Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/3133312e3130302e38382e302f32322d3234203d3e203631343831.roa
File:                     3133312e3130302e38382e302f32322d3234203d3e203631343831.roa (raw, json)
Hash identifier:          i8/vrT6+XhO6j/Z/W+TatHOihIcyb/cOEYjgVqOaH/w=
Subject key identifier:   8A:71:65:CD:99:55:4B:AA:99:48:66:EE:6A:15:0E:75:D7:86:85:B7
Certificate issuer:       /CN=D636489E9694DE73AF7AED57962E848C6463F92F
Certificate serial:       7003B157F9B2CFA5EE96DBA434AA8891D1E659E7
Authority key identifier: D6:36:48:9E:96:94:DE:73:AF:7A:ED:57:96:2E:84:8C:64:63:F9:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D636489E9694DE73AF7AED57962E848C6463F92F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/3133312e3130302e38382e302f32322d3234203d3e203631343831.roa
Signing time:             Tue 04 Feb 2025 18:45:41 +0000
ROA not before:           Tue 04 Feb 2025 18:40:41 +0000
ROA not after:            Tue 03 Feb 2026 18:45:41 +0000
asID:                     61481
IP address blocks:        131.100.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/D636489E9694DE73AF7AED57962E848C6463F92F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/D636489E9694DE73AF7AED57962E848C6463F92F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D636489E9694DE73AF7AED57962E848C6463F92F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:03:b1:57:f9:b2:cf:a5:ee:96:db:a4:34:aa:88:91:d1:e6:59:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D636489E9694DE73AF7AED57962E848C6463F92F
        Validity
            Not Before: Feb  4 18:40:41 2025 GMT
            Not After : Feb  3 18:45:41 2026 GMT
        Subject: CN=8A7165CD99554BAA994866EE6A150E75D78685B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:0a:0e:89:cc:d5:6b:c3:a2:18:65:2c:2d:
                    98:d8:21:4a:f2:e8:e2:4a:bf:4a:4e:d0:69:fc:55:
                    13:c3:00:96:ad:ee:77:a6:87:b0:09:da:ea:55:32:
                    02:91:e3:ba:87:d6:40:7f:aa:71:9e:f8:e4:1c:ce:
                    5f:af:a8:ae:ed:d6:44:26:89:27:55:d9:a9:72:ec:
                    8b:9e:97:ba:ec:ef:59:d4:cc:cb:18:dc:16:e4:15:
                    5a:e8:f5:c0:38:6c:c9:2b:63:80:6e:f1:18:92:cd:
                    63:b5:67:18:6f:9f:35:29:05:0f:69:ae:11:01:1d:
                    c6:a5:00:2d:74:85:ae:42:7f:1b:e3:33:4a:7d:92:
                    c7:6f:2e:d9:45:97:2b:d4:ea:58:86:6d:85:57:a2:
                    44:ff:7b:66:1e:71:6a:6f:e9:ec:b4:6f:1e:9b:89:
                    ff:62:0a:62:9e:7a:11:e5:00:36:ca:2e:65:fd:3c:
                    98:fc:47:57:7e:dd:b6:8f:63:02:a7:75:c5:22:a9:
                    54:3c:69:9b:e4:58:aa:f1:ba:08:78:81:b7:6a:38:
                    57:f5:f3:cb:ee:de:d5:d0:cb:4e:81:52:33:5d:23:
                    ba:a1:59:2e:3a:a7:50:93:0a:b6:c1:ff:a7:a6:45:
                    53:d3:f7:6a:09:dc:37:af:02:02:0a:06:a3:95:3f:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:71:65:CD:99:55:4B:AA:99:48:66:EE:6A:15:0E:75:D7:86:85:B7
            X509v3 Authority Key Identifier:
                keyid:D6:36:48:9E:96:94:DE:73:AF:7A:ED:57:96:2E:84:8C:64:63:F9:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/D636489E9694DE73AF7AED57962E848C6463F92F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D636489E9694DE73AF7AED57962E848C6463F92F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/3133312e3130302e38382e302f32322d3234203d3e203631343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:79:51:68:cc:f8:bb:c6:a6:2f:aa:09:7b:fd:3e:85:00:80:
         b3:b8:ab:b0:23:49:ee:a8:bd:47:4b:f1:35:8c:ec:da:50:39:
         62:84:42:7c:37:ba:6f:32:87:29:11:d1:7e:78:81:16:62:81:
         ea:11:21:56:2a:6e:f0:8d:58:5a:5a:7f:06:31:49:51:a4:88:
         70:fa:02:10:9d:1f:86:c7:26:9e:51:e8:0b:e3:c2:f6:5d:fe:
         8f:ed:4f:d4:a8:72:9f:3e:fd:47:e2:b5:f6:30:0b:f1:c9:bd:
         fb:88:10:06:29:88:d8:4d:a2:ce:93:9f:a8:80:a4:e2:34:9e:
         f7:9c:a7:07:22:d5:d5:ed:07:bf:88:34:01:3f:61:9e:39:f5:
         32:58:7e:fa:dd:cf:21:e2:19:b7:4b:0c:b7:88:44:54:2f:be:
         f7:05:28:56:c8:c6:6e:1c:25:e5:9e:e3:80:64:cf:b3:dd:cb:
         e7:fb:f6:79:48:fe:06:76:a3:b7:5d:00:0f:c5:68:ff:88:76:
         f5:d1:ba:b9:e3:91:80:db:bb:e9:37:33:a8:65:f8:6a:8a:5b:
         f4:c2:a8:0a:ee:ca:f0:ae:47:8b:47:77:13:f5:7d:00:1a:cc:
         13:ce:03:ed:64:6f:87:2d:29:f1:3b:15:6b:2f:2b:37:80:02:
         39:f1:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:01 2025 by rpki-client