Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/3133312e3136312e3138342e302f32322d3234203d3e203532343434.roa
File:                     3133312e3136312e3138342e302f32322d3234203d3e203532343434.roa (raw, json)
Hash identifier:          alyLFoiH+wc5fDB4UyluOooRZxyr/3QHLMFnGqBJPV0=
Subject key identifier:   99:FA:85:54:E0:0E:17:6A:C4:0F:E0:88:C0:83:91:10:6E:50:04:51
Certificate issuer:       /CN=C6954B6A710E06C327505B5B0F1F380B7FE7B0B4
Certificate serial:       36ED8ABFD3523E9945B80F108BAF8AAEBE516E14
Authority key identifier: C6:95:4B:6A:71:0E:06:C3:27:50:5B:5B:0F:1F:38:0B:7F:E7:B0:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/3133312e3136312e3138342e302f32322d3234203d3e203532343434.roa
Signing time:             Tue 04 Feb 2025 18:03:32 +0000
ROA not before:           Tue 04 Feb 2025 17:58:32 +0000
ROA not after:            Tue 03 Feb 2026 18:03:32 +0000
asID:                     52444
IP address blocks:        131.161.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 12 Feb 2025 23:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ed:8a:bf:d3:52:3e:99:45:b8:0f:10:8b:af:8a:ae:be:51:6e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6954B6A710E06C327505B5B0F1F380B7FE7B0B4
        Validity
            Not Before: Feb  4 17:58:32 2025 GMT
            Not After : Feb  3 18:03:32 2026 GMT
        Subject: CN=99FA8554E00E176AC40FE088C08391106E500451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3f:df:5a:66:9c:70:bc:ab:93:19:47:4a:2b:
                    ba:ab:2f:2b:9d:d7:13:60:ca:86:b4:ff:34:6d:20:
                    bc:df:9b:67:89:bf:48:de:17:9a:36:70:4e:13:81:
                    db:04:8a:f1:54:80:3e:0d:42:4a:2a:a8:18:35:95:
                    17:07:ac:7a:46:e1:69:0f:3e:dd:e5:ba:f8:ea:ad:
                    c7:84:21:95:8d:5c:72:8f:c8:5c:da:f3:ae:df:50:
                    47:ef:15:f3:07:86:cd:63:54:19:ba:92:00:15:c1:
                    15:e3:5f:d0:6c:37:42:f8:19:b6:0f:41:5d:a7:4a:
                    c0:5d:df:2c:d2:52:c0:e3:69:56:d8:55:0c:7f:59:
                    35:17:01:3b:45:10:08:a1:0c:b2:6e:ec:46:91:aa:
                    86:b1:a9:8a:0b:89:8e:09:ff:4e:c4:42:4c:0d:b0:
                    e0:e0:62:74:f5:ee:46:e4:62:b1:ff:a6:b2:4c:d3:
                    98:68:86:b4:bb:ba:38:e2:2e:5b:e4:ef:ed:3a:31:
                    fd:27:73:a1:17:de:8b:7a:fb:be:1a:5e:d7:ec:3f:
                    e5:65:de:3e:b7:e1:6d:cd:82:4a:54:6b:2c:b9:b0:
                    05:94:68:b0:f8:5e:77:75:db:fb:de:1a:f5:86:45:
                    76:18:0e:2b:69:21:36:6a:cf:71:dd:db:ab:91:57:
                    58:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FA:85:54:E0:0E:17:6A:C4:0F:E0:88:C0:83:91:10:6E:50:04:51
            X509v3 Authority Key Identifier:
                keyid:C6:95:4B:6A:71:0E:06:C3:27:50:5B:5B:0F:1F:38:0B:7F:E7:B0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6954B6A710E06C327505B5B0F1F380B7FE7B0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8D47D3ADB1C5D468A4F0832BE5E0AF010F8E31E39048E9979E9407CBEA865D/0/3133312e3136312e3138342e302f32322d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:51:1c:fd:a5:8a:aa:05:1c:9e:ba:cc:63:d1:88:ff:10:03:
         15:63:1a:51:8b:18:47:da:e5:02:92:42:7a:0c:4c:2d:fe:3d:
         3d:d7:27:fd:63:a1:56:71:2d:bf:9b:0f:76:d7:5e:22:66:d7:
         89:e1:b1:fa:ea:19:c4:74:a8:e1:35:1f:4c:11:89:e2:b6:41:
         01:cd:f7:b1:74:4e:75:d4:c2:ab:f2:0a:9c:3b:46:fd:f0:92:
         3a:1e:bd:08:1f:4b:ce:61:d9:fb:d0:ad:eb:1f:06:a4:97:33:
         d6:cd:d3:ac:d0:68:6e:b1:8f:21:ae:05:01:b0:e1:a3:4c:9e:
         70:3f:58:0e:f7:2b:b5:ce:59:90:66:c1:f4:b4:a6:bb:0d:04:
         4f:81:ed:50:24:ce:fa:ba:45:f7:22:73:43:a9:96:c1:44:0c:
         40:ce:64:f7:07:3b:c9:22:14:11:23:b6:0b:f6:50:ae:96:9f:
         b6:58:44:95:02:52:bc:44:33:a2:cc:49:7e:e6:48:a5:46:62:
         40:e7:69:5c:73:b4:7e:50:3f:67:15:33:a4:50:80:e5:95:8f:
         8f:d9:0e:e3:1a:7f:9a:56:c1:f4:43:27:fa:91:73:b0:e5:25:
         28:bd:a3:ff:3a:52:92:11:87:55:01:4f:30:7b:8f:eb:4e:52:
         82:e7:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 9 14:04:51 2025 by rpki-client