Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/3133312e37322e3133382e302f32342d3234203d3e20323732393738.roa
File:                     3133312e37322e3133382e302f32342d3234203d3e20323732393738.roa (raw, json)
Hash identifier:          JL+0cq6YGKZ/hkboVCRUotL5utduvQcoSDLmd9MSioY=
Subject key identifier:   D5:A8:55:D7:9B:70:BF:02:93:D1:2C:1B:F3:8F:22:49:B3:06:46:D7
Certificate issuer:       /CN=AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192
Certificate serial:       1D8CC0B40FD311D29F79181DCEC3809E892C2D52
Authority key identifier: AD:0A:C5:C8:18:83:14:F9:3F:8D:AB:29:61:A0:B2:1B:0B:3B:21:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/3133312e37322e3133382e302f32342d3234203d3e20323732393738.roa
Signing time:             Tue 04 Feb 2025 18:42:13 +0000
ROA not before:           Tue 04 Feb 2025 18:37:13 +0000
ROA not after:            Tue 03 Feb 2026 18:42:13 +0000
asID:                     272978
IP address blocks:        131.72.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 03:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8c:c0:b4:0f:d3:11:d2:9f:79:18:1d:ce:c3:80:9e:89:2c:2d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192
        Validity
            Not Before: Feb  4 18:37:13 2025 GMT
            Not After : Feb  3 18:42:13 2026 GMT
        Subject: CN=D5A855D79B70BF0293D12C1BF38F2249B30646D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:21:30:12:93:c9:c7:97:66:51:5c:57:b4:
                    84:17:13:d9:fe:05:ce:58:6f:b4:be:66:fa:fb:d7:
                    31:0f:71:6f:47:0e:bc:0d:2b:76:5f:0c:86:74:cc:
                    7e:96:ee:8b:83:08:c5:40:c1:bb:88:6e:4b:6d:34:
                    b9:e6:d7:ac:a1:7c:fa:cd:92:29:bf:e5:ec:a9:ba:
                    8f:de:1e:58:94:22:32:ff:8c:9e:04:36:09:04:b5:
                    6e:92:e0:20:aa:97:c5:63:fd:6f:e4:44:69:b2:80:
                    09:6e:3e:5f:5f:54:7c:c9:eb:29:94:0a:52:99:f7:
                    1a:11:20:f7:79:b8:38:0b:ec:22:fa:6a:88:8a:32:
                    5a:90:5b:e0:13:6e:b1:f5:eb:ce:99:ee:75:b3:62:
                    0a:c4:90:e3:09:b0:39:1c:17:07:da:56:e9:f9:59:
                    97:c0:8a:f4:48:41:cd:bf:da:d9:47:ea:97:5b:0c:
                    2f:a0:bb:55:0b:43:ef:ef:da:c7:43:94:c6:9a:19:
                    b6:32:ba:29:d4:2d:dc:01:a8:81:c9:82:75:01:8e:
                    49:9c:fb:21:e7:d0:4f:81:92:df:da:42:58:fb:f3:
                    96:2b:33:7c:c7:95:c8:c1:c0:84:26:1f:b9:6c:d8:
                    f4:71:dd:e5:e5:ec:48:3b:6f:e8:b9:9f:cb:32:e0:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A8:55:D7:9B:70:BF:02:93:D1:2C:1B:F3:8F:22:49:B3:06:46:D7
            X509v3 Authority Key Identifier:
                keyid:AD:0A:C5:C8:18:83:14:F9:3F:8D:AB:29:61:A0:B2:1B:0B:3B:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/3133312e37322e3133382e302f32342d3234203d3e20323732393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:e5:d0:b3:43:30:77:80:4d:e4:f0:f7:77:d8:11:a4:a7:7d:
