Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3133312e3130382e3139322e302f32322d3234203d3e203631353132.roa
File:                     3133312e3130382e3139322e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier:          Fvj3e91u7Y0/sxzJ9MpIIMRcPIr/vFMBlcUHkT/B50g=
Subject key identifier:   89:FD:AB:BD:B5:83:45:89:05:37:54:CA:5B:C1:B8:04:15:CE:F2:2B
Certificate issuer:       /CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
Certificate serial:       597308B74E0FE6DD99AB59B79032A16D8FFCECE3
Authority key identifier: 84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3133312e3130382e3139322e302f32322d3234203d3e203631353132.roa
Signing time:             Thu 03 Apr 2025 16:35:00 +0000
ROA not before:           Thu 03 Apr 2025 16:30:00 +0000
ROA not after:            Thu 02 Apr 2026 16:35:00 +0000
asID:                     61512
IP address blocks:        131.108.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:73:08:b7:4e:0f:e6:dd:99:ab:59:b7:90:32:a1:6d:8f:fc:ec:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
        Validity
            Not Before: Apr  3 16:30:00 2025 GMT
            Not After : Apr  2 16:35:00 2026 GMT
        Subject: CN=89FDABBDB5834589053754CA5BC1B80415CEF22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:7f:3b:ef:85:d6:f0:36:b8:af:61:41:61:
                    d2:f8:57:8d:ef:6c:d1:70:31:7b:28:9c:fd:4c:f6:
                    98:9d:0a:e7:46:5b:b8:d3:94:54:e6:e6:f6:00:e2:
                    15:67:05:a3:31:d7:a1:5b:ff:dd:60:58:54:90:9e:
                    c2:a6:42:8a:d7:a5:bf:ed:96:ae:d5:01:64:0f:29:
                    3d:ee:e4:9f:8f:d9:9d:c8:3e:b1:62:d2:28:d9:9e:
                    c6:ff:81:3a:26:30:e0:7a:b6:a8:dd:98:ab:9d:d6:
                    2f:68:1c:52:52:54:65:6a:dc:07:cb:2d:37:e3:ad:
                    f5:5c:9a:26:4b:32:c1:46:8d:bc:a7:2e:26:48:ba:
                    73:a1:93:18:dc:8a:9e:c9:f6:37:b1:a2:06:77:5d:
                    f0:f4:b7:b8:00:2a:0d:35:5e:93:ef:90:10:5e:50:
                    e9:ad:10:7b:a3:5b:a3:cf:e5:6e:5c:26:24:8a:9c:
                    01:02:02:0f:d0:fc:86:80:70:63:fa:97:d6:68:25:
                    fb:6f:d4:b9:9c:b6:ed:50:7c:19:13:aa:d9:64:20:
                    b7:57:20:30:21:00:fb:70:11:19:99:ff:c4:75:e0:
                    7e:ff:df:5c:29:c2:60:5d:ae:51:5a:c4:37:45:5e:
                    6f:4a:75:5f:f6:fb:6f:4d:fa:5d:ee:1e:73:be:00:
                    42:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FD:AB:BD:B5:83:45:89:05:37:54:CA:5B:C1:B8:04:15:CE:F2:2B
            X509v3 Authority Key Identifier:
                keyid:84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3133312e3130382e3139322e302f32322d3234203d3e203631353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:c4:c7:56:e7:db:50:4d:3e:52:c4:ae:71:1d:32:2b:a7:e5:
         e6:a4:27:1a:f7:d2:81:4d:25:70:97:56:ef:f2:a0:7a:98:ce:
         96:01:07:e7:d4:c3:78:46:1e:12:75:33:7b:9a:f2:6b:c8:38:
         a5:66:cf:1a:be:97:2f:61:bb:2e:d1:ef:1c:ef:26:84:f5:bb:
         74:e7:e2:8d:d8:91:42:1e:95:2e:f7:49:7a:cf:4d:d7:09:f0:
         1d:8a:5b:6a:f5:e9:21:c6:eb:c4:9b:fb:ed:74:cf:09:ae:0e:
         c9:84:86:1f:e5:27:e5:91:6b:b2:25:f1:fa:28:e0:28:9d:fc:
         f7:6b:46:01:ea:c8:62:66:ac:92:8e:ea:74:78:e1:a3:b4:be:
         21:65:1e:b9:60:d4:46:54:73:e0:51:72:fa:7b:37:0a:68:c8:
         3f:1b:16:c5:10:57:c1:80:63:4e:e2:87:6e:d3:2f:6c:17:36:
         e2:67:15:cc:d8:73:fd:4f:78:a9:ab:35:28:5b:d7:a8:0a:ed:
         b8:e3:e2:9f:9a:2f:68:2b:c5:6c:6b:78:ea:ec:b0:49:45:8c:
         b9:ad:ec:fd:8a:dc:bf:a5:35:ba:99:22:db:a2:87:fb:91:bd:
         96:9c:e7:c2:d1:c8:de:6b:00:93:80:27:75:ba:30:3d:2e:52:
         e6:64:ea:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:29 2025 by rpki-client