Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38372e302f32342d3234203d3e203237373831.roa
File:                     3133312e3136312e38372e302f32342d3234203d3e203237373831.roa (raw, json)
Hash identifier:          yeM/3sH6Xdl6jtExnlbAtgfemkOHdjHAJ9Y0XGbPsng=
Subject key identifier:   8D:25:C4:C7:84:6D:2F:E7:DC:0F:BA:D4:C8:3B:49:DC:BB:C3:81:82
Certificate issuer:       /CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
Certificate serial:       14BE63051E193A78DFC89465BD40BC18435FC746
Authority key identifier: CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38372e302f32342d3234203d3e203237373831.roa
Signing time:             Mon 17 Mar 2025 05:12:05 +0000
ROA not before:           Mon 17 Mar 2025 05:07:05 +0000
ROA not after:            Mon 16 Mar 2026 05:12:05 +0000
asID:                     27781
IP address blocks:        131.161.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:be:63:05:1e:19:3a:78:df:c8:94:65:bd:40:bc:18:43:5f:c7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Validity
            Not Before: Mar 17 05:07:05 2025 GMT
            Not After : Mar 16 05:12:05 2026 GMT
        Subject: CN=8D25C4C7846D2FE7DC0FBAD4C83B49DCBBC38182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:bd:21:54:ca:c3:f9:5c:34:9e:d8:f5:82:
                    79:2e:59:04:82:72:df:65:81:3e:c4:38:d6:46:06:
                    b8:b3:0e:fd:01:22:84:84:87:c1:23:a5:25:2a:6d:
                    11:5f:a4:4a:06:75:6d:bf:b5:8a:38:8b:1a:90:48:
                    7d:4c:e0:03:fc:0c:6c:a2:ab:f6:41:c1:a8:cd:ad:
                    6f:9c:70:ac:18:0e:ba:34:24:3e:42:c5:c3:1b:55:
                    08:71:cd:57:4a:22:3a:58:8b:60:22:62:f9:9f:38:
                    ab:16:b5:75:62:1e:52:4a:71:ec:c2:e9:48:f5:ad:
                    46:14:d6:a5:ee:5a:1e:eb:a0:5d:ac:4f:ec:68:40:
                    f4:02:e4:18:b2:4e:58:9d:9e:f8:7c:40:d8:ae:07:
                    ab:a7:d4:99:f5:ce:83:8a:65:23:54:37:e7:bf:07:
                    bb:ab:89:87:05:5a:47:05:20:3f:d9:e4:a9:bb:0e:
                    92:bd:29:27:70:f2:76:c0:fb:dd:54:49:a8:b6:e4:
                    ec:59:3e:57:1d:91:95:86:d4:d5:2f:bc:25:7c:52:
                    b3:6d:6c:0a:21:75:90:ef:c9:d3:64:1b:94:47:5d:
                    88:9d:52:dd:ee:16:b8:0d:a7:64:15:1d:eb:27:7e:
                    28:de:f2:08:b1:52:4e:78:91:42:d6:0a:fc:b8:f4:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:25:C4:C7:84:6D:2F:E7:DC:0F:BA:D4:C8:3B:49:DC:BB:C3:81:82
            X509v3 Authority Key Identifier:
                keyid:CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38372e302f32342d3234203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:ca:fb:70:14:1b:bb:b4:4b:4b:d4:dd:db:5a:92:ee:5d:b0:
         a1:c8:b5:39:bf:f9:47:9f:22:e5:64:23:2e:5a:ef:69:10:e7:
         86:24:99:fb:8a:f3:5c:a3:aa:e6:9b:1d:c2:b0:60:1d:20:4a:
         aa:f9:42:b3:bf:c4:38:f1:c7:1d:65:29:89:0a:a5:14:a2:66:
         d4:8b:2e:a1:3f:da:73:c4:85:0d:b1:73:af:6e:91:b6:28:b5:
         de:dc:1b:73:0c:ab:53:c0:67:be:6d:17:0a:a9:3d:6a:a0:5c:
         6c:e6:40:a4:71:ad:22:0c:f2:c8:c8:2d:dc:79:3e:3b:4d:97:
         b5:6c:12:8d:e4:46:af:53:35:8a:44:3d:35:18:93:1e:86:16:
         f1:fa:21:a7:66:df:ca:b0:30:44:00:bb:01:92:66:9b:f3:11:
         36:20:d9:01:bf:e1:18:48:79:e6:fe:01:70:bf:b3:17:0c:76:
         95:54:5f:bb:86:37:77:ea:8b:f9:d3:5f:27:c1:b5:8c:0a:bb:
         3b:21:96:eb:cf:8c:2e:df:dd:a5:5a:8c:ae:e6:ad:cd:d8:f3:
         55:3e:fb:04:01:e0:80:86:6f:63:7f:8a:24:85:f4:17:e3:a9:
         a3:a9:14:53:a4:4b:89:d9:1c:32:d6:05:68:8f:35:ab:af:53:
         7e:b1:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:30 2025 by rpki-client