Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B7F1D8F001197E124B9323A3182A9BFA43557616A2BC6D28F053268CAF0EA26/0/3133312e3235352e3138302e302f32322d3234203d3e20323633373135.roa
File:                     3133312e3235352e3138302e302f32322d3234203d3e20323633373135.roa (raw, json)
Hash identifier:          8bzbQ1cp7J1GBJmoXUxLDCLVnXpsFWrlnRfqwstaVA8=
Subject key identifier:   78:80:B8:CE:D1:39:BF:47:D9:AE:FA:67:E5:37:BF:28:B9:F8:5E:AA
Certificate issuer:       /CN=1EBD8A589075FC05F94517534250344AA37719DE
Certificate serial:       1A5CE487BAC037679A97271A3C116DCEFF63C6A1
Authority key identifier: 1E:BD:8A:58:90:75:FC:05:F9:45:17:53:42:50:34:4A:A3:77:19:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EBD8A589075FC05F94517534250344AA37719DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B7F1D8F001197E124B9323A3182A9BFA43557616A2BC6D28F053268CAF0EA26/0/3133312e3235352e3138302e302f32322d3234203d3e20323633373135.roa
Signing time:             Tue 04 Feb 2025 18:16:37 +0000
ROA not before:           Tue 04 Feb 2025 18:11:37 +0000
ROA not after:            Tue 03 Feb 2026 18:16:37 +0000
asID:                     263715
IP address blocks:        131.255.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B7F1D8F001197E124B9323A3182A9BFA43557616A2BC6D28F053268CAF0EA26/0/1EBD8A589075FC05F94517534250344AA37719DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B7F1D8F001197E124B9323A3182A9BFA43557616A2BC6D28F053268CAF0EA26/0/1EBD8A589075FC05F94517534250344AA37719DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EBD8A589075FC05F94517534250344AA37719DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 14:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5c:e4:87:ba:c0:37:67:9a:97:27:1a:3c:11:6d:ce:ff:63:c6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EBD8A589075FC05F94517534250344AA37719DE
        Validity
            Not Before: Feb  4 18:11:37 2025 GMT
            Not After : Feb  3 18:16:37 2026 GMT
        Subject: CN=7880B8CED139BF47D9AEFA67E537BF28B9F85EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:7c:11:59:f5:e9:85:15:b4:0b:e8:c4:cf:
                    55:f3:74:61:3d:21:75:9a:7f:75:01:7e:8f:f9:a7:
                    3d:da:e2:96:0e:4d:5c:36:6f:cf:aa:f6:95:31:c9:
                    96:22:69:10:be:6c:9b:b8:74:8c:c4:17:64:34:34:
                    84:35:54:f6:31:18:bb:91:4d:b9:c3:8b:80:8b:b4:
                    b5:97:01:22:a7:5a:08:8a:a9:88:27:47:08:fc:c7:
                    b1:bf:74:28:fe:ba:44:21:c1:71:42:56:f3:c9:d9:
                    7c:69:05:cb:c0:13:c1:04:7f:aa:73:dd:82:3e:12:
                    27:67:ae:d6:ba:73:45:b2:26:2f:fd:1e:ce:44:4a:
                    83:a5:b0:d7:27:59:ae:15:61:e5:72:3a:da:5a:1d:
                    29:c3:b5:fd:99:17:f1:08:f4:e1:13:88:11:48:9d:
                    df:be:1b:e4:24:49:f3:23:00:33:cf:95:70:95:0f:
                    5d:06:e8:1f:ee:a8:62:e2:d5:b2:16:dd:ef:46:d0:
                    75:54:9f:dc:cc:77:3d:1f:11:39:f6:fe:45:a0:bf:
                    24:7b:1e:bd:07:0f:1a:0d:5b:eb:46:90:8e:c5:c5:
                    01:3d:b4:f3:5a:ba:f8:1d:9c:d3:3c:85:54:1d:e1:
                    90:21:c1:68:9e:1b:85:12:ac:3a:f8:23:62:22:61:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:80:B8:CE:D1:39:BF:47:D9:AE:FA:67:E5:37:BF:28:B9:F8:5E:AA
            X509v3 Authority Key Identifier:
                keyid:1E:BD:8A:58:90:75:FC:05:F9:45:17:53:42:50:34:4A:A3:77:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B7F1D8F001197E124B9323A3182A9BFA43557616A2BC6D28F053268CAF0EA26/0/1EBD8A589075FC05F94517534250344AA37719DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EBD8A589075FC05F94517534250344AA37719DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B7F1D8F001197E124B9323A3182A9BFA43557616A2BC6D28F053268CAF0EA26/0/3133312e3235352e3138302e302f32322d3234203d3e20323633373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:d8:7f:92:40:5e:92:32:2e:05:3a:51:10:d7:8f:42:39:6d:
         ba:2d:c8:5b:79:9f:ea:9a:f7:f6:b7:97:7b:ef:b5:5d:f0:38:
         b9:c2:69:c5:7d:41:1b:04:8c:3b:69:ac:4a:f9:23:a7:0a:bf:
         f1:d6:b2:89:bf:ab:53:5c:35:d0:19:7f:79:30:16:7b:b4:e3:
         af:8f:1c:23:a7:b2:2e:83:e1:cc:d3:84:00:b0:17:5e:3d:c7:
         89:0e:a2:ed:ff:c0:aa:a0:ad:a2:65:76:1d:88:07:f1:16:81:
         a3:4f:2a:60:02:03:f7:5e:ae:36:e8:d5:6d:7a:a0:aa:51:b3:
         32:32:44:86:4e:9f:54:75:37:eb:f7:7b:a9:23:7c:90:8f:81:
         07:ca:e7:fd:91:9e:b6:aa:20:1a:fa:11:7d:db:73:33:2a:bd:
         1a:44:7d:05:9a:26:61:3f:b5:79:57:02:67:68:6f:36:b1:ed:
         01:4e:55:ac:d1:2b:e9:f2:7e:e9:6b:d7:1d:42:35:c9:1b:b8:
         e7:10:8c:1e:b4:3c:39:41:2d:38:f9:5c:c6:27:6b:21:4a:47:
         bb:42:9c:23:00:ef:7f:cd:19:4b:7e:ea:17:40:96:e5:e5:4a:
         1f:d1:a6:35:86:ad:89:45:d3:21:25:61:94:f2:ef:a3:58:64:
         9e:22:40:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:22:00 2025 by rpki-client