Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/3133312e3232312e302e302f32322d3232203d3e203631343936.roa
File:                     3133312e3232312e302e302f32322d3232203d3e203631343936.roa (raw, json)
Hash identifier:          FJJAvavch3oxyHI+2ZF7ESDQb8zZktZBw3qhZuPZAn4=
Subject key identifier:   FE:9A:B7:9E:93:BA:49:F9:21:A5:E9:FE:06:D4:DC:DD:88:CB:F1:AA
Certificate issuer:       /CN=5B9F0C6DD937A790D2253F464556FB7F19BBAF49
Certificate serial:       15808E50AF0D39860017186B937AA84EF0895458
Authority key identifier: 5B:9F:0C:6D:D9:37:A7:90:D2:25:3F:46:45:56:FB:7F:19:BB:AF:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/3133312e3232312e302e302f32322d3232203d3e203631343936.roa
Signing time:             Tue 04 Feb 2025 18:19:08 +0000
ROA not before:           Tue 04 Feb 2025 18:14:08 +0000
ROA not after:            Tue 03 Feb 2026 18:19:08 +0000
asID:                     61496
IP address blocks:        131.221.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 08:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:80:8e:50:af:0d:39:86:00:17:18:6b:93:7a:a8:4e:f0:89:54:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9F0C6DD937A790D2253F464556FB7F19BBAF49
        Validity
            Not Before: Feb  4 18:14:08 2025 GMT
            Not After : Feb  3 18:19:08 2026 GMT
        Subject: CN=FE9AB79E93BA49F921A5E9FE06D4DCDD88CBF1AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:4b:a0:c8:16:15:0f:c1:73:f9:83:4c:d1:
                    ec:cf:ed:01:f2:4a:9d:bb:6e:7e:3e:97:4d:35:67:
                    f1:60:d1:52:59:be:2e:91:5b:eb:dc:b6:b9:d1:9d:
                    75:dc:81:60:9a:a9:74:4b:60:ce:9c:b9:32:a2:24:
                    6c:da:f6:47:24:e1:9b:57:15:60:2a:48:8b:1e:7e:
                    b3:6a:ca:99:ee:90:33:1b:5c:b6:52:8d:d1:4e:a4:
                    8c:fb:09:a1:74:5a:2b:55:0e:4b:37:35:ba:c8:f6:
                    2e:2c:e7:01:f8:76:39:db:72:d3:78:62:95:c6:1d:
                    da:fd:36:3a:d7:0b:26:d1:0d:2b:58:ad:84:cb:0e:
                    c3:c2:64:d6:35:a9:87:46:ba:ce:fa:f7:4c:1f:b6:
                    82:e5:ff:10:47:e8:75:03:99:c6:32:60:b4:ec:b9:
                    71:89:e3:a7:c8:c4:f1:91:55:13:ba:08:cd:fa:6e:
                    ed:67:ba:21:e6:77:4b:d3:8b:f4:6b:93:b9:54:26:
                    05:df:b4:15:1d:74:53:9b:de:9d:1f:1f:92:7a:91:
                    6e:9a:e2:51:62:6e:7c:35:70:35:95:d7:59:a5:cf:
                    bc:13:68:fd:e5:c0:93:84:9d:13:f9:3c:14:25:e7:
                    e4:77:d4:aa:d3:2b:ff:04:63:41:eb:20:2a:47:0a:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9A:B7:9E:93:BA:49:F9:21:A5:E9:FE:06:D4:DC:DD:88:CB:F1:AA
            X509v3 Authority Key Identifier:
                keyid:5B:9F:0C:6D:D9:37:A7:90:D2:25:3F:46:45:56:FB:7F:19:BB:AF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/3133312e3232312e302e302f32322d3232203d3e203631343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:26:c0:a6:83:ea:00:e4:a8:62:7d:4e:f2:c5:59:f6:d6:25:
         79:03:34:2e:dd:b0:29:8c:3b:c0:83:04:7f:34:8e:f3:ae:fa:
         f2:74:c5:d0:77:7f:22:30:29:93:b7:e5:88:71:4c:a8:1f:68:
         00:2c:1f:52:f7:30:1c:53:c2:37:a2:e9:ac:73:c2:a2:e1:25:
         80:ac:7a:79:0b:f3:80:50:39:89:c1:25:64:f2:ac:cd:fd:5c:
         8b:0f:70:b7:66:cc:f8:d9:d9:a3:07:7a:e5:1d:d3:7b:aa:52:
         3c:29:a2:4c:da:81:33:1b:2b:ff:6e:dc:07:0d:8b:10:ba:74:
         83:3a:55:90:42:c1:26:67:d1:e7:ac:0d:38:9d:84:fe:d3:93:
         19:ad:9a:92:83:86:03:57:66:ed:68:e0:51:6e:cd:55:25:f7:
         df:46:bf:ee:bc:45:60:f6:10:1c:a5:16:1f:25:d6:26:fe:7f:
         80:5d:31:ed:39:d0:26:4a:0f:a7:d7:6b:b2:92:48:aa:f6:10:
         bf:59:fa:4e:e8:b3:d3:f2:5e:1a:b4:db:6b:c5:2b:93:fa:68:
         6f:a9:20:e4:02:f8:a1:fd:08:2b:f3:15:5f:ac:6e:55:bd:a7:
         9b:97:69:18:bd:92:01:95:28:0a:12:6f:ac:b0:50:3f:5d:e4:
         b3:8a:05:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:09:52 2025 by rpki-client