Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/3133312e3232312e32342e302f32322d3234203d3e203237393330.roa
File:                     3133312e3232312e32342e302f32322d3234203d3e203237393330.roa (raw, json)
Hash identifier:          Dc7aS8RlD9Fqt6Ty/q//eAedZTLcLQabEL2aaNNYrCc=
Subject key identifier:   12:A2:B5:4A:28:48:6C:84:46:C8:6A:3E:57:50:FC:4D:13:E5:9A:B6
Certificate issuer:       /CN=B351C9CE7CE0D4DEB6D594AC423842D3729A0807
Certificate serial:       7B933D4A85503617FA6DB38EE4B52CBF134C38D2
Authority key identifier: B3:51:C9:CE:7C:E0:D4:DE:B6:D5:94:AC:42:38:42:D3:72:9A:08:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/3133312e3232312e32342e302f32322d3234203d3e203237393330.roa
Signing time:             Tue 04 Feb 2025 18:04:38 +0000
ROA not before:           Tue 04 Feb 2025 17:59:38 +0000
ROA not after:            Tue 03 Feb 2026 18:04:38 +0000
asID:                     27930
IP address blocks:        131.221.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:93:3d:4a:85:50:36:17:fa:6d:b3:8e:e4:b5:2c:bf:13:4c:38:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B351C9CE7CE0D4DEB6D594AC423842D3729A0807
        Validity
            Not Before: Feb  4 17:59:38 2025 GMT
            Not After : Feb  3 18:04:38 2026 GMT
        Subject: CN=12A2B54A28486C8446C86A3E5750FC4D13E59AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4d:3a:3e:7c:c9:a9:c8:88:c5:29:99:cc:b5:
                    89:b5:43:34:8b:3c:02:86:49:de:b5:a8:a0:89:86:
                    2a:d3:be:c1:39:04:41:d5:ab:12:4e:19:21:e3:b9:
                    94:a6:3c:18:98:7f:ca:00:1a:31:7a:30:a6:43:d2:
                    52:2d:72:2f:1d:24:ca:27:4d:4b:36:0b:68:db:fe:
                    9b:52:98:54:6e:2d:23:ba:de:2e:c7:6c:6a:83:9f:
                    4b:d8:6b:f7:0b:53:e7:a1:56:d3:9c:ea:b9:a5:b1:
                    f8:43:8c:07:1b:07:ae:4d:09:5e:f1:be:a2:24:48:
                    d0:ba:ec:ac:10:8b:05:f6:d4:80:85:d5:1f:f3:b2:
                    a2:32:c0:f7:1d:42:1a:70:10:23:fb:a5:44:28:f8:
                    68:f9:2a:df:6f:44:d5:4f:44:ca:9a:94:3c:a1:45:
                    c5:32:d0:b7:76:29:82:2c:34:0f:69:63:ed:6b:db:
                    77:2e:b8:dc:58:f1:df:93:e3:67:7f:87:e6:71:99:
                    68:ff:6e:11:8b:30:02:64:75:43:6d:33:5f:e6:20:
                    87:bc:4d:d1:de:25:46:5e:4b:24:01:b2:8f:75:64:
                    aa:65:31:2d:4c:3b:5d:46:56:68:79:ad:35:64:51:
                    79:15:ff:8c:8c:f2:e0:e1:17:41:1d:0e:c5:0e:94:
                    83:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A2:B5:4A:28:48:6C:84:46:C8:6A:3E:57:50:FC:4D:13:E5:9A:B6
            X509v3 Authority Key Identifier:
                keyid:B3:51:C9:CE:7C:E0:D4:DE:B6:D5:94:AC:42:38:42:D3:72:9A:08:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B351C9CE7CE0D4DEB6D594AC423842D3729A0807.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6A537CEC6C97FAA57A285C19783739CAE076A4D6323146D5EB637B9AA7EE5C3F/0/3133312e3232312e32342e302f32322d3234203d3e203237393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:f3:f4:2f:32:63:f8:f1:e7:e6:2f:db:7f:5a:11:5d:ac:ea:
         1e:ec:4d:32:99:c3:ad:c8:9d:ac:20:c1:b2:ca:23:3a:33:c8:
         59:e3:d8:2d:25:90:6b:05:2c:32:8e:dd:d2:9b:aa:e0:e6:ea:
         7e:23:47:61:78:26:5e:f5:a9:a6:79:3e:4c:5c:07:d3:7d:9b:
         7e:73:4c:4a:a4:65:c4:b6:57:db:ba:89:6c:4e:ea:40:cb:49:
         4a:fc:30:5e:0f:51:7f:6e:17:70:34:fa:17:41:1c:0a:3a:ba:
         06:9e:eb:47:90:f6:48:dc:0f:fe:0e:6b:e9:91:3b:cf:07:7b:
         67:db:60:3b:dd:dd:49:61:d1:e6:9b:3e:8e:b0:d5:13:8c:0c:
         3d:1e:29:90:a5:3f:84:0f:cb:30:10:ca:00:08:a5:92:fa:86:
         2a:2a:19:f4:c2:a8:1d:b3:9e:58:a5:e8:4d:7a:a1:dc:b8:2b:
         9f:26:5c:0b:3d:80:c2:90:bf:de:5a:1f:e2:f5:76:48:f1:16:
         0f:9a:5f:a2:00:e4:32:92:4b:2a:e7:4b:fc:1d:d9:e0:e0:e1:
         7d:9f:bc:58:25:e8:d7:17:11:bf:38:12:d2:2c:e0:04:59:89:
         dd:90:80:11:74:74:30:92:52:45:3d:6b:1c:0b:25:af:a1:d3:
         36:ad:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:05 2025 by rpki-client