Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32322d3232203d3e20323635363332.roa
File:                     3133312e3139362e382e302f32322d3232203d3e20323635363332.roa (raw, json)
Hash identifier:          YeHE1HWEnk0zwvL/tMBMzUh9nxPX3uxGiThrB+UUulA=
Subject key identifier:   53:59:67:E6:E1:3B:02:06:B0:93:99:74:18:8E:84:1D:FD:DE:4F:35
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       439CA374C55C83A507B21BA7B457A4AE7E3E8FA6
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32322d3232203d3e20323635363332.roa
Signing time:             Tue 04 Feb 2025 18:54:26 +0000
ROA not before:           Tue 04 Feb 2025 18:49:26 +0000
ROA not after:            Tue 03 Feb 2026 18:54:26 +0000
asID:                     265632
IP address blocks:        131.196.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9c:a3:74:c5:5c:83:a5:07:b2:1b:a7:b4:57:a4:ae:7e:3e:8f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Feb  4 18:49:26 2025 GMT
            Not After : Feb  3 18:54:26 2026 GMT
        Subject: CN=535967E6E13B0206B0939974188E841DFDDE4F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:93:48:d4:42:f0:93:ad:a8:13:ab:3f:ae:
                    72:0b:3b:d2:07:cd:72:9c:30:80:cd:b3:ef:9f:8a:
                    fa:7c:f4:60:96:43:0e:1b:88:38:b0:21:8a:e0:5f:
                    2d:b5:de:b8:ff:1d:79:9c:28:78:10:9a:bc:85:02:
                    be:ad:21:78:16:91:e0:c4:39:40:66:76:d4:da:96:
                    bf:6f:e5:6c:2b:f1:75:2b:3b:44:47:46:da:84:7c:
                    17:6e:14:64:ae:89:9d:e5:5e:ae:77:91:b5:92:6e:
                    e6:18:ae:25:be:4c:8e:dd:b6:0d:00:e9:f9:9d:ea:
                    24:ce:e0:a1:e0:b1:37:b1:fc:ae:5e:54:c5:0f:50:
                    36:45:6c:14:8e:79:42:ae:7e:6d:e8:ed:c2:72:62:
                    f5:4a:76:07:ab:9d:90:67:dd:89:6a:30:91:9c:12:
                    1a:78:9c:36:88:f1:c9:b9:5b:dd:e2:d8:e0:fc:3c:
                    1b:a7:15:55:3d:3b:f4:2d:f4:ab:3b:32:5a:41:e2:
                    e3:22:2a:ac:4a:2f:69:c3:93:c4:ff:85:55:94:ba:
                    ee:b6:38:88:70:02:08:96:58:a9:38:b5:a0:13:51:
                    de:a0:67:13:eb:03:50:b4:3d:99:b7:7d:dd:55:d4:
                    0a:6d:35:2e:e3:53:93:19:e7:8b:3d:09:62:7d:aa:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:59:67:E6:E1:3B:02:06:B0:93:99:74:18:8E:84:1D:FD:DE:4F:35
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32322d3232203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:be:73:c1:27:94:8b:1b:b3:64:7f:80:eb:ee:bd:3f:c7:3c:
         cb:72:b3:d4:59:1c:e1:da:80:0e:41:12:8a:e2:92:36:d2:02:
         a7:fb:eb:a4:e2:f3:fd:45:6d:73:68:b3:65:4e:9c:a3:8b:1f:
         b0:f8:97:32:c6:cb:2d:66:89:38:9b:bf:52:30:c3:d6:1a:37:
         c3:dc:bf:92:0d:d4:16:3e:93:f3:e0:93:3d:e9:ba:fd:b7:98:
         46:a7:f5:94:95:ae:f0:bb:97:d0:ba:76:aa:89:65:b3:84:97:
         c0:83:d9:6e:5b:ae:5c:8f:ad:13:90:98:5e:04:f3:3c:61:89:
         8a:8d:fa:b5:18:c7:6f:af:1b:ef:24:d2:58:5d:53:ce:16:63:
         b1:f4:c8:0c:37:56:ac:65:d0:84:9b:d5:be:45:72:ce:c5:a2:
         dc:8b:3c:8e:93:09:61:ed:05:2e:5c:0a:79:cb:84:12:97:e5:
         d6:2b:9a:20:9a:21:6d:d8:86:f4:96:71:98:bc:fd:e9:40:80:
         be:b7:51:9c:1e:06:33:ca:18:b4:a6:94:78:8b:c7:e7:2f:5f:
         bf:95:e9:c4:b2:35:72:40:f7:58:15:8f:6f:68:b7:5d:cb:31:
         a2:82:9e:51:94:c0:db:c3:39:1a:62:a4:4a:41:58:c1:59:44:
         0e:a0:6e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:47 2025 by rpki-client