Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/3133312e3130382e342e302f32322d3234203d3e20333934363834.roa
File:                     3133312e3130382e342e302f32322d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          hk9Bnjk10J+HqOkKhV439x6h91s1inII2jxHnxsKijA=
Subject key identifier:   3F:F0:8A:35:2F:61:8C:F4:63:90:FD:66:7B:82:06:78:5D:E8:8A:18
Certificate issuer:       /CN=DC17BDE9178A893A0E44505700003A43E9C81665
Certificate serial:       71C7D595170EC8789B6FAE7F377385121AC5F3A2
Authority key identifier: DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/3133312e3130382e342e302f32322d3234203d3e20333934363834.roa
Signing time:             Tue 04 Feb 2025 18:44:42 +0000
ROA not before:           Tue 04 Feb 2025 18:39:42 +0000
ROA not after:            Tue 03 Feb 2026 18:44:42 +0000
asID:                     394684
IP address blocks:        131.108.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c7:d5:95:17:0e:c8:78:9b:6f:ae:7f:37:73:85:12:1a:c5:f3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC17BDE9178A893A0E44505700003A43E9C81665
        Validity
            Not Before: Feb  4 18:39:42 2025 GMT
            Not After : Feb  3 18:44:42 2026 GMT
        Subject: CN=3FF08A352F618CF46390FD667B8206785DE88A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:35:c4:a3:3f:1c:21:59:18:bc:30:4c:33:e3:
                    6d:65:84:6b:61:5b:e2:f8:b3:49:6d:96:88:3b:c7:
                    21:11:ee:83:24:04:4a:f2:36:47:ea:2d:9c:91:93:
                    1a:e2:ec:13:fc:0c:8d:80:59:ed:2f:c8:68:dd:c6:
                    be:54:67:5b:a6:a8:a3:13:11:9d:6e:8e:c9:bb:c4:
                    a6:31:23:80:06:df:e5:20:ac:07:f9:c3:90:dd:61:
                    0b:45:43:4f:cf:2b:fa:ae:03:13:f3:d4:7f:2d:34:
                    f4:0f:d4:a9:dc:54:99:59:27:1a:00:c6:3a:8b:d2:
                    a2:1e:9c:0b:c9:82:f6:2b:65:57:8f:a8:15:8d:20:
                    53:c0:50:a5:6a:b7:5d:1d:b8:14:55:76:34:8e:91:
                    bd:46:78:ae:51:3d:73:4d:89:70:1b:a1:54:8a:b9:
                    7a:c2:f8:9d:f0:bb:6c:b2:aa:a4:55:e8:f7:86:d3:
                    e6:0f:15:76:80:be:99:8f:47:f2:48:7d:b1:a7:34:
                    54:ed:62:e0:46:b4:26:43:ac:ee:50:5e:01:14:de:
                    c9:a2:e9:f6:37:56:77:1d:bb:71:0b:58:04:3e:db:
                    3d:e9:70:8f:67:a1:34:aa:6e:a6:50:3f:32:18:66:
                    e6:03:3b:39:ec:27:33:eb:f0:0b:38:79:fd:9f:d9:
                    fb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F0:8A:35:2F:61:8C:F4:63:90:FD:66:7B:82:06:78:5D:E8:8A:18
            X509v3 Authority Key Identifier:
                keyid:DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/3133312e3130382e342e302f32322d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:c0:eb:c6:b3:e1:22:81:52:3d:7b:b1:7a:e2:4e:97:3f:fd:
         94:bf:69:41:ac:a0:2e:bc:aa:9d:77:20:6d:31:bd:57:93:8b:
         54:cf:f7:b1:64:76:f7:27:90:15:ce:f4:32:4b:0f:7e:99:e0:
         c6:10:45:e6:ca:2f:66:7f:25:e7:d1:fd:b2:4c:09:e7:32:6c:
         0e:c5:58:da:14:1a:62:64:c3:18:0d:b4:d9:80:48:3c:f0:7a:
         ed:50:8d:22:82:b2:68:8b:e8:25:e6:63:ae:7c:31:64:c4:4b:
         f6:3a:64:22:19:8c:37:4f:6b:bd:30:fa:86:99:62:61:1d:3f:
         8d:64:ef:7b:48:c6:4d:ef:4a:af:02:16:00:13:f6:2f:4e:26:
         e3:c0:96:34:81:f5:17:f0:82:9e:0e:95:9d:ab:21:e8:9d:42:
         04:8c:e2:63:5f:03:a9:5e:f9:1e:f8:8d:cf:fa:a8:bc:8a:1a:
         10:01:76:29:c8:6d:7e:04:de:c2:36:77:ee:0a:34:54:e3:be:
         7b:3b:24:b7:40:ee:bb:f5:a2:93:6a:2e:eb:35:88:a6:c6:4d:
         aa:f8:af:6b:d3:2b:20:54:35:2d:e5:fa:e5:12:7d:0c:c2:48:
         10:ad:82:c9:f0:dc:63:d8:aa:e0:38:e5:b7:ff:ee:6f:2c:bf:
         3b:fa:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:43:34 2025 by rpki-client