Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/3133312e3139362e36302e302f32322d3234203d3e20323730303136.roa
File:                     3133312e3139362e36302e302f32322d3234203d3e20323730303136.roa (raw, json)
Hash identifier:          becMoTjJ+V/NRoKPN6ljggkSvkqcSetQWzcQSBBHNMA=
Subject key identifier:   38:E3:0D:8A:89:60:2D:81:1A:7C:A4:64:9F:07:5C:9B:75:FF:8C:4B
Certificate issuer:       /CN=F4BCD849C61EEEDA3F9A792A027FD58727547CCD
Certificate serial:       6576C5F04F265E895B2C45418CB93C2044126390
Authority key identifier: F4:BC:D8:49:C6:1E:EE:DA:3F:9A:79:2A:02:7F:D5:87:27:54:7C:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/3133312e3139362e36302e302f32322d3234203d3e20323730303136.roa
Signing time:             Tue 04 Feb 2025 18:53:43 +0000
ROA not before:           Tue 04 Feb 2025 18:48:43 +0000
ROA not after:            Tue 03 Feb 2026 18:53:43 +0000
asID:                     270016
IP address blocks:        131.196.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:76:c5:f0:4f:26:5e:89:5b:2c:45:41:8c:b9:3c:20:44:12:63:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4BCD849C61EEEDA3F9A792A027FD58727547CCD
        Validity
            Not Before: Feb  4 18:48:43 2025 GMT
            Not After : Feb  3 18:53:43 2026 GMT
        Subject: CN=38E30D8A89602D811A7CA4649F075C9B75FF8C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:2a:6a:d5:44:82:d7:3e:82:64:02:ae:e3:
                    36:92:15:af:8b:5e:97:c1:96:a1:7e:82:92:62:6f:
                    5e:11:0d:c5:a7:70:b1:2e:92:0e:18:03:10:63:5d:
                    79:f0:30:fd:9b:1a:d3:2f:89:85:1f:78:91:b2:14:
                    dc:eb:8b:2a:81:7e:86:61:bc:63:02:31:dd:43:8d:
                    20:df:5b:1c:ac:e4:e4:32:02:03:e7:00:95:c6:5e:
                    76:cc:34:b8:57:b2:39:64:b3:9a:6c:e2:1c:18:7d:
                    48:97:97:5c:6f:30:a9:fb:31:c0:f4:8c:09:c4:5b:
                    db:3e:fd:97:93:8b:8a:1d:ab:5a:ca:e5:fa:71:d3:
                    ea:6c:5a:ed:c2:d6:bd:34:e7:91:12:7a:de:7a:3b:
                    51:b1:95:1e:18:1f:b3:e1:43:70:0b:ec:7a:fa:b1:
                    db:73:3a:8d:81:3d:b0:c8:f6:13:d3:4b:60:79:ac:
                    d2:46:76:ca:a8:af:75:d9:7d:e5:7c:97:3c:d3:d5:
                    d5:8c:97:5c:32:19:df:b7:b6:c7:06:98:a9:33:3a:
                    cf:86:75:1b:d6:a4:ab:67:1d:fd:82:57:5f:cd:43:
                    fd:f1:28:53:fc:50:58:08:bd:30:89:b6:96:88:2f:
                    1f:46:ba:ee:89:0d:ce:ad:7e:1a:58:82:00:a9:d4:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E3:0D:8A:89:60:2D:81:1A:7C:A4:64:9F:07:5C:9B:75:FF:8C:4B
            X509v3 Authority Key Identifier:
                keyid:F4:BC:D8:49:C6:1E:EE:DA:3F:9A:79:2A:02:7F:D5:87:27:54:7C:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/3133312e3139362e36302e302f32322d3234203d3e20323730303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:ca:59:1b:11:1d:fe:be:d0:21:3d:79:a1:b9:0d:9f:cd:07:
         67:c6:3d:23:13:69:21:67:b0:40:96:28:05:51:17:59:83:25:
         19:d0:7c:be:e7:1b:ce:8d:7c:d2:52:34:2f:f6:13:9a:a6:a4:
         72:10:ae:0a:d0:19:a0:5c:e1:14:5f:bf:7e:4c:ec:28:41:96:
         e9:06:24:c6:fa:51:e6:29:ca:4e:75:ed:af:56:f2:24:45:e2:
         bf:9e:9d:84:4f:9f:56:ee:72:af:3a:cd:9d:45:c0:7f:48:52:
         3b:ac:08:ac:78:a3:8a:2f:62:de:f9:c7:79:4e:fa:0a:76:62:
         8a:31:1e:3e:11:11:ed:b4:2b:d7:b1:91:54:5a:9b:ff:13:6d:
         a7:39:e6:51:d1:a1:eb:d4:33:77:d1:1a:c8:1f:00:d4:48:8b:
         e6:b7:35:53:1a:06:9e:3e:3c:c5:cc:8d:f9:5d:94:b2:c4:0a:
         4e:67:cc:57:d5:5a:5b:d2:0d:dc:32:ca:fb:36:b2:d1:34:73:
         17:68:17:5e:d8:4c:ec:67:f9:9c:7e:63:4a:4d:e2:a9:39:4d:
         36:3d:95:24:f4:25:7f:6e:bb:05:e3:38:c4:af:0c:72:29:2b:
         56:78:37:d8:7b:e8:13:6a:13:9e:c8:98:6e:4e:f4:3a:a6:2c:
         af:e0:88:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:25:13 2025 by rpki-client