Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/3133312e3235352e3130342e302f32322d3232203d3e20333934363834.roa
File:                     3133312e3235352e3130342e302f32322d3232203d3e20333934363834.roa (raw, json)
Hash identifier:          5t0uMjPhQAY1RJ1Ge6qvt6vbKyABCB4En1Ez3/KcM3I=
Subject key identifier:   FE:91:62:DB:DC:7A:0D:2C:F4:E7:C4:17:C5:C7:2A:C5:33:53:56:07
Certificate issuer:       /CN=B1ED8C2B436F8456A9FFB7A803770E5760A2589B
Certificate serial:       0F5C61EFC3AFCAB88AACDA6FF3790759C980805E
Authority key identifier: B1:ED:8C:2B:43:6F:84:56:A9:FF:B7:A8:03:77:0E:57:60:A2:58:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/3133312e3235352e3130342e302f32322d3232203d3e20333934363834.roa
Signing time:             Tue 04 Feb 2025 18:14:57 +0000
ROA not before:           Tue 04 Feb 2025 18:09:57 +0000
ROA not after:            Tue 03 Feb 2026 18:14:57 +0000
asID:                     394684
IP address blocks:        131.255.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5c:61:ef:c3:af:ca:b8:8a:ac:da:6f:f3:79:07:59:c9:80:80:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1ED8C2B436F8456A9FFB7A803770E5760A2589B
        Validity
            Not Before: Feb  4 18:09:57 2025 GMT
            Not After : Feb  3 18:14:57 2026 GMT
        Subject: CN=FE9162DBDC7A0D2CF4E7C417C5C72AC533535607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:b6:f2:9e:79:39:e5:0d:1a:a2:7c:e1:59:
                    29:7a:ef:ad:2e:30:07:54:a5:b4:11:ea:5d:68:19:
                    65:4b:f4:dd:3e:62:7b:a1:7c:8f:f3:49:85:7f:30:
                    7f:e3:38:06:7b:a5:e7:00:47:74:97:e7:2d:f2:45:
                    fe:f8:42:90:fc:40:88:ef:c1:a3:47:b8:58:12:69:
                    c2:c4:4d:b5:3c:8d:b4:d7:a0:3b:0b:cd:61:6e:d7:
                    95:1d:3e:93:dc:bf:fd:87:08:a8:40:f6:fa:20:1e:
                    ac:4f:e6:93:1a:f6:b6:ff:6e:ac:ce:b7:55:fe:b2:
                    33:3e:59:7d:d6:4f:24:0d:3e:5e:4d:bd:43:d8:01:
                    8b:4c:b4:a7:c1:86:f5:8b:aa:99:69:dc:e4:35:67:
                    b8:0c:d8:28:02:4a:19:c8:5f:56:93:85:ac:14:77:
                    8b:e6:e6:af:3b:fb:94:82:0f:b4:92:1f:9f:eb:16:
                    d4:60:63:bd:9a:2c:be:4a:c0:fd:be:d0:eb:dd:e1:
                    ce:70:89:36:8b:a2:5e:12:d9:2f:1a:8b:d3:0c:44:
                    b0:bb:f5:1a:99:b7:a3:66:42:e6:91:99:75:74:91:
                    d2:d9:c9:32:64:b8:1f:de:80:65:27:90:78:23:e9:
                    dc:15:fc:9f:0f:69:cd:5f:14:ef:83:be:c5:62:9b:
                    b1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:91:62:DB:DC:7A:0D:2C:F4:E7:C4:17:C5:C7:2A:C5:33:53:56:07
            X509v3 Authority Key Identifier:
                keyid:B1:ED:8C:2B:43:6F:84:56:A9:FF:B7:A8:03:77:0E:57:60:A2:58:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1ED8C2B436F8456A9FFB7A803770E5760A2589B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CBEC127A80C3E1F1A34E553B878B5857AAC0FBCDB542E9D88F9FE2ECBA7369F/0/3133312e3235352e3130342e302f32322d3232203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:14:de:f3:40:73:e2:46:93:75:e8:c8:c1:e1:9a:98:0c:
         81:82:8f:ea:55:d5:ab:ac:ac:bc:96:a9:95:f6:ae:5e:1b:dc:
         54:1b:66:85:a3:04:03:b7:5e:60:64:c9:e5:ed:2f:91:8d:bf:
         61:12:d5:00:c0:ba:17:7c:eb:a9:9c:57:c5:56:00:ad:8c:5f:
         47:f7:d8:52:58:61:6a:97:86:48:34:70:72:94:ab:16:15:b1:
         4a:ec:8e:6a:1c:e0:cc:3c:4b:41:b2:14:e3:82:de:ab:91:36:
         8c:f0:d8:6a:6f:1e:33:e3:e2:55:53:3a:38:be:1a:53:c7:e7:
         9b:3b:ed:1d:e7:b6:bb:22:48:80:bb:16:5b:20:12:59:3b:3a:
         7c:6b:27:d3:7b:30:9f:ba:d9:69:02:90:ac:29:eb:0d:ba:db:
         5a:bd:f4:5c:23:20:0d:1d:6f:1d:13:06:85:c6:e9:d2:4c:bb:
         90:c8:62:56:10:c2:c3:7a:4e:c6:5d:ea:3a:41:95:ef:0a:25:
         c6:45:fc:ad:52:8d:b5:df:f6:47:4d:13:22:0e:7c:a4:ba:d0:
         cd:79:3a:28:01:af:fd:aa:07:1d:8a:f7:e6:11:2d:1f:f9:9b:
         01:70:ab:63:69:e3:7a:0c:c2:ff:03:22:0c:f5:39:dc:7f:3b:
         0b:32:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:57:00 2025 by rpki-client