Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31302e302f32352d3235203d3e20323635363332.roa
File:                     3133312e3139362e31302e302f32352d3235203d3e20323635363332.roa (raw, json)
Hash identifier:          eDTGfKHDzW3tz/idz07f15TzgaLOg8gngQqKfd4gXDM=
Subject key identifier:   B8:35:7A:0A:8E:3A:A0:7A:26:F3:A5:1C:83:12:C1:B6:C8:89:C5:78
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       3D46FAE119E5CB23A2A0FE2000214870B7EABCD4
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31302e302f32352d3235203d3e20323635363332.roa
Signing time:             Tue 05 Mar 2024 17:56:26 +0000
ROA not before:           Tue 05 Mar 2024 17:51:26 +0000
ROA not after:            Tue 04 Mar 2025 17:56:26 +0000
asID:                     265632
IP address blocks:        131.196.10.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:46:fa:e1:19:e5:cb:23:a2:a0:fe:20:00:21:48:70:b7:ea:bc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Mar  5 17:51:26 2024 GMT
            Not After : Mar  4 17:56:26 2025 GMT
        Subject: CN=B8357A0A8E3AA07A26F3A51C8312C1B6C889C578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:94:75:7c:20:fb:88:11:af:93:4b:67:e4:
                    8b:6f:79:2d:3c:a9:5e:18:47:cb:ab:8c:6f:fe:89:
                    8b:b6:2e:ab:a4:cd:41:46:55:64:df:89:3c:ae:93:
                    ab:f9:11:d9:e3:80:04:74:9d:4c:98:ed:00:37:75:
                    c4:19:58:0a:2f:c1:fe:90:78:a1:46:64:bd:74:d0:
                    4c:1e:04:69:5d:d1:89:dc:47:cc:34:3e:42:4e:77:
                    a7:80:b5:22:79:38:fe:b7:79:ea:50:ff:83:75:02:
                    b0:1d:da:a2:02:25:79:01:43:0d:6c:0e:ab:65:d6:
                    dd:da:f1:ac:90:89:74:7d:07:5d:bb:68:68:0c:c5:
                    50:df:77:ee:35:81:f2:c7:0c:3d:41:38:e7:71:d7:
                    d4:84:57:ab:35:e7:1b:43:d1:d4:d8:30:c3:87:a5:
                    41:e2:34:2f:e4:de:91:ec:11:d9:71:14:83:bc:fa:
                    8c:53:ab:3c:ed:ac:9e:0d:2a:53:36:e0:fe:8e:5f:
                    d7:37:17:e1:47:41:89:ac:41:68:fd:a5:55:46:03:
                    81:d1:88:a5:49:13:5e:7c:18:f8:e9:a2:8e:6c:1c:
                    c7:1c:82:b0:0f:2f:ef:a1:23:20:69:25:24:6c:31:
                    96:00:37:5a:ab:e7:f1:ab:55:e2:f8:05:ce:a3:0a:
                    97:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:35:7A:0A:8E:3A:A0:7A:26:F3:A5:1C:83:12:C1:B6:C8:89:C5:78
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31302e302f32352d3235203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.10.0/25

    Signature Algorithm: sha256WithRSAEncryption
         50:02:bd:69:7e:88:24:ba:0c:9f:24:74:fd:9b:d7:0e:b7:37:
         e9:62:f0:fa:03:a2:cb:8c:6e:2d:a8:ed:0d:69:79:5d:77:2f:
         12:8e:dd:21:ca:cb:fa:60:0b:49:97:07:b8:be:6f:f5:9b:27:
         7c:7e:92:ed:63:e9:d5:df:a0:ce:80:9e:a8:d0:62:7b:51:6c:
         d0:fc:a8:4c:4c:f3:96:38:15:c5:f6:71:8f:37:38:ed:d2:ba:
         fe:a3:af:2f:6c:11:da:e3:28:9b:d2:0e:3d:7b:81:13:42:71:
         b8:5e:42:99:85:cf:24:df:4f:ac:ae:80:c6:40:a1:c8:dd:c1:
         0d:ad:2c:6a:ef:38:58:92:9e:db:98:27:2f:a0:97:e5:ad:2f:
         56:76:31:ba:ce:9f:91:9a:23:1c:98:12:89:04:1f:54:7c:84:
         c3:e8:15:ee:dd:4e:fe:02:90:44:ba:37:0c:e8:be:d8:82:ad:
         e4:6f:11:1f:0c:81:7a:fa:f8:eb:7c:c9:a9:a9:72:45:a0:35:
         9b:fb:65:33:2f:36:dd:19:74:38:83:01:1d:58:50:be:5b:48:
         f0:7e:49:68:97:9e:65:1a:10:9d:8a:6a:99:0c:7b:c5:e3:6c:
         1c:93:3b:38:5b:a6:3e:91:c6:b2:1c:8d:b0:17:c8:0c:c9:98:
         b0:b7:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org