Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/3133312e3139362e38322e302f32342d3234203d3e20323635383137.roa
File:                     3133312e3139362e38322e302f32342d3234203d3e20323635383137.roa (raw, json)
Hash identifier:          5FgvHGX1dgfR1Ql1V89F4/5NiNXxVdRpiI1ibAgtxaI=
Subject key identifier:   75:9D:8B:62:4B:17:F4:BF:24:9B:6F:8B:4C:2D:71:87:C1:22:F8:2D
Certificate issuer:       /CN=D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F
Certificate serial:       401B985C03DE53CE5B5852F888A563DB8B7A84E6
Authority key identifier: D8:4B:72:D9:DA:12:C7:2C:CE:6A:15:DD:F8:50:F1:CC:5D:63:12:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/3133312e3139362e38322e302f32342d3234203d3e20323635383137.roa
Signing time:             Tue 04 Feb 2025 18:03:20 +0000
ROA not before:           Tue 04 Feb 2025 17:58:20 +0000
ROA not after:            Tue 03 Feb 2026 18:03:20 +0000
asID:                     265817
IP address blocks:        131.196.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1b:98:5c:03:de:53:ce:5b:58:52:f8:88:a5:63:db:8b:7a:84:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F
        Validity
            Not Before: Feb  4 17:58:20 2025 GMT
            Not After : Feb  3 18:03:20 2026 GMT
        Subject: CN=759D8B624B17F4BF249B6F8B4C2D7187C122F82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:0c:41:ca:b7:30:c5:e6:43:be:df:59:f5:
                    c2:0a:f9:21:9e:02:56:35:88:9c:33:30:88:9a:f8:
                    6e:d6:6e:7d:cd:eb:8a:58:e5:1c:1b:a2:a5:bb:db:
                    4e:a7:26:b0:18:4f:cb:af:21:d0:b0:8e:19:02:58:
                    74:5e:30:a3:12:14:41:02:11:ef:a4:5f:42:e9:d1:
                    7d:1d:96:1f:14:7d:b8:3b:2e:39:59:2f:1d:35:2b:
                    a2:c7:3b:a7:50:1f:eb:2b:69:ca:b3:5f:cc:af:16:
                    10:64:dc:5e:69:97:da:cd:ce:94:a3:2f:09:af:d9:
                    3a:db:0c:51:24:e3:ae:75:d6:8a:65:49:f6:a5:c4:
                    b6:62:15:1d:e5:cf:48:02:55:ce:4b:87:d5:12:e0:
                    33:46:d8:d0:42:8a:5b:65:27:14:b1:62:d4:27:69:
                    30:98:88:19:e4:31:ed:b3:f0:f1:04:89:8b:b4:1b:
                    0b:d5:b3:3b:d9:21:f2:63:0e:e9:73:ab:94:9c:7f:
                    c6:ae:bc:a8:49:9c:5f:f4:7a:59:c7:97:c3:d2:73:
                    43:c4:7f:44:1a:e8:7a:36:ae:da:df:a5:4d:39:05:
                    56:06:48:0a:a2:f4:0c:05:5f:9a:ab:a1:5c:29:28:
                    8f:ab:4f:4f:13:30:93:3d:56:b9:f4:44:b3:e4:e5:
                    2a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9D:8B:62:4B:17:F4:BF:24:9B:6F:8B:4C:2D:71:87:C1:22:F8:2D
            X509v3 Authority Key Identifier:
                keyid:D8:4B:72:D9:DA:12:C7:2C:CE:6A:15:DD:F8:50:F1:CC:5D:63:12:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/3133312e3139362e38322e302f32342d3234203d3e20323635383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:9f:61:59:3a:42:60:19:78:16:e0:1f:56:06:8d:f3:62:
         38:41:21:7c:db:07:30:6d:c3:be:55:13:d8:69:58:75:5a:1b:
         9d:81:76:97:59:d2:fe:0f:14:b6:1b:89:d1:18:60:5e:ee:b5:
         12:66:27:e3:18:e6:ce:4c:03:7d:42:f8:66:d5:fa:64:76:6f:
         c2:5a:33:ab:e3:db:a9:78:df:6e:2d:14:86:bc:e6:62:a7:25:
         2d:ff:1e:9b:37:49:5c:61:3b:d5:6c:e8:eb:61:db:d7:87:6d:
         3f:e1:fa:15:76:a9:40:e0:91:aa:5e:1f:07:ef:df:a3:90:ac:
         56:e8:7f:5a:1e:70:5e:f8:d5:17:cc:06:c8:b9:7d:57:1a:6d:
         c3:27:e3:f2:1f:8b:7b:d0:0c:7b:44:cc:f3:d8:54:0f:4e:f8:
         0d:f5:d5:95:9f:3a:e1:36:1b:f2:cb:20:b7:a4:28:41:38:6e:
         e1:aa:b9:76:27:d7:3e:ab:e6:3a:08:0f:96:54:af:3b:09:18:
         e9:4c:c4:ca:46:fc:52:eb:c3:9b:51:e4:23:8c:1b:a5:5f:4a:
         94:e9:23:f9:49:db:d1:e7:09:c7:e4:8f:96:90:3c:c3:8c:58:
         6e:51:cb:d5:a8:52:f1:17:46:0c:85:17:6c:22:25:e4:c1:cc:
         eb:a3:8b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:18 2025 by rpki-client