Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/3133312e3139362e3235322e302f32322d3232203d3e20313339323335.roa
File:                     3133312e3139362e3235322e302f32322d3232203d3e20313339323335.roa (raw, json)
Hash identifier:          AEm9n29EgAzff0F54XPLK3ct+02lsbHxmKG3ZRcL6ug=
Subject key identifier:   4C:C8:3E:B7:3D:3A:62:FB:90:9B:50:73:13:C5:6C:1A:85:40:AB:2B
Certificate issuer:       /CN=A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41
Certificate serial:       6EA09914D06179758DB8FB85551190BC5E487F38
Authority key identifier: A8:DE:9D:1A:4E:99:DC:F1:91:4B:91:6B:9F:E6:68:2E:D4:71:EC:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/3133312e3139362e3235322e302f32322d3232203d3e20313339323335.roa
Signing time:             Tue 04 Feb 2025 18:20:15 +0000
ROA not before:           Tue 04 Feb 2025 18:15:15 +0000
ROA not after:            Tue 03 Feb 2026 18:20:15 +0000
asID:                     139235
IP address blocks:        131.196.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a0:99:14:d0:61:79:75:8d:b8:fb:85:55:11:90:bc:5e:48:7f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41
        Validity
            Not Before: Feb  4 18:15:15 2025 GMT
            Not After : Feb  3 18:20:15 2026 GMT
        Subject: CN=4CC83EB73D3A62FB909B507313C56C1A8540AB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:ab:34:eb:42:2c:a4:fe:58:b7:01:c9:64:
                    c5:f1:86:b9:cb:dd:57:94:69:0f:d5:91:ba:c9:3c:
                    53:a8:19:b7:f4:11:38:79:84:91:a2:9d:af:06:00:
                    77:01:3c:b5:9f:ab:23:75:45:98:71:7f:9f:84:03:
                    8c:ea:07:d2:d7:06:21:ce:9e:16:a6:9f:03:80:1c:
                    b5:15:54:f5:2f:ba:96:4a:a1:21:18:82:83:9e:5c:
                    f5:62:1f:86:85:6b:d6:66:c8:92:f8:f4:19:e2:f3:
                    9a:53:81:32:4d:ec:a3:0d:c0:bc:42:c4:ae:1a:c3:
                    e8:02:76:48:63:94:ad:9a:ba:ee:66:fb:9c:65:fb:
                    14:1a:ee:ac:57:0e:02:5e:72:5b:63:29:6e:96:4a:
                    df:d2:26:46:86:c4:ea:29:07:7d:35:73:19:49:78:
                    46:bd:21:57:ba:44:5e:80:3f:10:59:8a:30:b0:33:
                    7b:02:d1:97:1e:ec:67:47:6e:c5:17:88:03:f5:cc:
                    c7:e9:8e:95:fb:0a:35:99:94:ae:9f:91:4a:62:9e:
                    d1:e6:4d:fc:d7:61:16:e5:04:42:d4:20:17:00:40:
                    80:cb:fd:4e:11:21:a4:81:08:bb:d9:bf:d8:31:69:
                    08:1b:19:fc:69:74:3f:5b:d2:f7:8c:67:3f:48:20:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C8:3E:B7:3D:3A:62:FB:90:9B:50:73:13:C5:6C:1A:85:40:AB:2B
            X509v3 Authority Key Identifier:
                keyid:A8:DE:9D:1A:4E:99:DC:F1:91:4B:91:6B:9F:E6:68:2E:D4:71:EC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/3133312e3139362e3235322e302f32322d3232203d3e20313339323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:1a:a4:89:83:41:c0:ed:80:06:f4:86:4a:8d:2a:6e:76:75:
         02:7f:3f:c8:4b:c3:e5:b5:a2:fa:f5:b2:cb:58:84:90:44:b6:
         64:ad:49:47:4f:70:e9:2a:50:20:9a:c6:8b:17:3f:8a:b2:f7:
         69:d1:2a:68:6b:db:d4:10:e7:18:3e:c8:24:0f:f3:56:df:7d:
         83:44:21:6f:48:92:b8:e8:02:ea:46:d9:e2:84:e8:33:9e:58:
         32:a3:2f:28:28:de:bf:5f:0c:1f:07:73:e9:27:6a:41:d9:bf:
         81:a5:f3:1a:48:ec:16:5b:90:b9:d5:7e:52:61:4d:f6:fd:58:
         47:5c:53:d5:7b:ad:a2:63:20:fd:bb:53:01:83:27:b7:22:ed:
         ca:83:db:5f:e8:21:9d:6e:76:ef:3f:23:e2:b1:ad:37:ea:25:
         9f:cf:fe:3c:65:0d:33:6d:fa:09:4d:9c:8c:de:71:50:54:31:
         ed:f6:d7:ac:01:aa:41:d0:6b:fd:fe:1c:85:6a:0b:26:08:63:
         3a:3b:97:7a:70:c3:e7:d2:cb:0a:a9:9e:44:8b:c5:8c:85:6f:
         5a:d6:d0:a4:a6:79:20:d2:a4:60:c1:f7:8f:be:83:58:eb:57:
         bf:e4:c3:b1:e3:d1:b0:b3:34:b2:8b:ae:ac:21:3e:f2:08:92:
         99:d2:8f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:10 2025 by rpki-client