Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38342e302f32332d3233203d3e203237373831.roa
File:                     3133312e3136312e38342e302f32332d3233203d3e203237373831.roa (raw, json)
Hash identifier:          ZDviBTdkSwVKricZ5QWjXa9XFOM7ztYXmCjmsmXprjE=
Subject key identifier:   D5:62:47:39:DF:27:BA:FB:E9:88:C4:A2:26:07:55:F9:59:11:1D:AB
Certificate issuer:       /CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
Certificate serial:       7ABE43CBDADD07669B0EC2C9DDE4556CD07C54D4
Authority key identifier: CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38342e302f32332d3233203d3e203237373831.roa
Signing time:             Mon 17 Mar 2025 05:12:04 +0000
ROA not before:           Mon 17 Mar 2025 05:07:04 +0000
ROA not after:            Mon 16 Mar 2026 05:12:04 +0000
asID:                     27781
IP address blocks:        131.161.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:be:43:cb:da:dd:07:66:9b:0e:c2:c9:dd:e4:55:6c:d0:7c:54:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Validity
            Not Before: Mar 17 05:07:04 2025 GMT
            Not After : Mar 16 05:12:04 2026 GMT
        Subject: CN=D5624739DF27BAFBE988C4A2260755F959111DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3b:e2:3f:b2:ae:e8:1e:52:31:df:c7:cf:e2:
                    eb:c1:52:0b:84:34:cb:00:ca:13:85:2e:8f:57:a8:
                    cb:fe:c0:d0:57:1c:91:5b:8e:df:51:8a:b4:f6:80:
                    51:e2:b2:1b:1f:05:f4:65:d4:bd:34:52:f8:7a:fc:
                    eb:26:fb:db:0e:90:39:a8:44:99:9a:be:d2:f8:a2:
                    7f:a7:91:62:77:87:a7:b8:29:ac:b3:18:0d:51:7a:
                    e3:9a:2d:51:8d:b0:4a:11:56:98:cb:61:d1:0e:56:
                    14:45:5b:29:3a:ee:5f:43:6b:d1:3a:88:f0:72:05:
                    c2:6c:c8:ac:8e:55:91:f1:e9:bd:e6:5e:ad:ae:5c:
                    43:70:57:a9:b5:39:a3:d5:d5:9e:11:c9:ed:8a:8d:
                    08:c9:fb:ac:a7:f9:40:e6:02:cb:f4:d9:52:66:fe:
                    ac:2a:e1:af:0a:54:cd:fd:c9:e1:d3:4c:a2:4e:84:
                    f4:19:ef:4a:f6:e1:73:95:69:55:62:ec:f5:2d:c9:
                    95:9e:c2:e8:af:70:cd:27:93:da:01:a1:72:14:da:
                    f3:e5:6c:71:03:52:4c:77:26:34:e5:c8:92:0a:51:
                    e2:4b:dc:27:c1:98:e8:45:96:74:d5:e4:de:1f:e2:
                    7a:5a:4a:de:77:3a:36:fc:6c:71:47:f8:6e:bb:7b:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:62:47:39:DF:27:BA:FB:E9:88:C4:A2:26:07:55:F9:59:11:1D:AB
            X509v3 Authority Key Identifier:
                keyid:CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38342e302f32332d3233203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:8a:14:cc:9c:3f:ff:ef:04:a8:bc:d9:70:88:a1:a8:0f:61:
         ca:5e:71:85:19:81:6a:fc:1c:80:b4:0a:52:d2:72:d1:86:91:
         f5:8d:a3:47:e2:e9:3a:d9:67:a2:c3:5c:98:d0:d7:5f:16:78:
         47:b4:a3:cb:11:70:b6:5e:93:79:19:04:04:4e:38:aa:c1:53:
         b8:ad:60:c2:6d:f8:31:1b:d4:bd:9f:c1:a2:4b:c9:50:06:ee:
         46:e0:a9:e3:1c:72:9a:f0:13:8b:fa:2f:07:90:bd:5a:0b:cd:
         cb:10:cd:b2:36:67:b3:4b:0d:3a:8c:a7:b1:ad:5c:f4:2e:b1:
         d3:42:09:68:a3:ec:5e:3f:1f:56:14:12:7f:01:26:65:c9:87:
         ed:b7:63:fc:75:71:e5:e0:c3:21:a6:fd:d0:bd:e6:1f:f5:43:
         c2:9f:c5:91:be:a6:20:c5:33:fc:72:1d:75:4a:d8:87:23:7d:
         80:63:ca:62:1a:44:30:a0:be:8d:cb:d8:a3:1a:f2:64:8c:89:
         3d:07:40:c8:9d:ea:47:0e:a1:03:32:1f:d4:02:46:f5:a9:42:
         81:40:17:1a:0c:bd:7f:9c:ca:a4:c9:43:70:f9:6c:68:74:a6:
         36:f5:5a:22:6d:e2:9d:eb:4a:c5:b5:cd:48:6b:d8:13:b5:19:
         69:71:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:50 2025 by rpki-client