Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/3133312e302e3130382e302f32322d3234203d3e20323637393036.roa
File:                     3133312e302e3130382e302f32322d3234203d3e20323637393036.roa (raw, json)
Hash identifier:          Qbc5Z/NBPbKgUTLetdizz7TcTrk/f/JWDm9YVQ5haAs=
Subject key identifier:   E7:84:E2:E8:91:53:26:C0:D9:D6:14:90:B8:A5:9C:B4:B4:57:F0:98
Certificate issuer:       /CN=4C23F5AA03BB1AFD7BAEE8E36D98415754948835
Certificate serial:       29E86834DCEFE3A73D85DE04A190D700F5524E75
Authority key identifier: 4C:23:F5:AA:03:BB:1A:FD:7B:AE:E8:E3:6D:98:41:57:54:94:88:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/3133312e302e3130382e302f32322d3234203d3e20323637393036.roa
Signing time:             Fri 14 Feb 2025 22:09:50 +0000
ROA not before:           Fri 14 Feb 2025 22:04:50 +0000
ROA not after:            Fri 13 Feb 2026 22:09:50 +0000
asID:                     267906
IP address blocks:        131.0.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e8:68:34:dc:ef:e3:a7:3d:85:de:04:a1:90:d7:00:f5:52:4e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C23F5AA03BB1AFD7BAEE8E36D98415754948835
        Validity
            Not Before: Feb 14 22:04:50 2025 GMT
            Not After : Feb 13 22:09:50 2026 GMT
        Subject: CN=E784E2E8915326C0D9D61490B8A59CB4B457F098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:05:ce:b8:ca:40:2a:07:4a:47:e0:8b:39:
                    de:cc:fb:f1:8e:e7:12:e0:47:83:de:f1:a9:af:7a:
                    3a:f9:1e:47:4a:01:5f:66:3a:4a:20:52:6e:95:7c:
                    f3:54:fe:47:13:1b:56:36:c2:9b:0a:d0:b4:b3:c8:
                    6c:fc:33:6f:b8:91:b9:b2:4a:f6:73:ec:af:d3:32:
                    34:72:e1:11:03:82:55:29:6c:f5:bf:d0:0f:36:3f:
                    3d:4e:6d:2d:5b:02:84:55:96:14:10:f3:8b:60:53:
                    73:fa:4c:14:f6:42:d2:8d:f3:62:5a:8d:36:6b:a5:
                    11:e5:51:27:ae:66:1a:bb:c6:2e:3b:96:f4:10:04:
                    a6:a8:2e:85:5b:b9:5f:d5:b6:04:17:92:dd:4b:2a:
                    7c:89:a1:7f:32:15:6d:8a:3e:59:e9:0d:ab:66:4b:
                    ce:d2:85:7c:eb:a8:c5:00:4b:18:98:dc:69:b7:ae:
                    93:ba:38:ef:10:27:2e:42:e8:57:5d:a6:e0:80:d6:
                    86:18:8a:18:0f:9d:2e:8f:0b:37:48:17:0a:9b:19:
                    6f:2a:c1:02:2b:b7:e2:6f:b4:20:31:50:35:c1:3a:
                    df:72:34:68:0e:2d:6b:9f:54:d7:7f:60:fa:69:ae:
                    4d:10:c5:70:94:29:14:0d:c9:e3:9b:64:c0:b5:41:
                    ee:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:84:E2:E8:91:53:26:C0:D9:D6:14:90:B8:A5:9C:B4:B4:57:F0:98
            X509v3 Authority Key Identifier:
                keyid:4C:23:F5:AA:03:BB:1A:FD:7B:AE:E8:E3:6D:98:41:57:54:94:88:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/3133312e302e3130382e302f32322d3234203d3e20323637393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:4c:05:02:2f:52:a1:30:4a:23:f9:7a:94:73:1a:4b:14:bd:
         bb:f4:06:b5:25:e6:57:51:93:73:5b:7d:16:9b:40:20:09:ef:
         79:96:01:0d:db:a7:53:76:f0:a2:bb:41:e9:1c:c6:0d:b2:5d:
         72:38:3e:52:75:44:a1:08:4f:de:96:ec:c9:7c:68:83:9e:ed:
         7a:e2:ca:e8:d4:b1:e8:65:97:91:be:f5:fc:e0:c1:6c:6c:bc:
         58:ef:90:d2:78:64:96:c2:9a:83:65:18:65:05:ad:62:a1:05:
         2e:46:e7:77:ea:e7:d2:5f:0a:99:d9:2d:67:41:65:69:c0:83:
         2d:b2:74:01:59:d2:ac:cc:39:da:6a:32:a7:86:80:b1:ea:ea:
         72:89:98:a1:65:21:10:c0:67:7e:a2:de:26:6c:8d:0e:88:bb:
         0c:dd:7e:67:7b:fb:af:5e:e8:f2:93:93:91:97:f0:af:75:9d:
         0b:ac:ac:83:ba:8a:29:30:d0:e6:f2:ad:dc:23:6c:18:68:88:
         1b:5c:05:a9:84:79:ae:34:7a:b6:ae:d8:5b:22:99:d5:43:f8:
         38:5c:55:d9:df:61:63:c3:96:81:3f:ae:da:51:99:73:ef:34:
         fc:79:f6:46:cf:c3:5a:5c:0a:9e:78:be:05:c0:cf:08:be:3a:
         3f:ba:d5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:39 2025 by rpki-client