Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/3133312e3139362e37322e302f32322d3234203d3e20323635373534.roa
File:                     3133312e3139362e37322e302f32322d3234203d3e20323635373534.roa (raw, json)
Hash identifier:          A3xXzpOaKCo1SvZ7OY8UcWolLdK5MkkAJljb47PcBNM=
Subject key identifier:   B0:4D:3E:34:BC:85:B7:22:AE:24:02:1D:37:23:72:C2:4B:9B:20:B0
Certificate issuer:       /CN=33887D466EF0243FA7B3C35800D70E2DB56A26A7
Certificate serial:       29EDCE1D679B2771D38469081A397D462672BF57
Authority key identifier: 33:88:7D:46:6E:F0:24:3F:A7:B3:C3:58:00:D7:0E:2D:B5:6A:26:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/3133312e3139362e37322e302f32322d3234203d3e20323635373534.roa
Signing time:             Wed 17 Sep 2025 23:00:00 +0000
ROA not before:           Wed 17 Sep 2025 22:55:00 +0000
ROA not after:            Wed 16 Sep 2026 23:00:00 +0000
asID:                     265754
IP address blocks:        131.196.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 22 Sep 2025 06:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ed:ce:1d:67:9b:27:71:d3:84:69:08:1a:39:7d:46:26:72:bf:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33887D466EF0243FA7B3C35800D70E2DB56A26A7
        Validity
            Not Before: Sep 17 22:55:00 2025 GMT
            Not After : Sep 16 23:00:00 2026 GMT
        Subject: CN=B04D3E34BC85B722AE24021D372372C24B9B20B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:95:df:31:df:6e:3d:af:14:69:11:16:40:
                    17:26:49:0a:6a:d0:ab:ac:2d:16:48:d5:0e:15:38:
                    b1:1d:72:82:bb:66:af:75:f9:e6:8b:f8:f1:0c:08:
                    79:a9:4d:97:93:51:9b:7d:c8:d5:14:29:dd:11:85:
                    e9:f8:ec:3f:37:c2:56:04:74:90:25:46:e2:a5:ed:
                    99:cc:4d:61:6a:38:54:52:53:b8:33:b4:d7:36:3e:
                    4d:15:06:03:f2:cc:30:8e:1c:c9:48:61:28:fc:20:
                    30:db:31:11:f8:e9:af:d9:52:56:4b:3e:ba:7c:a9:
                    49:f8:2b:37:23:01:19:b5:83:99:aa:e7:f9:12:98:
                    52:9c:60:51:1f:1c:7c:14:62:ee:ae:83:18:32:20:
                    9b:dc:3a:c7:5c:9e:9a:56:ce:b0:53:aa:13:00:2b:
                    10:7c:c7:03:5f:90:4a:9d:90:9e:19:8f:0a:8f:5e:
                    cc:3c:41:2f:9e:b8:b5:ae:2f:7f:d0:79:62:e5:59:
                    f8:0f:c4:bc:23:6b:7e:db:3d:b1:11:6d:b6:c0:0c:
                    ac:77:ce:bb:af:b6:16:49:c9:94:81:c9:6a:f4:89:
                    04:06:dc:66:fa:bb:f7:22:38:5c:90:56:6c:f5:7a:
                    eb:60:4a:ee:f6:f1:c3:7d:8a:88:33:46:90:32:1b:
                    d0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4D:3E:34:BC:85:B7:22:AE:24:02:1D:37:23:72:C2:4B:9B:20:B0
            X509v3 Authority Key Identifier:
                keyid:33:88:7D:46:6E:F0:24:3F:A7:B3:C3:58:00:D7:0E:2D:B5:6A:26:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33887D466EF0243FA7B3C35800D70E2DB56A26A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F11634603965311B3DF006F544D72B0256F304AEF76B35604E428AAC90C9DC47/0/3133312e3139362e37322e302f32322d3234203d3e20323635373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:65:09:5e:86:4b:f6:6a:a5:6e:31:36:31:78:aa:66:71:26:
         a0:d4:f2:03:50:d6:b6:b3:38:29:2e:c2:37:08:2b:df:c3:1f:
         02:8c:ae:7b:9c:fe:e5:f2:0e:c1:9a:70:10:b8:05:7b:04:5d:
         e4:b6:4b:d8:9a:03:f9:d2:48:11:70:7d:bb:63:62:57:1d:2e:
         83:9b:4a:d0:c3:39:ec:e5:81:43:40:e1:bc:04:e1:52:95:4a:
         8f:aa:f1:5a:fb:37:d7:8c:30:2c:79:f7:3c:99:00:03:50:2f:
         0f:17:7a:06:6e:a9:60:18:0f:a0:62:f3:3e:82:fe:a8:91:2e:
         93:17:67:94:3c:a4:ed:be:cb:78:61:c1:84:09:3f:8d:88:d8:
         8d:2e:47:ef:a2:10:33:be:2b:f7:ca:d1:32:66:8a:83:13:ca:
         bf:73:4b:27:9c:ca:f5:c8:bb:0f:8b:61:32:c1:48:16:3e:54:
         91:c2:7b:2f:b5:46:6e:56:f2:f8:f6:c5:37:f3:49:01:95:70:
         e6:31:6d:90:89:ef:d2:9b:7e:31:84:6c:cc:2d:60:6c:94:4f:
         0b:5d:5f:f4:86:4b:7d:f4:0f:8e:c0:38:bb:df:ae:38:d4:c5:
         fb:d9:bf:9a:41:e7:3a:34:57:b9:9a:10:d2:dc:e5:2f:c9:4e:
         d7:6e:e9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:29:38 2025 by rpki-client