Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231302e302f32332d3233203d3e20323635363936.roa
File:                     3133312e3139362e3231302e302f32332d3233203d3e20323635363936.roa (raw, json)
Hash identifier:          RGUHGOAtI8DqgO0BZ5HH8x9heS+MFcuaWJ0MKdNRiHg=
Subject key identifier:   91:B5:88:1A:18:C9:39:72:79:14:E0:74:1A:01:F1:23:E4:96:FD:5B
Certificate issuer:       /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial:       16463ECAF87910B8BF770189C127104AE147D8C6
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231302e302f32332d3233203d3e20323635363936.roa
Signing time:             Tue 04 Feb 2025 18:48:36 +0000
ROA not before:           Tue 04 Feb 2025 18:43:36 +0000
ROA not after:            Tue 03 Feb 2026 18:48:36 +0000
asID:                     265696
IP address blocks:        131.196.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 19:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:46:3e:ca:f8:79:10:b8:bf:77:01:89:c1:27:10:4a:e1:47:d8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
        Validity
            Not Before: Feb  4 18:43:36 2025 GMT
            Not After : Feb  3 18:48:36 2026 GMT
        Subject: CN=91B5881A18C939727914E0741A01F123E496FD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:cc:42:4b:4e:3f:2a:2f:c6:63:9b:b1:85:
                    e6:6a:fd:a1:82:b4:b6:6a:d2:46:46:49:eb:a3:21:
                    8c:58:4c:32:84:a3:b2:fa:fd:16:d6:59:00:95:c0:
                    1b:87:44:9a:9e:e4:0c:cd:ed:54:a3:ab:b6:78:9b:
                    38:ad:3e:4b:a8:c3:fe:ce:d2:6f:96:3c:3f:ff:2a:
                    6f:cf:eb:72:32:53:d8:91:08:b8:9a:ee:67:8b:e5:
                    dc:64:e0:8c:fb:cd:3f:01:0a:b2:ea:9c:b8:d0:43:
                    82:fd:d8:24:23:f4:16:76:fb:33:0f:07:db:93:c7:
                    e6:0b:87:55:1c:1f:00:0e:b6:44:3b:d5:5a:bf:29:
                    c7:b4:09:93:24:ca:fe:68:ae:41:67:26:17:f8:1c:
                    5d:43:34:fc:e0:36:df:d5:81:ce:e8:fc:bc:92:32:
                    94:7a:5e:a5:da:2a:bf:46:d2:59:52:1e:33:1a:29:
                    f7:7d:a7:23:a5:bb:b3:4e:b0:57:a1:1f:4c:bf:c6:
                    0a:09:f1:7f:fe:60:5d:4e:00:c2:ad:bf:fd:28:f5:
                    0d:b8:00:8c:2e:7e:02:de:e3:a7:a0:61:da:14:4b:
                    59:a1:58:8b:87:c8:30:aa:f9:b2:3e:bf:39:39:a7:
                    0b:db:74:48:40:c9:04:f0:5a:c8:90:51:41:0d:2c:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B5:88:1A:18:C9:39:72:79:14:E0:74:1A:01:F1:23:E4:96:FD:5B
            X509v3 Authority Key Identifier:
                keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231302e302f32332d3233203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:9a:9b:d8:de:0b:bc:a0:6b:35:82:64:80:2b:56:af:13:
         dc:0b:0f:3a:aa:ce:e9:ed:76:65:8d:f2:6b:31:a6:9a:8a:af:
         87:2e:8d:e0:40:eb:02:32:ed:06:a4:4e:c6:65:e9:1b:ad:bc:
         bc:9a:48:c4:66:c5:e7:11:22:76:47:39:19:9d:f9:51:f3:32:
         1a:ea:c1:61:4c:d8:70:13:06:8a:14:59:07:41:06:01:9d:c5:
         3c:ed:ab:73:51:a0:bb:80:98:1b:ff:83:17:4a:10:cf:93:77:
         87:f0:2a:1b:06:f8:3a:68:55:f8:f7:81:a1:18:e8:59:9e:14:
         47:42:43:64:9b:4b:cc:84:6c:c4:0a:b7:fb:ca:48:e8:f7:09:
         7b:7c:10:f4:a0:47:8e:2c:8d:d2:11:7c:4e:c6:b0:eb:d4:e6:
         f3:d5:54:e0:df:6c:7c:f3:e6:23:96:d8:0a:4d:47:52:0f:36:
         cb:13:33:c1:03:f0:da:f4:bd:8c:e5:6b:73:71:44:04:d9:17:
         8c:da:24:f6:4f:6b:65:76:05:1c:4f:dd:62:4d:4c:f8:e8:7f:
         90:2f:b9:2f:62:7b:30:76:ee:22:9b:cb:10:b5:8e:d2:6a:5e:
         f4:1a:f5:d9:7c:6f:50:42:ad:e0:8c:6e:3c:8e:9e:84:25:b2:
         69:55:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:10 2025 by rpki-client