Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/3133312e3139362e3235322e302f32322d3232203d3e203238343233.roa
File:                     3133312e3139362e3235322e302f32322d3232203d3e203238343233.roa (raw, json)
Hash identifier:          YcBKQE15BrrfItJY/eYnYJk3jdYzV+jL5cuVbO83tr4=
Subject key identifier:   E7:40:02:A6:CA:1F:39:4D:89:90:1C:F5:D5:9D:C3:DF:AA:49:27:BE
Certificate issuer:       /CN=A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41
Certificate serial:       1D7C6F5A11F8618F63A2B1F552A75F12FC00DEC7
Authority key identifier: A8:DE:9D:1A:4E:99:DC:F1:91:4B:91:6B:9F:E6:68:2E:D4:71:EC:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/3133312e3139362e3235322e302f32322d3232203d3e203238343233.roa
Signing time:             Thu 29 May 2025 07:40:00 +0000
ROA not before:           Thu 29 May 2025 07:35:00 +0000
ROA not after:            Thu 28 May 2026 07:40:00 +0000
asID:                     28423
IP address blocks:        131.196.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 13:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7c:6f:5a:11:f8:61:8f:63:a2:b1:f5:52:a7:5f:12:fc:00:de:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41
        Validity
            Not Before: May 29 07:35:00 2025 GMT
            Not After : May 28 07:40:00 2026 GMT
        Subject: CN=E74002A6CA1F394D89901CF5D59DC3DFAA4927BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:35:51:44:1d:b9:02:e5:e9:59:ea:f7:70:
                    a9:d0:94:1e:3b:0f:b8:85:c8:9d:5e:8f:95:94:e0:
                    aa:b4:1f:49:6f:7b:57:e2:3b:1a:0c:8d:31:6e:87:
                    47:ce:20:f5:1b:d1:d9:18:d2:3c:e5:56:13:db:c4:
                    21:f5:d5:e2:34:69:23:fe:fa:50:64:61:37:38:c1:
                    7f:56:41:33:62:aa:8a:9e:b7:7c:f8:c1:1b:1d:d1:
                    ca:c5:a0:1f:25:a2:47:e1:39:52:c1:c1:5a:ae:58:
                    a4:01:15:12:02:c9:2c:c3:00:d8:68:d9:f2:cc:32:
                    dd:9a:31:60:4d:61:35:15:ce:37:93:c6:b6:da:e0:
                    56:95:8a:f5:0f:05:6a:78:30:7d:60:61:e8:d2:09:
                    9c:52:c6:03:d5:54:33:07:d4:16:54:38:ce:51:a7:
                    a7:5f:72:7c:40:88:5f:9b:73:28:27:e5:29:e6:97:
                    d1:d4:75:d8:78:73:c4:03:33:19:e2:fc:ee:db:22:
                    53:bd:e8:b9:61:43:64:0a:43:f1:da:5c:5b:8f:e7:
                    df:3b:09:96:b3:da:ea:90:e4:dd:62:6d:36:90:32:
                    d4:e6:77:51:93:bc:8e:c5:a4:e0:58:c8:c0:3b:dd:
                    f2:1f:13:a5:77:f4:30:ed:a8:4b:1c:a1:6c:51:c9:
                    a3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:40:02:A6:CA:1F:39:4D:89:90:1C:F5:D5:9D:C3:DF:AA:49:27:BE
            X509v3 Authority Key Identifier:
                keyid:A8:DE:9D:1A:4E:99:DC:F1:91:4B:91:6B:9F:E6:68:2E:D4:71:EC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/3133312e3139362e3235322e302f32322d3232203d3e203238343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:d5:cd:b4:3f:b7:8b:18:3c:eb:c9:39:c4:60:b5:59:c9:44:
         65:7a:cb:3b:62:52:e8:ad:92:ea:e3:9a:52:93:2f:97:75:75:
         fa:12:17:79:7c:ce:31:8b:ac:be:90:35:c3:7b:46:c2:c3:c6:
         5e:56:ca:53:74:b3:59:75:87:c3:9f:e5:bc:56:1d:6a:e5:a9:
         54:01:1d:68:f3:cb:f4:09:f3:03:2c:2c:68:66:28:43:31:3d:
         a3:3f:f8:a5:36:ae:99:c0:ea:27:41:bd:ff:b9:ad:89:1b:5b:
         02:1c:05:73:0b:d1:97:7b:07:08:60:2e:13:df:24:01:04:0c:
         f7:f3:41:99:02:48:5a:6e:d1:32:c3:4b:02:bf:95:80:fb:98:
         82:7d:83:a5:be:96:85:12:f4:c6:cd:3d:da:0e:c8:6f:28:11:
         87:7c:0f:31:64:27:07:5e:27:7f:25:1e:aa:31:da:27:1f:b8:
         9e:94:88:32:17:1a:74:12:a1:82:97:bd:5c:e1:26:54:5d:46:
         b3:8a:b8:04:68:41:59:20:08:6a:30:d4:de:72:e9:ce:bf:9a:
         58:13:5c:d9:34:c7:c1:a9:29:03:51:d5:14:74:a5:26:f7:d4:
         12:e1:c5:b1:0f:32:06:69:5d:e5:5c:4d:5d:2d:5b:4c:6a:df:
         9c:a9:06:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:04:11 2025 by rpki-client