Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/3133312e37322e3133382e302f32342d3234203d3e20323733393533.roa
File:                     3133312e37322e3133382e302f32342d3234203d3e20323733393533.roa (raw, json)
Hash identifier:          2dALEtw56Az1FhPka9rqXHuT0QttK5olewK/LDfITdE=
Subject key identifier:   35:EB:C9:F3:F7:8D:D6:1C:3D:DE:ED:7C:97:64:37:09:2C:8B:D7:33
Certificate issuer:       /CN=AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192
Certificate serial:       33907F9B867448CF7E48996F32BDC9CAB93681AB
Authority key identifier: AD:0A:C5:C8:18:83:14:F9:3F:8D:AB:29:61:A0:B2:1B:0B:3B:21:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/3133312e37322e3133382e302f32342d3234203d3e20323733393533.roa
Signing time:             Thu 17 Jul 2025 19:45:00 +0000
ROA not before:           Thu 17 Jul 2025 19:40:00 +0000
ROA not after:            Thu 16 Jul 2026 19:45:00 +0000
asID:                     273953
IP address blocks:        131.72.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 23:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:90:7f:9b:86:74:48:cf:7e:48:99:6f:32:bd:c9:ca:b9:36:81:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192
        Validity
            Not Before: Jul 17 19:40:00 2025 GMT
            Not After : Jul 16 19:45:00 2026 GMT
        Subject: CN=35EBC9F3F78DD61C3DDEED7C976437092C8BD733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:98:a7:a1:d8:0b:04:a5:f2:7e:57:0e:e4:
                    a7:12:4d:43:4b:08:81:26:21:c7:a0:cc:00:a7:e3:
                    d6:3e:02:58:63:ea:8f:49:d0:5a:16:f8:df:60:04:
                    de:09:54:ac:2d:b6:30:5b:3e:de:93:85:70:3e:87:
                    1c:fd:6b:c4:e8:87:5e:c3:8e:4f:67:c1:84:2b:8a:
                    a0:d5:53:95:41:84:eb:fc:0b:ca:7e:6d:c9:19:af:
                    e6:1a:a7:0d:64:d2:e0:66:4c:2b:60:7f:d6:4e:7e:
                    d1:b8:e3:5a:70:cf:68:c5:27:81:55:32:cd:99:c4:
                    a2:ba:cc:03:00:db:03:b5:4c:0b:bd:43:05:4b:c5:
                    5b:09:e7:15:43:03:09:e7:84:22:38:a4:1b:93:38:
                    4d:3f:a2:5a:3d:67:2e:51:ec:f4:34:92:49:58:66:
                    3b:43:db:73:ad:f0:42:6c:d9:13:e8:e4:4f:ef:f5:
                    63:c7:6d:79:50:f0:fe:cd:11:a6:54:39:fa:93:76:
                    1a:72:e6:4c:d8:59:0f:e0:a5:ea:d6:bc:5c:ee:fb:
                    fc:96:65:b6:b7:ec:57:27:7b:73:2f:63:a9:a3:e2:
                    8d:7b:5e:0d:5d:56:20:10:dd:7a:b5:6b:63:ac:fe:
                    a5:3b:2f:2f:44:da:a2:e0:10:6f:31:35:ee:ef:d5:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EB:C9:F3:F7:8D:D6:1C:3D:DE:ED:7C:97:64:37:09:2C:8B:D7:33
            X509v3 Authority Key Identifier:
                keyid:AD:0A:C5:C8:18:83:14:F9:3F:8D:AB:29:61:A0:B2:1B:0B:3B:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/3133312e37322e3133382e302f32342d3234203d3e20323733393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e9:ca:ef:0d:b6:02:b2:95:81:b4:e3:05:04:02:1d:46:98:
         94:79:be:e4:fd:42:45:52:fd:79:f2:06:54:dc:1e:5b:86:25:
         79:b4:89:07:04:fa:9d:cd:6b:b7:f2:e6:90:1c:63:e5:b9:86:
         7d:a2:88:91:e9:3b:e3:fc:ef:3b:c2:69:02:06:84:ee:ef:dd:
         9e:9c:fd:29:db:5d:9d:aa:21:68:0e:6a:4e:bc:46:5b:34:90:
         a6:72:48:de:e8:94:54:70:2d:53:8e:4e:f6:7f:b0:82:da:8c:
         d1:d1:b6:76:1c:b5:c6:17:83:bb:60:fa:42:fe:9d:56:a8:3c:
         79:e3:38:33:88:dd:b1:65:6b:ec:25:49:8f:7d:1c:d3:26:23:
         4f:3f:d4:54:43:06:3a:a5:5d:1d:e9:ce:6a:70:fa:a0:46:7a:
         12:79:7a:e3:0c:25:d4:51:90:52:95:bb:21:82:d0:31:3f:15:
         d4:01:9a:e6:b9:3b:27:52:f1:28:60:5e:3d:1a:93:68:44:bf:
         bd:d7:80:0f:2b:49:4d:bf:23:89:39:82:d3:9c:29:74:ef:0f:
         b1:96:e6:b0:5d:a7:8a:52:31:c8:bf:e9:9b:9b:f4:af:d0:88:
         a2:62:d3:fc:3c:37:69:9c:3a:07:6d:fd:b5:cc:a1:40:17:64:
         9e:3a:40:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 02:56:09 2025 by rpki-client