Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e392e3132382f32352d3235203d3e20323635363332.roa
File:                     3133312e3139362e392e3132382f32352d3235203d3e20323635363332.roa (raw, json)
Hash identifier:          Jrx6XWR8J3+dF9CV/SquRBfhJ2Pc9ROCT8HSncwcXyA=
Subject key identifier:   78:69:38:AF:A5:30:FC:AA:7C:8E:76:0A:1C:59:22:D9:6E:2F:3A:1E
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       0F0A6EEF07A81120F3D2675622760CD278329740
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e392e3132382f32352d3235203d3e20323635363332.roa
Signing time:             Tue 05 Mar 2024 17:56:22 +0000
ROA not before:           Tue 05 Mar 2024 17:51:22 +0000
ROA not after:            Tue 04 Mar 2025 17:56:22 +0000
asID:                     265632
IP address blocks:        131.196.9.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:0a:6e:ef:07:a8:11:20:f3:d2:67:56:22:76:0c:d2:78:32:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Mar  5 17:51:22 2024 GMT
            Not After : Mar  4 17:56:22 2025 GMT
        Subject: CN=786938AFA530FCAA7C8E760A1C5922D96E2F3A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:f8:3e:5e:87:bb:50:ea:6d:ba:b4:ab:88:
                    c5:b6:f8:24:ed:22:98:19:ce:7b:f7:02:69:6e:3b:
                    df:9f:4a:8b:3f:7f:ff:2f:31:56:e1:21:11:57:a9:
                    ca:8d:33:98:7e:dc:f2:85:3a:bd:77:0f:1e:98:5e:
                    65:ac:f4:d0:4b:6f:30:fd:e1:ce:84:3e:f5:4b:f9:
                    a9:30:9c:e5:5c:f3:54:00:c5:08:81:90:ba:c3:89:
                    17:85:8a:9c:02:10:e7:e1:a9:fb:26:e6:c3:19:df:
                    e3:cc:03:bf:70:07:a6:b9:3e:34:ef:e5:ce:9e:cb:
                    e4:10:9f:37:9e:dc:d0:ff:1d:27:84:4e:37:8c:9b:
                    1b:d5:03:28:a3:03:e8:23:94:f0:58:f5:99:37:5a:
                    78:7b:6d:c4:46:00:31:ea:40:33:d3:84:5c:94:ce:
                    c6:f3:10:6f:97:0f:97:65:1c:0a:37:26:6d:3b:d7:
                    95:d9:b0:41:20:cd:b1:4b:63:bb:db:36:07:e3:15:
                    e7:e9:f3:f3:b3:2c:7c:b4:e3:a9:06:ff:7d:5d:c7:
                    82:71:22:aa:c4:93:02:64:83:c2:83:52:20:85:9b:
                    1c:e2:75:eb:66:e4:27:cf:b8:8b:01:02:e1:fe:66:
                    05:24:3f:92:78:4e:99:84:27:aa:17:1f:aa:a6:ff:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:69:38:AF:A5:30:FC:AA:7C:8E:76:0A:1C:59:22:D9:6E:2F:3A:1E
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e392e3132382f32352d3235203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.9.128/25

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:19:ea:b1:d7:f2:7d:fe:28:cb:8a:6e:25:02:eb:ab:86:
         13:a4:8c:e9:fc:ab:2b:17:79:c8:17:e3:60:c3:bb:59:d1:1d:
         01:63:a0:8d:48:aa:17:9d:af:3c:f6:70:38:7d:e0:09:82:4e:
         7a:f6:51:4c:4c:98:5c:d2:7a:8c:0d:44:28:bc:82:4d:7a:83:
         ef:29:2c:6d:90:81:b2:2b:2e:c7:61:8b:4a:5c:5f:19:cc:fe:
         91:f0:53:f1:ea:18:c1:96:18:8c:91:47:89:cc:78:ac:32:a5:
         ea:38:ce:20:64:79:f1:ed:2e:38:f2:1b:17:a5:b1:2a:40:54:
         ea:2d:03:86:b2:53:03:84:17:dc:d1:af:e6:f8:c4:94:40:54:
         a7:c2:53:89:73:61:d0:b6:5d:a5:4d:c1:ec:91:07:90:f0:c7:
         69:93:f2:8a:cd:f9:22:40:97:4c:d0:49:f9:e5:fc:cf:43:93:
         1c:48:e9:3e:c3:12:18:5a:4f:0b:83:bf:0f:07:ae:00:7b:ba:
         0d:8f:c4:6b:56:14:d8:7e:56:9b:dc:9d:12:2f:cf:94:bf:fc:
         11:a8:8e:2a:1c:63:19:86:5f:84:f0:6e:3e:78:7b:da:9c:63:
         96:e5:bc:72:a8:c8:22:c1:fa:f1:0b:22:0b:1a:29:c6:dd:a1:
         2a:6e:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org