Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31302e302f32352d3235203d3e20323635363332.roa
File:                     3133312e3139362e31302e302f32352d3235203d3e20323635363332.roa (raw, json)
Hash identifier:          s7D6FIs1qywRmVqJTTZI16WlnGFr1q3sAmpqDTP5zss=
Subject key identifier:   B5:15:77:5F:F9:1E:8A:AE:B9:6D:7E:7E:12:34:AA:40:D2:36:DF:C4
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       66F3F34C85E8076B4BA7ED247DAC5AA585F2295C
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31302e302f32352d3235203d3e20323635363332.roa
Signing time:             Tue 04 Feb 2025 18:54:27 +0000
ROA not before:           Tue 04 Feb 2025 18:49:27 +0000
ROA not after:            Tue 03 Feb 2026 18:54:27 +0000
asID:                     265632
IP address blocks:        131.196.10.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f3:f3:4c:85:e8:07:6b:4b:a7:ed:24:7d:ac:5a:a5:85:f2:29:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Feb  4 18:49:27 2025 GMT
            Not After : Feb  3 18:54:27 2026 GMT
        Subject: CN=B515775FF91E8AAEB96D7E7E1234AA40D236DFC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:0c:85:be:56:a9:1d:97:fa:f7:2e:f3:db:
                    5a:0e:bc:cf:54:52:15:63:c0:8d:7e:9b:3d:1e:6f:
                    2c:8b:bf:d3:18:57:7e:8a:8e:5c:8b:bc:e9:93:a9:
                    86:ca:ae:ea:87:4e:8a:cc:83:b9:95:fe:d2:2a:78:
                    ac:cb:36:4c:65:45:5c:25:f8:16:bc:f7:59:2c:bb:
                    e8:eb:20:c2:9a:16:e7:05:05:54:12:4a:f0:6e:e6:
                    c9:06:af:d9:32:e6:2e:6c:44:52:d2:ca:fe:2f:53:
                    e7:82:cf:d7:58:a1:6c:e4:62:7d:fd:ca:d7:3e:e3:
                    45:06:72:0a:46:61:25:f3:1b:64:66:a1:11:6b:62:
                    1c:d9:2e:fa:01:e5:49:91:1f:6f:62:44:dd:5b:e4:
                    68:d4:7b:50:e0:98:40:dc:69:ad:41:9c:55:b5:ec:
                    71:64:83:ad:2c:25:d8:c2:ad:41:93:53:bd:43:19:
                    d0:1b:12:43:06:f8:78:b4:0b:e8:a4:0c:05:2c:7f:
                    dd:e7:33:46:7f:84:e8:be:71:83:19:24:32:df:da:
                    b3:22:5e:8e:df:8f:3e:20:43:1d:e2:d3:6d:6e:c7:
                    7b:ef:97:82:c3:73:67:b1:d8:b8:64:30:c9:99:0a:
                    c0:8e:b9:72:19:ed:08:9f:dc:44:da:3c:14:ab:81:
                    9a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:15:77:5F:F9:1E:8A:AE:B9:6D:7E:7E:12:34:AA:40:D2:36:DF:C4
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31302e302f32352d3235203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.10.0/25

    Signature Algorithm: sha256WithRSAEncryption
         a9:53:45:9d:d4:bf:21:e1:a0:91:e5:53:42:16:a2:53:2a:01:
         5d:78:4f:e6:2a:2f:8e:65:6f:cd:be:81:5e:2c:a6:f0:12:44:
         e5:cd:25:8f:c7:b4:3a:24:81:39:8a:31:4d:90:9b:33:db:f4:
         7d:92:ba:8f:20:14:c2:a1:2c:16:46:46:6c:f2:f1:61:e1:6e:
         7d:13:9a:2a:9c:8d:14:74:94:15:93:83:9e:63:27:41:53:fd:
         f5:56:88:9c:88:04:29:85:10:92:ab:f5:2c:29:43:4e:77:86:
         de:3e:1f:ad:af:48:98:cb:7c:b0:06:fa:3a:5f:b0:74:3d:b1:
         cf:b5:30:ad:be:6f:fb:4c:e2:8f:85:cd:5f:02:77:99:fc:aa:
         f7:3a:30:07:05:3b:80:7c:ee:82:b0:6e:15:f6:60:5a:c0:80:
         ad:15:22:4a:7a:ae:ad:69:81:94:15:07:30:8e:6d:1e:24:18:
         86:af:12:c6:db:42:c5:8e:ea:4c:b2:0b:da:6f:30:f6:82:13:
         b6:53:e1:12:ef:dc:3c:f7:5c:57:06:75:d9:6f:db:bc:01:0e:
         75:df:ca:01:14:bf:00:b7:c2:72:6a:6a:87:82:bd:cf:df:8c:
         3c:1f:69:6a:02:a9:31:11:d9:e4:0f:f1:b0:4d:f1:ce:62:71:
         80:3e:02:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:19:08 2025 by rpki-client