Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3133312e3130382e34302e302f32322d3234203d3e203532343338.roa
File:                     3133312e3130382e34302e302f32322d3234203d3e203532343338.roa (raw, json)
Hash identifier:          eQmdI0blGvrXUb83d4G3Z9YgzFwZuZVIVdb/2tz/L4g=
Subject key identifier:   59:F7:EB:4A:82:40:93:6A:07:50:08:28:54:02:DF:FF:3D:67:BC:00
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       14B750273CE56EEFED8886E12D15E888767C1708
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3133312e3130382e34302e302f32322d3234203d3e203532343338.roa
Signing time:             Sun 08 Jun 2025 15:21:15 +0000
ROA not before:           Sun 08 Jun 2025 15:16:15 +0000
ROA not after:            Sun 07 Jun 2026 15:21:15 +0000
asID:                     52438
IP address blocks:        131.108.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 07:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b7:50:27:3c:e5:6e:ef:ed:88:86:e1:2d:15:e8:88:76:7c:17:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Jun  8 15:16:15 2025 GMT
            Not After : Jun  7 15:21:15 2026 GMT
        Subject: CN=59F7EB4A8240936A075008285402DFFF3D67BC00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:58:03:3c:9a:6b:c8:b6:ed:ee:74:f1:17:f8:
                    c4:29:0c:1b:95:7d:06:f1:e1:36:53:d2:b9:c8:f6:
                    de:25:26:9d:35:b7:1e:a5:8a:6d:70:b6:76:0c:09:
                    4d:6a:8e:b7:58:96:41:b1:8c:d8:19:9d:7f:41:ca:
                    f2:4c:94:06:ab:6e:4e:f6:34:0e:01:70:6a:4d:3a:
                    2b:b7:79:8f:c1:37:28:0b:6e:3d:fd:5d:86:7e:11:
                    f0:76:dc:0d:81:85:ab:f7:74:a1:97:c4:d2:63:58:
                    c1:26:88:5f:34:8d:25:8b:74:e3:6d:e5:ed:37:9a:
                    36:1c:69:24:d5:54:05:9a:8f:72:ad:8f:1f:49:16:
                    d2:82:82:50:60:71:ea:9c:2e:bf:2c:89:6e:8f:a3:
                    37:1a:92:c9:f6:17:a5:79:e9:b1:43:72:64:d4:2f:
                    12:9c:43:cc:de:f3:fe:d7:3b:b9:5d:2c:50:df:dd:
                    e7:93:ff:21:c6:dd:51:5d:1b:2e:58:86:49:ba:ba:
                    f4:37:9e:e3:d8:91:71:cb:ce:8d:67:27:2d:a6:2d:
                    8f:fa:b6:75:8c:e0:7d:49:24:47:9d:a0:1c:3a:b1:
                    bd:d8:63:ab:e9:58:c9:1d:71:e6:7f:8e:2f:69:3d:
                    51:ae:0b:23:ac:6a:da:18:da:f1:08:2f:19:09:21:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F7:EB:4A:82:40:93:6A:07:50:08:28:54:02:DF:FF:3D:67:BC:00
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3133312e3130382e34302e302f32322d3234203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:49:d4:c2:2f:d6:84:14:4a:4c:f4:15:ff:8f:2c:08:9f:
         6b:02:0c:a1:2e:75:f3:de:fa:1d:ee:95:f0:4a:ab:58:64:96:
         64:94:3f:8e:71:2e:4d:2c:bb:ed:98:a1:d1:7f:73:00:0f:54:
         bd:94:44:33:3c:69:0c:f8:9d:14:80:90:4d:cc:2a:16:0f:e3:
         81:1e:3c:3d:75:f4:24:3c:9d:de:77:98:75:92:8c:44:4e:47:
         c7:ea:fc:8c:de:fb:d8:5b:7d:b5:64:af:02:c9:8c:8f:47:c1:
         82:56:3d:92:d9:a0:40:c7:28:81:f0:c6:00:8c:cc:a8:14:b5:
         bd:95:89:69:84:f2:b4:6e:01:1b:6a:1c:3f:14:35:df:c5:86:
         46:8f:a5:27:cf:b9:c8:7c:f4:ed:35:34:44:d5:ae:e8:12:7a:
         81:b0:25:33:8c:be:0d:f2:b3:a6:33:41:97:3c:63:6f:d5:10:
         b4:bf:b3:dc:4d:b2:91:ec:0d:92:4d:67:7a:3b:87:30:01:0d:
         9d:d5:ef:0d:03:ba:bc:c8:2e:67:a4:54:85:ad:70:9b:75:e6:
         f9:53:d8:69:9b:32:1f:2c:8c:ac:6e:25:cd:e9:7b:7b:a2:a5:
         94:8a:71:b1:40:29:a5:f8:5d:2d:49:2c:95:44:04:5a:1f:a0:
         f5:d6:a1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:40:58 2025 by rpki-client