Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/3133312e3235352e3234382e302f32322d3232203d3e20323633373132.roa
File:                     3133312e3235352e3234382e302f32322d3232203d3e20323633373132.roa (raw, json)
Hash identifier:          4FaPtqranh/nyr00S2Dz7TL8OrYdolE5f/5Zq1q55CI=
Subject key identifier:   85:86:60:A0:ED:A0:9F:17:A2:4E:B1:90:AD:B3:A5:E9:BA:34:41:CE
Certificate issuer:       /CN=7DD319E50D207C28E8350630130153059EE93773
Certificate serial:       16500160B7CF90DE69520E8B8EF5315DFCDC1D53
Authority key identifier: 7D:D3:19:E5:0D:20:7C:28:E8:35:06:30:13:01:53:05:9E:E9:37:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DD319E50D207C28E8350630130153059EE93773.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/3133312e3235352e3234382e302f32322d3232203d3e20323633373132.roa
Signing time:             Tue 04 Feb 2025 18:28:14 +0000
ROA not before:           Tue 04 Feb 2025 18:23:14 +0000
ROA not after:            Tue 03 Feb 2026 18:28:14 +0000
asID:                     263712
IP address blocks:        131.255.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/7DD319E50D207C28E8350630130153059EE93773.crl
                          rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/7DD319E50D207C28E8350630130153059EE93773.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DD319E50D207C28E8350630130153059EE93773.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:50:01:60:b7:cf:90:de:69:52:0e:8b:8e:f5:31:5d:fc:dc:1d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DD319E50D207C28E8350630130153059EE93773
        Validity
            Not Before: Feb  4 18:23:14 2025 GMT
            Not After : Feb  3 18:28:14 2026 GMT
        Subject: CN=858660A0EDA09F17A24EB190ADB3A5E9BA3441CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1a:c3:cf:56:63:c7:3f:d2:31:54:c8:1d:ab:
                    b9:26:ac:5f:80:5c:4b:06:28:4c:6f:1d:81:ad:d9:
                    24:b7:30:26:80:2a:31:0c:28:c3:57:4d:dd:19:e1:
                    c6:0a:84:e3:4f:d9:65:3a:ab:70:c8:4a:67:23:ef:
                    87:c5:68:70:3e:f3:70:62:98:86:c5:8a:b2:c4:8f:
                    b0:04:a2:81:97:43:0d:47:d7:f7:3b:f0:22:d3:0a:
                    1a:ec:34:80:24:ee:a8:cc:6a:58:41:1d:d3:c2:ef:
                    8b:b9:55:14:25:c2:c5:e0:ab:03:1a:2b:6c:31:90:
                    cb:c1:64:5c:6d:43:04:a2:74:e0:84:77:b5:23:f2:
                    d9:05:35:31:e4:e4:b9:86:5a:b2:bc:de:32:64:50:
                    17:29:55:9f:a0:f7:ed:77:a0:a8:28:36:f9:12:2c:
                    12:6e:25:be:a1:db:15:4f:6e:d8:bb:13:7a:87:e7:
                    63:67:7b:10:b5:35:b5:64:ea:44:bd:c8:c4:6c:6d:
                    8c:f0:43:0e:d2:91:ed:59:0e:59:40:10:f0:93:a8:
                    d8:bd:76:6d:67:0c:42:32:d6:86:7a:79:b4:37:1f:
                    9e:9e:91:51:95:34:84:8f:e0:0e:b7:bc:61:1b:ec:
                    fc:3a:15:71:a0:70:2e:6e:10:d7:0b:06:a8:e8:42:
                    e9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:86:60:A0:ED:A0:9F:17:A2:4E:B1:90:AD:B3:A5:E9:BA:34:41:CE
            X509v3 Authority Key Identifier:
                keyid:7D:D3:19:E5:0D:20:7C:28:E8:35:06:30:13:01:53:05:9E:E9:37:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/7DD319E50D207C28E8350630130153059EE93773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DD319E50D207C28E8350630130153059EE93773.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/3133312e3235352e3234382e302f32322d3232203d3e20323633373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:94:2b:30:ce:8e:b2:c8:3f:db:8b:17:10:e6:05:86:68:be:
         e5:86:7c:c4:2a:3a:67:37:87:7e:85:74:f5:71:f0:4e:03:3e:
         69:67:89:70:91:60:9b:9e:62:d1:ec:6c:71:a8:2a:6c:f1:8f:
         7e:8f:ca:03:ee:ba:41:2a:42:8b:23:63:eb:af:9e:58:88:05:
         2f:5e:b2:3d:24:7b:6a:e1:1c:fa:10:79:eb:b3:c7:00:19:65:
         dd:3b:f4:40:ff:f0:04:6d:32:98:74:57:c5:43:b7:86:02:6f:
         35:4c:76:c2:8f:c5:99:a1:11:45:64:76:b6:80:ee:eb:e6:1b:
         ec:23:2a:c9:79:03:75:db:fa:2c:e4:69:d7:01:c5:21:89:44:
         24:0e:07:57:9d:98:fa:49:7e:f3:db:51:69:d6:ee:9d:6c:08:
         81:ac:88:ba:83:ae:30:7e:04:35:23:29:c0:b3:8e:8c:b0:ab:
         93:b6:0d:4b:e9:f4:a5:cf:9a:bd:27:39:94:a0:43:27:5e:52:
         da:62:32:03:d2:62:8a:c6:2e:84:ed:a9:9c:90:ff:bb:4c:87:
         0d:32:6a:e2:97:81:4b:81:54:c1:e7:7e:99:54:7d:70:6b:a0:
         32:d8:8a:16:26:ec:ef:48:09:01:14:97:48:0f:9f:8b:28:ea:
         41:91:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:38 2025 by rpki-client