Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa
File:                     3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa (raw, json)
Hash identifier:          ki3ZXbLXCKJHkqFilvfhr6bdVrQBibKeIAqRvGGaKaU=
Subject key identifier:   7F:0F:4A:C2:5A:10:C2:D0:0D:7C:E6:8C:23:33:FC:8A:A9:9E:27:B4
Certificate issuer:       /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
Certificate serial:       6E872F5E57588FC7FA8F406A28589A08B5D08144
Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa
Signing time:             Tue 04 Feb 2025 18:10:28 +0000
ROA not before:           Tue 04 Feb 2025 18:05:28 +0000
ROA not after:            Tue 03 Feb 2026 18:10:28 +0000
asID:                     271970
IP address blocks:        131.196.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:87:2f:5e:57:58:8f:c7:fa:8f:40:6a:28:58:9a:08:b5:d0:81:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
        Validity
            Not Before: Feb  4 18:05:28 2025 GMT
            Not After : Feb  3 18:10:28 2026 GMT
        Subject: CN=7F0F4AC25A10C2D00D7CE68C2333FC8AA99E27B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e6:30:68:8b:42:9b:98:19:1c:cd:c9:5b:4d:
                    9b:16:bd:c2:91:87:65:01:fa:04:3e:08:44:6c:21:
                    72:67:8a:94:5a:10:cb:c4:23:30:a6:6c:1a:f9:1a:
                    6f:1d:07:43:32:df:e7:0b:10:69:a3:4a:4d:29:bb:
                    ac:99:7e:85:13:4f:58:23:50:06:cf:84:76:79:b7:
                    39:8a:64:95:19:1c:e9:63:81:68:21:f0:12:f6:0b:
                    85:cb:38:fa:a8:26:9a:f0:92:8e:36:92:b5:39:ea:
                    3f:84:71:29:e7:50:23:62:a1:6b:0a:42:28:61:c4:
                    73:e7:97:5b:4f:17:98:9d:78:16:2f:ba:e9:e6:e9:
                    b3:1d:7b:58:49:f0:d1:ad:73:ba:4e:6c:0f:09:4d:
                    7d:a9:b2:04:2e:9c:70:4d:28:fb:9c:6a:bf:1a:1d:
                    ba:16:9c:c9:bb:26:bf:10:8e:21:0e:e3:9e:55:40:
                    ea:be:95:31:fc:f3:fa:97:7c:75:42:7c:6f:43:6c:
                    7a:cc:5b:d6:c0:2a:43:6d:ed:81:e7:da:08:32:0d:
                    1f:c2:66:75:64:04:24:a4:9c:1c:a4:94:d8:36:f6:
                    39:8f:e2:3b:20:6e:09:86:a4:ae:db:4f:c0:d3:cc:
                    39:3a:f4:2d:cb:1f:67:13:a9:8c:04:9d:d5:3b:31:
                    6f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0F:4A:C2:5A:10:C2:D0:0D:7C:E6:8C:23:33:FC:8A:A9:9E:27:B4
            X509v3 Authority Key Identifier:
                keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:3c:55:97:82:24:94:4b:c6:b6:d2:3b:b5:95:28:7a:e0:48:
         cb:c0:83:1f:7e:54:32:4e:7d:ad:9a:0b:47:38:e2:5e:c6:61:
         ff:d5:74:7f:d3:31:6c:01:55:76:72:69:49:ce:8c:5c:0f:90:
         8b:4e:f1:c9:dc:8d:c1:14:d2:ad:44:0d:fa:d7:a2:4e:e0:44:
         ea:79:dd:f7:30:f0:32:e2:92:d9:38:7c:52:cc:d0:90:23:85:
         5c:b2:38:20:52:3b:dc:a0:2a:fa:48:d9:08:62:20:64:e1:fb:
         79:e5:19:9a:e8:82:78:19:59:40:76:15:e2:b6:fe:c7:9e:60:
         ff:33:f1:d3:ab:12:7f:4d:43:4e:44:3b:33:b8:14:83:a8:ae:
         56:af:19:b6:ca:0a:67:2b:45:44:d5:73:5d:ac:49:31:1c:96:
         0a:a9:fd:eb:69:ee:eb:0a:ee:ed:14:e6:40:c9:60:75:d1:86:
         89:58:62:2e:18:70:7c:d4:29:0a:27:21:56:17:74:42:b3:1c:
         2d:09:57:2b:77:e4:fb:95:0d:62:92:29:cb:d1:7b:bb:76:80:
         3c:32:4c:10:cc:a7:95:0a:69:67:dd:93:62:7d:66:19:38:a1:
         3b:64:b4:8b:35:75:43:d8:02:5e:30:4c:84:6c:27:bd:32:0f:
         e2:7c:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:37 2025 by rpki-client