Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32352d3235203d3e20323635363332.roa
File:                     3133312e3139362e382e302f32352d3235203d3e20323635363332.roa (raw, json)
Hash identifier:          /qyiMOpcnSVD7xgXeGuZlOAaNGPNrlK5Lg1x4iiNmvI=
Subject key identifier:   E3:91:4E:23:FC:9B:B0:45:86:BC:B4:6F:5B:E0:1E:61:77:B2:A4:BF
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       027C23CFB42B9CB2100540F19B9AA8C1E913DC27
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32352d3235203d3e20323635363332.roa
Signing time:             Tue 05 Mar 2024 17:56:24 +0000
ROA not before:           Tue 05 Mar 2024 17:51:24 +0000
ROA not after:            Tue 04 Mar 2025 17:56:24 +0000
asID:                     265632
IP address blocks:        131.196.8.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7c:23:cf:b4:2b:9c:b2:10:05:40:f1:9b:9a:a8:c1:e9:13:dc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Mar  5 17:51:24 2024 GMT
            Not After : Mar  4 17:56:24 2025 GMT
        Subject: CN=E3914E23FC9BB04586BCB46F5BE01E6177B2A4BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:d9:aa:d3:53:86:84:a8:03:ca:e9:02:c4:
                    08:35:e3:3c:bd:fa:18:36:c0:2e:ca:f7:ca:86:43:
                    7a:ad:23:b8:ee:ce:ee:ec:2c:26:b2:c3:2c:4c:fb:
                    70:4c:c5:96:6c:1e:e9:52:7f:0d:ae:08:37:9c:f9:
                    72:03:15:92:33:25:9c:ab:5d:7a:b0:15:10:ad:c3:
                    fc:e2:5e:93:37:61:41:22:e4:ce:7b:db:6b:a2:ad:
                    b2:33:d7:bf:dd:ad:32:a8:2f:7b:bc:5f:50:ae:78:
                    ef:56:a2:49:31:90:58:26:fa:dc:fa:3b:82:66:59:
                    b5:96:b2:24:2e:69:64:20:ec:9c:af:54:56:40:4e:
                    e3:2a:ec:fa:c4:cd:77:3a:6a:21:1b:4b:11:ea:93:
                    b1:59:b3:cb:15:52:53:76:33:a9:5e:4f:41:3e:1b:
                    01:c6:4d:25:24:db:ac:52:d9:18:c3:2a:57:6e:e4:
                    ac:9b:99:42:5e:d4:22:71:59:9b:a5:9e:58:a3:a4:
                    c6:56:3a:e1:28:82:06:06:b4:76:a8:e5:b3:b2:94:
                    1a:fb:e3:f9:35:fc:bf:a1:18:84:2b:fd:2b:6e:67:
                    c2:4a:e8:22:50:df:38:f9:1c:da:cc:2a:bc:94:fe:
                    14:e4:50:d8:76:8d:8f:bd:9a:b6:b8:44:11:90:2e:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:91:4E:23:FC:9B:B0:45:86:BC:B4:6F:5B:E0:1E:61:77:B2:A4:BF
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32352d3235203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.8.0/25

    Signature Algorithm: sha256WithRSAEncryption
         33:78:b2:74:65:4f:de:19:e5:b6:fe:48:c4:02:be:38:01:bf:
         8e:04:5a:6f:df:f0:be:de:50:82:eb:3f:90:67:99:0e:46:f7:
         39:3f:67:37:ab:74:68:23:af:75:14:fd:ce:53:cd:64:c7:4e:
         f7:d5:4c:85:aa:a4:7f:26:c2:7f:26:45:8f:92:70:f5:fd:24:
         f1:6c:fa:f3:16:95:40:d8:d4:37:dd:e8:18:66:83:ba:b0:bb:
         d6:7c:42:4d:9c:c9:67:bd:0f:ca:da:17:ad:49:c2:c5:fb:aa:
         34:96:58:d8:52:a3:95:f7:2a:98:6b:da:05:ca:a8:a5:b5:7e:
         29:15:ea:17:57:3f:8d:bd:eb:9a:b0:d1:06:85:d4:34:ce:c6:
         8d:c5:92:c0:cf:1f:6a:75:2c:aa:7b:5f:f7:10:7d:8a:e5:ab:
         1d:3c:74:1f:b3:e6:85:9a:01:76:08:c1:a0:97:be:45:4c:c2:
         19:0f:36:7a:54:2f:4c:14:ff:65:26:e0:6c:b3:b7:10:23:3a:
         c1:47:ad:1a:82:69:45:04:64:77:b3:20:a7:16:59:77:75:31:
         9f:39:74:5a:3d:f9:a1:0a:5c:90:ba:f4:11:f1:cb:b2:bf:9f:
         61:5a:1e:39:dd:81:38:09:02:ad:17:1a:34:60:a9:95:ae:ca:
         54:a8:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org