Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233392e302f32342d3234203d3e20323633373533.roa
File:                     3133312e37322e3233392e302f32342d3234203d3e20323633373533.roa (raw, json)
Hash identifier:          o18N3SUooKyP4Qehdnx3vKbFhQkw8BYH0ROr0Sv2e70=
Subject key identifier:   98:F1:E8:AE:EA:77:89:29:6F:77:88:FB:CD:3B:01:54:1E:C7:90:BD
Certificate issuer:       /CN=E629C4E7637A20BC21967E803440E0984DB741BE
Certificate serial:       010D8D917234EE7111B786E34DE41FCC2E3B5487
Authority key identifier: E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233392e302f32342d3234203d3e20323633373533.roa
Signing time:             Tue 04 Feb 2025 18:13:13 +0000
ROA not before:           Tue 04 Feb 2025 18:08:13 +0000
ROA not after:            Tue 03 Feb 2026 18:13:13 +0000
asID:                     263753
IP address blocks:        131.72.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:8d:91:72:34:ee:71:11:b7:86:e3:4d:e4:1f:cc:2e:3b:54:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E629C4E7637A20BC21967E803440E0984DB741BE
        Validity
            Not Before: Feb  4 18:08:13 2025 GMT
            Not After : Feb  3 18:13:13 2026 GMT
        Subject: CN=98F1E8AEEA7789296F7788FBCD3B01541EC790BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:a9:9a:7b:af:83:59:71:26:c7:b2:d0:5f:
                    07:6e:7e:45:f6:74:09:3f:f5:fb:4f:fc:88:34:97:
                    28:32:9d:48:6a:34:e6:da:31:b3:ed:dc:4f:0b:a0:
                    77:8c:47:5a:93:63:eb:65:5c:01:86:57:89:2a:c8:
                    d6:44:10:86:7a:4d:60:cf:9e:f5:2c:85:44:0f:c4:
                    59:16:03:35:fc:0b:50:18:ea:5f:13:ac:41:c3:b6:
                    49:d0:34:14:80:b2:53:00:5b:27:ba:b7:aa:eb:30:
                    25:21:dd:01:c3:5b:55:22:bf:b4:0c:15:d9:fd:52:
                    df:7b:50:a9:53:1b:b9:0c:26:a0:b6:be:52:69:f4:
                    ab:95:10:f9:22:41:1f:37:7e:8d:3e:39:a9:af:52:
                    ef:ae:9e:56:3a:86:ed:be:6d:eb:27:93:47:ea:30:
                    5e:54:c1:d9:86:42:9b:bb:f5:b2:42:08:dd:ed:9f:
                    e9:75:60:dd:17:ac:bf:2f:a0:8b:bd:14:fa:d8:06:
                    fe:0d:62:4d:be:99:e3:35:16:5e:f0:12:22:d0:d6:
                    57:56:07:12:72:3e:8b:d9:fd:1d:69:69:54:8c:59:
                    42:f1:2d:5f:c5:21:59:85:11:76:a4:13:a2:ba:24:
                    3f:c3:d0:0f:77:22:e0:0c:05:1a:37:60:2c:a2:ca:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F1:E8:AE:EA:77:89:29:6F:77:88:FB:CD:3B:01:54:1E:C7:90:BD
            X509v3 Authority Key Identifier:
                keyid:E6:29:C4:E7:63:7A:20:BC:21:96:7E:80:34:40:E0:98:4D:B7:41:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/E629C4E7637A20BC21967E803440E0984DB741BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E629C4E7637A20BC21967E803440E0984DB741BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94DB8CCE5D181D58FDBBB42A91D3248BD30B024FBBD49AB7BE54AF5599351747/0/3133312e37322e3233392e302f32342d3234203d3e20323633373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:71:2c:87:a4:72:c1:b9:4b:54:db:c5:4e:ec:f4:aa:54:1e:
         20:56:98:cb:19:b5:4a:8b:cf:9d:18:9d:a4:4c:ca:42:d1:4c:
         b2:eb:50:44:94:37:a9:7a:ab:95:7f:a8:45:b3:d6:49:fa:08:
         f6:14:8c:dd:d4:be:29:38:fb:da:d7:36:10:18:5c:59:a3:99:
         ce:10:63:88:eb:20:7c:6e:1e:6b:c4:ee:10:a7:4e:9f:00:d7:
         6f:ba:64:64:62:97:98:02:05:cd:ac:c4:29:5a:e1:6a:14:2c:
         51:1b:e1:74:f5:eb:a0:21:3e:30:63:51:04:65:78:16:19:2a:
         d3:83:7b:a6:bf:b7:21:8d:d8:ee:4d:4c:94:fb:a5:01:cf:6e:
         09:cb:ba:cc:3b:aa:72:d6:ab:d1:87:9d:62:3d:a2:cc:4a:b4:
         2c:71:d7:f2:34:0b:d1:fb:da:d8:9b:c2:13:7a:08:68:eb:86:
         ac:65:67:e9:e8:f2:58:04:69:2f:3f:9c:04:9e:43:5e:26:c0:
         4a:31:2d:46:3c:77:79:f3:18:86:60:ae:d5:e3:52:db:a4:d0:
         a0:13:6f:8d:82:2e:1a:4a:76:08:82:2b:2f:d8:9a:02:d0:e2:
         42:99:1c:51:1b:82:fa:e7:b7:cd:84:ff:4d:a7:a3:1d:e1:19:
         ce:6b:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:46 2025 by rpki-client