         20:8a:53:01:8e:be:8a:32:1a:08:ee:64:bd:19:51:8c:c0:f5:
         30:65:e0:46:a1:22:a2:3f:96:ed:8f:d6:11:ec:6f:3a:75:d3:
         96:81:51:3d:04:30:34:b2:2c:1b:78:57:ee:01:7a:d6:0b:7d:
         e6:2d:de:34:a6:63:58:51:ec:3f:63:08:14:a6:6c:4e:76:ba:
         39:47:20:dd:e1:ef:1a:f3:65:9d:8a:4f:0f:b5:b9:95:5a:dd:
         7e:85:20:32:04:7c:4a:5a:01:7d:2a:fb:74:8b:9e:98:1c:17:
         09:ee:07:cb:2e:39:1c:97:fc:a4:86:1b:1b:b3:5d:73:4f:96:
         94:ee:e4:9f:32:ea:4c:4a:21:0c:65:26:38:e8:2b:46:a2:fe:
         19:19:99:e6:d2:22:89:ec:95:b5:f1:0e:f7:34:5c:3d:4b:d6:
         86:8a:3c:40:d7:dc:c7:8b:5e:0c:4e:fd:9f:aa:0c:fe:fd:3d:
         d8:6b:c9:30:0a:a1:07:61:89:4d:61:ce:9f:c6:ba:14:f7:f8:
         b3:b0:b8:22:c4:0c:8a:58:f1:ee:e5:74:a0:41:23:29:3f:ee:
         87:64:c4:d6:fa:6c:53:17:dd:0e:48:74:9a:c9:6a:74:d5:4a:
         2b:2e:81:86
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHYzAtA/TEdKfeRgdzsOAnoksLVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQwQUM1QzgxODgzMTRGOTNGOERBQjI5NjFBMEIyMUIw
QjNCMjE5MjAeFw0yNTAyMDQxODM3MTNaFw0yNjAyMDMxODQyMTNaMDMxMTAvBgNV
BAMTKEQ1QTg1NUQ3OUI3MEJGMDI5M0QxMkMxQkYzOEYyMjQ5QjMwNjQ2RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrjiEwEpPJx5dmUVxXtIQXE9n+
Bc5Yb7S+Zvr71zEPcW9HDrwNK3ZfDIZ0zH6W7ouDCMVAwbuIbkttNLnm16yhfPrN
kim/5eypuo/eHliUIjL/jJ4ENgkEtW6S4CCql8Vj/W/kRGmygAluPl9fVHzJ6ymU
ClKZ9xoRIPd5uDgL7CL6aoiKMlqQW+ATbrH1686Z7nWzYgrEkOMJsDkcFwfaVun5
WZfAivRIQc2/2tlH6pdbDC+gu1ULQ+/v2sdDlMaaGbYyuinULdwBqIHJgnUBjkmc
+yHn0E+Bkt/aQlj785YrM3zHlcjBwIQmH7ls2PRx3eXl7Eg7b+i5n8sy4MZ5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1ahV15twvwKT0Swb848iSbMGRtcwHwYDVR0j
BBgwFoAUrQrFyBiDFPk/jaspYaCyGws7IZIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUEyRUJCNjg3MTk1RkQ0OTg0NEUxRDBEMzExNUU5MkNE
QTYxMDNCMzk5NEIwRDYzMDNEMTZCMTc5OUIzMzdCLzAvQUQwQUM1QzgxODgzMTRG
OTNGOERBQjI5NjFBMEIyMUIwQjNCMjE5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BRDBBQzVDODE4ODMxNEY5M0Y4
REFCMjk2MUEwQjIxQjBCM0IyMTkyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFBMkVCQjY4NzE5NUZENDk4NDRFMUQwRDMxMTVFOTJDREE2MTAzQjM5
OTRCMEQ2MzAzRDE2QjE3OTlCMzM3Qi8wLzMxMzMzMTJlMzczMjJlMzEzMzM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMyMzkzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg0iK
MA0GCSqGSIb3DQEBCwUAA4IBAQAA5dCzQzB3gE3k8Pd32BGkp30gilMBjr6KMhoI
7mS9GVGMwPUwZeBGoSKiP5btj9YR7G86ddOWgVE9BDA0siwbeFfuAXrWC33mLd40
pmNYUew/YwgUpmxOdro5RyDd4e8a82Wdik8PtbmVWt1+hSAyBHxKWgF9Kvt0i56Y
HBcJ7gfLLjkcl/ykhhsbs11zT5aU7uSfMupMSiEMZSY46CtGov4ZGZnm0iKJ7JW1
8Q73NFw9S9aGijxA19zHi14MTv2fqgz+/T3Ya8kwCqEHYYlNYc6fxroU9/izsLgi
xAyKWPHu5XSgQSMpP+6HZMTW+mxTF90OSHSayWp01UorLoGG
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:48:28 2025 by rpki-client