Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31302e3132382f32352d3235203d3e20323635363332.roa
File:                     3133312e3139362e31302e3132382f32352d3235203d3e20323635363332.roa (raw, json)
Hash identifier:          qsCdBFRaUGbZy6yMLiAQfah3zxEWbePProoZcr9mTFA=
Subject key identifier:   21:BA:04:A3:F9:D3:1A:10:75:05:B7:5D:3C:1D:00:5A:14:78:4C:1D
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       0F33C276500AD574417363754A5D7ECB2AF135C6
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31302e3132382f32352d3235203d3e20323635363332.roa
Signing time:             Tue 05 Mar 2024 17:56:25 +0000
ROA not before:           Tue 05 Mar 2024 17:51:25 +0000
ROA not after:            Tue 04 Mar 2025 17:56:25 +0000
asID:                     265632
IP address blocks:        131.196.10.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:33:c2:76:50:0a:d5:74:41:73:63:75:4a:5d:7e:cb:2a:f1:35:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Mar  5 17:51:25 2024 GMT
            Not After : Mar  4 17:56:25 2025 GMT
        Subject: CN=21BA04A3F9D31A107505B75D3C1D005A14784C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:e2:b8:9d:45:61:2b:0e:6e:78:8b:13:88:
                    44:e1:35:0b:e3:80:2e:5d:9d:b8:5e:99:f0:62:be:
                    c4:95:82:f3:bb:29:e3:97:84:26:c4:92:e0:7c:a8:
                    87:6b:e7:8e:57:39:c6:b8:5e:c4:41:bd:58:e2:ef:
                    4a:c5:54:65:a9:6d:a5:54:38:ab:4f:9b:40:2d:5a:
                    44:90:45:c8:19:cf:79:d2:0b:51:8d:37:07:3d:ea:
                    4e:65:2b:17:3d:fe:a2:c9:e8:1c:7d:52:81:ca:2b:
                    b3:da:cd:ae:e5:c1:ca:8b:dc:63:f0:c0:ff:46:3d:
                    e6:f1:f8:93:7b:cd:b7:42:04:80:ce:4e:d4:5d:b4:
                    ca:a1:22:97:30:48:c7:32:36:a8:cd:79:2b:1b:b5:
                    f8:cc:1a:f2:00:97:ae:39:33:de:13:4b:c4:93:7d:
                    f4:d7:9b:ae:61:04:0a:98:28:05:2a:c8:3a:5b:eb:
                    4b:42:c0:ba:ec:28:e2:37:7c:4e:ea:2f:5e:19:12:
                    76:05:0e:ef:18:66:73:68:1b:15:88:a3:f1:f1:79:
                    76:33:7e:1c:eb:78:c4:81:1f:d2:44:2a:2c:41:e4:
                    04:cb:9c:03:59:2f:79:32:fd:50:ab:78:ab:bc:b7:
                    ab:14:17:86:54:ea:d9:8d:26:ea:61:a0:08:be:d4:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BA:04:A3:F9:D3:1A:10:75:05:B7:5D:3C:1D:00:5A:14:78:4C:1D
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e31302e3132382f32352d3235203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.10.128/25

    Signature Algorithm: sha256WithRSAEncryption
         38:b2:ff:82:d9:7a:0c:48:43:70:e0:5b:a1:8e:27:a4:1b:8e:
         2d:4b:3e:63:9e:34:74:84:7b:b8:73:e2:2c:77:fa:3c:a2:4e:
         02:74:d6:83:ee:66:ff:64:e4:9f:56:57:10:5c:61:8f:bd:a0:
         58:1b:cd:7e:8f:89:82:76:3b:87:af:c9:cf:85:be:98:4f:dd:
         c5:ff:f7:6b:f5:12:2d:94:11:62:35:59:92:ef:ae:96:f0:41:
         c1:f1:ca:21:68:41:da:69:eb:8a:97:4a:3b:97:9e:f3:b2:e5:
         54:3d:70:bd:8a:ef:e2:6e:00:4a:c9:4e:87:8f:57:5b:71:76:
         9c:05:50:36:6c:a2:bc:31:31:33:32:3f:d0:f5:e1:e4:ca:8a:
         3f:8c:72:09:8a:a1:20:f5:22:4d:3e:f1:68:16:55:3c:9d:f2:
         9e:1e:48:92:d6:9d:bc:4c:67:b3:2a:85:cb:36:b5:81:bf:f3:
         32:0b:86:f3:b2:69:42:88:b0:a6:bb:8d:61:db:56:f7:29:bb:
         d1:29:e2:02:13:20:9e:60:2b:60:e5:47:b2:dd:52:d8:a9:09:
         7a:97:90:f3:09:d4:9d:04:94:4d:81:38:4f:f0:94:61:af:61:
         04:6d:15:a0:50:71:c6:b3:5b:ca:c3:cb:fe:af:2e:7a:d1:93:
         b5:82:8a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 10:15:49 2024 by rpki-client on console-ams.rpki-client.org