Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3133312e3136312e3130312e302f32342d3234203d3e20323632313832.roa
File:                     3133312e3136312e3130312e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          WVSjD/Ld4KKSkHTF95CO4ES4I0QeDiLzRRtcYYsjiFQ=
Subject key identifier:   D1:12:3F:B6:C9:12:F7:BC:79:C6:A4:EF:C2:E8:D5:99:F6:B6:11:08
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       0EC9215D7527E210341AEBFEE56B20331A8057FF
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3133312e3136312e3130312e302f32342d3234203d3e20323632313832.roa
Signing time:             Mon 10 Feb 2025 19:09:27 +0000
ROA not before:           Mon 10 Feb 2025 19:04:27 +0000
ROA not after:            Mon 09 Feb 2026 19:09:27 +0000
asID:                     262182
IP address blocks:        131.161.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c9:21:5d:75:27:e2:10:34:1a:eb:fe:e5:6b:20:33:1a:80:57:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Feb 10 19:04:27 2025 GMT
            Not After : Feb  9 19:09:27 2026 GMT
        Subject: CN=D1123FB6C912F7BC79C6A4EFC2E8D599F6B61108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:cc:e4:21:27:88:ff:ff:c5:53:8e:67:b9:
                    c5:1f:51:29:58:be:2e:a5:a6:72:15:c1:58:13:2d:
                    1c:60:b6:9d:4d:50:b5:31:de:17:0f:7f:1a:59:27:
                    52:a5:ef:65:c1:50:89:66:92:15:11:59:8e:48:8b:
                    0c:8e:ed:fe:6c:fb:5e:1b:88:27:3e:80:67:b4:27:
                    4e:54:e7:fa:d5:3a:bf:91:94:b3:35:d4:ef:f2:af:
                    c0:73:64:62:0c:48:aa:76:6e:a1:68:6e:6a:ee:1f:
                    b8:20:49:fc:65:8b:49:c1:29:ae:94:cb:a6:db:ec:
                    e3:90:15:a5:e1:ce:4e:2d:99:82:11:fb:d8:1e:0f:
                    8b:19:6a:db:fb:b7:2d:cd:5d:08:d4:2b:e2:f9:90:
                    c2:5d:bb:2e:95:94:bc:b5:b8:ab:59:6e:bd:95:27:
                    fe:88:8f:8b:a0:b4:a5:08:ac:2e:be:f3:b9:11:c6:
                    ae:86:af:50:a7:ca:df:65:28:06:56:3d:9d:49:69:
                    0a:bd:bd:f8:f5:f8:bc:cc:88:14:4d:3d:c5:32:df:
                    23:a4:71:13:d2:97:c2:87:78:eb:45:09:06:9f:32:
                    e9:35:32:f2:a5:98:df:2f:73:45:67:82:83:d4:c7:
                    6d:42:19:74:4b:df:1b:6c:b9:e7:5e:9d:98:bc:e2:
                    6e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:12:3F:B6:C9:12:F7:BC:79:C6:A4:EF:C2:E8:D5:99:F6:B6:11:08
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3133312e3136312e3130312e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:c1:19:8c:28:54:6f:fc:ca:a5:00:af:cc:3d:72:c2:89:7b:
         84:92:53:3b:98:9b:6e:5e:11:53:82:c4:13:98:cc:01:7c:bf:
         45:11:db:7a:a6:c6:57:55:95:3a:06:af:97:7b:23:e6:e5:78:
         54:0b:0d:7c:1a:68:dc:62:95:c2:0c:a4:b6:45:c4:bb:32:84:
         1b:1b:14:90:b9:4a:1f:3e:fc:7e:94:4e:1f:ba:5e:79:76:3c:
         03:34:c1:65:a5:e2:03:8a:2f:91:a1:60:c7:d2:89:00:55:ca:
         66:15:ed:ca:fa:63:c7:2e:6f:21:5a:d0:46:69:21:5b:f9:fd:
         c8:3a:46:61:86:25:81:04:71:94:b4:e0:da:04:ab:31:cb:f5:
         4f:3b:c4:40:36:5f:16:6a:96:a8:4a:35:a4:84:74:5a:32:df:
         3f:59:d0:3f:1c:e7:4e:69:c6:98:e5:63:fc:57:d2:92:55:ce:
         d1:eb:13:75:cc:64:1a:22:b9:41:f5:60:89:b4:f6:f0:87:a7:
         af:29:f5:31:78:3a:55:8a:08:e5:d5:82:a3:13:50:9b:c4:ed:
         91:13:67:0c:ed:5a:b1:c3:89:96:31:3f:a8:7a:0d:98:a1:cb:
         d4:79:28:33:8b:09:6a:09:13:e9:71:e1:cc:e7:24:6c:0e:eb:
         ea:e0:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:16:44 2025 by rpki-client