Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/3133312e3139362e38302e302f32332d3234203d3e20323635373732.roa
File:                     3133312e3139362e38302e302f32332d3234203d3e20323635373732.roa (raw, json)
Hash identifier:          DKJoua2b/kGCMxML4H6ZUWD0939WA8y5xsv1m16e2to=
Subject key identifier:   60:8F:75:CA:F5:4B:B3:2A:8A:6B:C7:DD:AD:0D:33:3B:ED:A4:07:B4
Certificate issuer:       /CN=D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F
Certificate serial:       35F7EB8E7CC2FB5875E7C716A7AF22298F417AF0
Authority key identifier: D8:4B:72:D9:DA:12:C7:2C:CE:6A:15:DD:F8:50:F1:CC:5D:63:12:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/3133312e3139362e38302e302f32332d3234203d3e20323635373732.roa
Signing time:             Tue 04 Feb 2025 18:03:20 +0000
ROA not before:           Tue 04 Feb 2025 17:58:20 +0000
ROA not after:            Tue 03 Feb 2026 18:03:20 +0000
asID:                     265772
IP address blocks:        131.196.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 22:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f7:eb:8e:7c:c2:fb:58:75:e7:c7:16:a7:af:22:29:8f:41:7a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F
        Validity
            Not Before: Feb  4 17:58:20 2025 GMT
            Not After : Feb  3 18:03:20 2026 GMT
        Subject: CN=608F75CAF54BB32A8A6BC7DDAD0D333BEDA407B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:3c:eb:9a:ff:a9:bc:52:27:03:f5:c9:75:
                    fb:71:b1:8b:49:df:6f:18:a9:8e:ca:59:2f:45:56:
                    c6:df:56:b3:73:ab:e5:0e:a3:ed:22:b3:2e:7d:e2:
                    2f:d0:65:c0:04:47:44:69:8e:0b:27:23:93:2b:64:
                    56:04:ff:e8:08:cb:7d:49:f0:ea:20:f0:63:7a:4a:
                    91:7f:65:89:77:e4:63:b5:87:12:a2:3b:52:b1:52:
                    2d:ec:f6:13:31:c8:6c:6d:4c:ef:c6:ac:6a:26:e5:
                    4f:4f:42:bf:48:02:8c:ec:a7:c1:f2:e9:38:d1:c5:
                    6a:ce:d6:5f:a4:6e:28:fc:08:b8:66:ab:75:a6:8e:
                    4b:05:cd:ba:13:78:ce:ed:8f:e0:12:e4:63:5f:64:
                    30:d4:41:2c:2e:65:00:3b:f3:0e:91:dd:66:75:3c:
                    b8:8b:d5:35:08:47:64:75:b8:64:28:69:6c:8d:58:
                    c5:30:d8:b3:c3:f0:af:43:38:6c:5a:a3:14:9b:c4:
                    ad:68:ba:1e:9a:8a:4f:36:c3:86:1c:d8:10:97:19:
                    b1:e4:e5:35:64:64:ac:17:9e:b2:f3:31:88:99:b5:
                    20:0e:d5:2b:d7:eb:2b:43:0d:5c:9c:d9:22:a1:4f:
                    5c:c1:af:2f:12:4b:0e:cd:bc:c2:d1:7d:8c:85:cb:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8F:75:CA:F5:4B:B3:2A:8A:6B:C7:DD:AD:0D:33:3B:ED:A4:07:B4
            X509v3 Authority Key Identifier:
                keyid:D8:4B:72:D9:DA:12:C7:2C:CE:6A:15:DD:F8:50:F1:CC:5D:63:12:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/3133312e3139362e38302e302f32332d3234203d3e20323635373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:f3:c1:b4:b7:12:28:c0:0f:18:65:e7:f6:50:6e:17:83:
         99:33:fa:87:bf:75:c3:9d:c3:fb:ea:52:a2:f2:28:ca:03:9d:
         43:4c:bb:2c:41:0c:da:c7:14:e8:40:ba:ca:ae:1e:c0:ee:ac:
         c9:8f:8e:24:69:47:44:d5:db:59:01:18:62:76:10:61:32:cd:
         54:a8:ac:3f:6c:92:29:26:f8:9d:bc:e5:78:34:33:b1:7e:89:
         bd:46:c7:e9:a3:bb:7d:49:11:26:0f:65:46:96:d1:b3:3a:5c:
         86:63:cf:d7:a2:52:ee:01:24:ae:4e:a6:d4:20:06:50:56:3a:
         34:4f:23:26:0e:36:d9:53:a3:9f:4a:c6:0e:c7:c5:b5:5a:e0:
         8f:34:c0:41:88:f4:e3:aa:96:68:5e:33:5c:26:af:6c:52:7a:
         d3:9b:0d:c2:50:d8:ad:64:d6:78:03:44:12:b6:00:4c:8a:91:
         0d:ad:7b:2b:58:46:90:77:19:76:0d:99:2e:7b:1c:57:9b:8c:
         76:88:c9:7a:a1:a6:fc:df:f0:62:7a:6b:87:4a:37:26:fa:d7:
         28:c7:c3:7d:67:aa:a6:c0:56:71:fd:57:fe:a3:ee:db:50:80:
         b0:25:0e:eb:11:36:d3:b3:f6:6f:11:27:ba:25:e2:78:e0:a4:
         a9:d9:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:08:11 2025 by rpki-client