6c:3d:c2:
                    82:a4:0b:de:47:bb:a1:b4:9c:a8:a4:dd:58:45:3b:
                    5e:dc:10:e5:82:eb:f7:c8:b3:d3:e9:b5:f6:25:a2:
                    a1:59:a9:08:c6:24:13:e9:f5:00:60:06:ea:60:30:
                    3d:85:49:64:7e:80:1c:00:9e:96:8d:f7:5e:af:4b:
                    5e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DB:D2:11:B8:BF:52:E1:4B:00:BB:86:D9:9B:3F:BD:D7:F1:7E:DD
            X509v3 Authority Key Identifier:
                keyid:D4:39:AC:C5:1B:C8:AE:72:94:E3:E6:8A:83:FB:67:E0:34:B9:3F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D439ACC51BC8AE7294E3E68A83FB67E034B93F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136392e302f32342d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:f4:5d:35:61:88:c3:07:32:7f:83:01:7d:4e:1d:71:22:58:
         6a:e5:85:77:c5:a4:d1:63:7b:18:a7:5f:fb:49:d8:32:86:28:
         89:ab:88:1d:ea:b6:76:36:5d:cc:03:63:38:6f:a3:d1:c9:8d:
         f5:57:31:20:94:77:e5:46:5d:91:1c:40:2c:4a:98:fb:ab:a8:
         1c:d0:b0:e2:b1:66:3b:fd:48:f9:01:72:6e:f5:39:8d:e5:3e:
         9c:72:2e:f3:5b:e0:46:bd:41:bf:76:69:9c:31:ce:d1:bf:a6:
         a2:f6:b4:dc:69:51:c2:f1:5e:5b:3c:0e:46:2a:ee:e8:99:bb:
         4f:ed:0b:dc:89:91:bf:08:ec:92:a3:c7:18:2f:3b:e4:27:8f:
         79:64:4e:54:bf:62:4e:83:20:68:c8:63:0f:8f:ca:5f:c0:a2:
         2e:d5:60:4e:0e:d2:18:62:07:ef:a3:a7:14:28:c0:9c:67:c8:
         d5:a3:05:a9:f5:64:1d:58:0b:95:37:93:58:cb:ad:32:89:2f:
         30:80:54:2e:ba:08:a6:88:ae:10:dd:7f:87:5d:0b:ba:c4:15:
         05:48:d7:d0:13:95:2b:85:54:09:ad:bb:f8:29:7f:15:08:f9:
         2d:a8:d1:ef:4e:37:68:43:c6:45:be:8c:c0:e1:be:27:99:bd:
         44:d2:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:51:42 2025 by rpki-client