Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e33312e302f32342d3234203d3e203532333339.roa
File:                     3133312e37322e33312e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          yi8zEktn07tOb/CTUEf/+ImlRvyVQgjA1UwrRixRMPs=
Subject key identifier:   8D:84:76:B2:DF:92:E7:7D:86:B6:40:35:A6:A5:AB:8A:DD:64:52:49
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       6CEF9D755CE1C9DCD4F2EAE2EF6320F4B5D6FDE0
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e33312e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 09 Jun 2025 20:21:27 +0000
ROA not before:           Mon 09 Jun 2025 20:16:27 +0000
ROA not after:            Mon 08 Jun 2026 20:21:27 +0000
asID:                     52339
IP address blocks:        131.72.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ef:9d:75:5c:e1:c9:dc:d4:f2:ea:e2:ef:63:20:f4:b5:d6:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jun  9 20:16:27 2025 GMT
            Not After : Jun  8 20:21:27 2026 GMT
        Subject: CN=8D8476B2DF92E77D86B64035A6A5AB8ADD645249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:d0:bc:5b:36:c5:a2:b2:9b:5d:ef:fa:1e:
                    73:1c:56:72:a1:94:b9:52:5e:a1:43:7b:e0:9c:ac:
                    95:e2:86:93:d7:55:c8:4f:71:3d:07:39:6e:a4:ea:
                    3e:03:9d:8c:42:ef:e4:90:66:9d:6f:83:0e:f5:b8:
                    66:19:20:19:a0:d3:8a:0f:d2:ca:87:fe:55:83:74:
                    8a:7a:71:16:67:76:9d:8f:f7:0e:28:b2:e3:f7:bc:
                    ab:14:6e:87:5d:8b:4e:f4:aa:47:d5:aa:d5:aa:d7:
                    b9:09:da:d3:37:e6:af:cf:62:00:94:51:ee:89:1a:
                    1e:ff:c0:94:b7:81:8d:f1:48:34:44:8c:fb:5b:c2:
                    98:69:10:65:65:84:04:0c:91:01:f5:a9:3b:4c:67:
                    54:5d:b7:59:32:80:c6:4f:31:61:93:ce:14:cb:ca:
                    28:a4:64:ea:4a:79:13:0e:14:a5:d9:ca:99:d5:0e:
                    94:00:d8:05:47:11:1d:0f:49:88:cd:e6:ed:6e:37:
                    c5:4a:65:09:a9:6e:2f:5d:ec:d4:db:d5:4a:80:7e:
                    a8:29:1e:99:2e:03:1d:79:64:95:f0:21:09:6d:cd:
                    63:68:e7:73:4d:e8:b8:28:a9:c0:ed:7e:36:e5:fb:
                    27:66:47:68:6c:48:ec:9d:bd:a4:0d:2c:4e:19:20:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:84:76:B2:DF:92:E7:7D:86:B6:40:35:A6:A5:AB:8A:DD:64:52:49
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e33312e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:01:7c:99:3e:2e:b4:74:37:c0:bd:02:ec:68:f8:ce:8b:
         c0:67:70:6e:bc:d7:6c:d3:6a:e5:a9:ba:fa:3f:fe:33:9d:b0:
         0c:c4:23:bd:04:e1:ac:51:46:3d:89:57:17:5f:10:8d:ab:2a:
         cd:1d:84:5f:7c:01:61:54:40:5d:dc:c3:3c:f8:aa:fd:80:0d:
         e8:21:91:a9:4b:f9:ba:ac:ba:b1:a3:80:2a:49:6b:5e:8c:12:
         9c:b4:81:5c:7c:c9:53:9c:84:89:34:27:6e:12:bf:b9:35:6f:
         65:7c:17:a9:1f:77:15:e9:3c:30:55:49:40:cb:5c:5e:56:aa:
         57:92:a5:91:e7:29:51:6e:7d:e4:69:77:f8:4b:70:36:7c:0a:
         0c:b8:fa:b3:9a:83:a1:a3:0c:1c:1d:e6:75:2f:c3:11:be:d8:
         0d:f1:4e:ec:79:a5:03:6e:b3:a8:94:29:64:0f:b2:e2:64:47:
         79:d3:80:17:a0:14:88:8c:2d:a9:ad:27:94:69:e2:79:72:98:
         36:92:a1:0e:1c:4c:8c:71:21:b9:34:15:38:e3:d8:59:2f:57:
         75:5e:37:47:42:30:ff:bb:5d:6d:ad:90:b1:20:98:73:03:74:
         a3:c0:1f:c4:56:cc:c6:da:3f:ee:c1:fb:26:19:63:2c:bc:1e:
         7e:f0:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:36:32 2025 by rpki-client