Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203631343730.roa
File:                     3133312e302e3233322e302f32322d3234203d3e203631343730.roa (raw, json)
Hash identifier:          CjmJTYr1PAcoR2nmHn1HmsKoVj2tu+eVVfNXaWzuZ8s=
Subject key identifier:   7B:44:59:61:C1:77:29:15:ED:95:39:44:82:73:E9:B2:29:73:6D:0E
Certificate issuer:       /CN=48C3545237B1DDEF78ABA1776BAB15B728086643
Certificate serial:       7F71D2FD015DF7CF673EC2DF31E235FC7CB3D0CE
Authority key identifier: 48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203631343730.roa
Signing time:             Tue 04 Feb 2025 18:56:10 +0000
ROA not before:           Tue 04 Feb 2025 18:51:10 +0000
ROA not after:            Tue 03 Feb 2026 18:56:10 +0000
asID:                     61470
IP address blocks:        131.0.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:71:d2:fd:01:5d:f7:cf:67:3e:c2:df:31:e2:35:fc:7c:b3:d0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C3545237B1DDEF78ABA1776BAB15B728086643
        Validity
            Not Before: Feb  4 18:51:10 2025 GMT
            Not After : Feb  3 18:56:10 2026 GMT
        Subject: CN=7B445961C1772915ED9539448273E9B229736D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:d3:db:16:3a:a6:34:c0:2e:15:25:f4:02:
                    81:ec:c6:16:3b:08:22:d6:d0:11:3f:e6:47:f0:1c:
                    22:ad:36:1f:3b:aa:ce:85:29:84:13:a0:e2:9f:e7:
                    51:ef:96:57:d8:b0:17:fa:a7:a3:50:33:18:9a:7a:
                    9e:a6:9f:67:84:e3:da:84:1c:e0:4b:bc:e8:9c:ee:
                    d2:54:0c:d4:a8:39:5f:d7:1f:22:d0:f4:2f:de:39:
                    38:c8:12:0d:6a:4c:d4:22:55:8a:60:ba:32:9a:cd:
                    6c:8c:2c:79:13:c7:05:3b:f6:5b:b1:bf:19:cd:54:
                    a6:47:3d:27:5e:bc:73:18:7a:6e:ea:b2:3c:bc:58:
                    98:d0:f0:c0:da:52:17:13:74:7c:22:71:6d:d8:ae:
                    12:36:44:5d:58:a3:ed:61:63:ac:92:70:94:92:38:
                    c5:fa:56:1f:b7:79:51:f8:ff:c6:92:81:c7:45:cb:
                    55:a0:ce:d3:bd:70:18:0a:80:d4:6f:ae:83:20:b6:
                    08:b9:42:29:6b:b7:d1:f9:0e:d5:04:81:e8:60:b1:
                    dc:4d:27:1c:21:b1:fd:69:95:ee:71:51:0e:29:99:
                    d3:ce:b0:6b:4f:e8:05:45:9c:07:56:a0:53:f8:d8:
                    99:11:76:11:bf:fd:4e:c1:c8:32:4d:bf:79:f3:e1:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:44:59:61:C1:77:29:15:ED:95:39:44:82:73:E9:B2:29:73:6D:0E
            X509v3 Authority Key Identifier:
                keyid:48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203631343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:1b:76:72:1a:70:ac:3a:68:1e:71:10:95:52:0a:92:f6:04:
         29:23:d0:bf:57:2e:6b:09:27:3f:33:a6:b9:dc:ec:cf:53:59:
         85:61:96:50:3c:8f:17:d8:42:39:02:57:b3:bc:a1:1e:0b:43:
         48:ae:a1:c3:f0:6a:e4:2d:bb:68:3d:88:5d:1b:84:f6:db:37:
         a1:29:b8:43:64:5e:82:94:d1:96:99:44:ac:4d:4c:ab:27:49:
         23:52:3a:30:69:9c:3e:2c:60:24:25:7f:70:f1:12:04:12:d3:
         c9:f4:04:4d:b4:d6:ac:16:5e:6e:5b:db:b7:7d:0a:b6:11:2c:
         12:95:f2:4b:76:ee:56:f7:77:64:33:c8:50:9f:1c:46:9c:6e:
         25:93:68:35:64:54:eb:dd:1b:d6:4a:32:9f:4d:bb:c3:da:d5:
         e6:5a:1a:69:cf:89:bd:d3:ff:e6:38:76:eb:06:cc:e2:cd:a4:
         97:1c:69:93:ea:fb:e3:5a:78:c6:c6:6e:6b:79:56:8b:9d:92:
         fe:05:7a:97:0f:d5:7d:49:de:0a:c1:56:2b:b8:40:8a:3a:f8:
         ca:45:b1:14:33:94:db:76:2e:95:c9:68:f4:79:9d:5f:fa:16:
         de:a9:57:e5:f4:bc:f5:f8:58:9b:a6:3a:fc:8d:0c:da:e1:f3:
         43:56:db:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:31:25 2025 by rpki-client