Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3133312e3130302e3136302e302f32322d3234203d3e203237363635.roa
File:                     3133312e3130302e3136302e302f32322d3234203d3e203237363635.roa (raw, json)
Hash identifier:          s6wtZHAEsbAHAz7sq3uhYPFc7/19w+yGOfXhCZ+t278=
Subject key identifier:   9C:64:DA:AF:26:F5:71:F0:FA:21:F3:08:08:D2:30:D6:E7:95:9B:54
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       363ADE8F240EFDC01949171375DF5B928841F905
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3133312e3130302e3136302e302f32322d3234203d3e203237363635.roa
Signing time:             Tue 04 Feb 2025 18:36:48 +0000
ROA not before:           Tue 04 Feb 2025 18:31:48 +0000
ROA not after:            Tue 03 Feb 2026 18:36:48 +0000
asID:                     27665
IP address blocks:        131.100.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3a:de:8f:24:0e:fd:c0:19:49:17:13:75:df:5b:92:88:41:f9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Feb  4 18:31:48 2025 GMT
            Not After : Feb  3 18:36:48 2026 GMT
        Subject: CN=9C64DAAF26F571F0FA21F30808D230D6E7959B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:64:55:30:2c:8d:75:93:58:90:fe:6d:96:
                    c4:4f:32:04:bc:cc:4b:5d:09:e7:13:dc:2d:85:91:
                    46:81:4e:94:9c:1f:21:50:c1:86:d3:00:9c:f2:41:
                    d3:d1:cb:f2:5f:53:69:f5:6b:fa:3c:37:9a:ef:f5:
                    82:66:60:7a:e7:8e:d5:4c:81:6c:35:f0:ce:e4:8c:
                    3d:92:f0:2f:34:34:57:ac:25:76:6f:5d:03:99:36:
                    b4:67:b6:1f:56:05:3b:32:78:c4:37:3d:48:ee:4b:
                    23:e5:ee:46:6e:69:76:a2:ea:07:e8:06:bb:b6:0f:
                    4c:f4:95:ce:42:1e:8a:ed:38:6b:36:eb:62:8a:1d:
                    94:a3:bd:35:18:3a:f9:b2:e4:6a:8d:74:c2:88:0e:
                    c0:2e:68:c7:fc:ff:3e:73:08:3d:d4:7f:2f:ae:e5:
                    53:d5:98:45:12:5f:23:d3:99:39:f5:c1:5d:b8:8e:
                    ac:b8:7b:64:e9:48:60:c6:d0:7f:69:e7:37:61:19:
                    bf:a6:e2:96:0a:52:2f:43:ce:1b:96:62:4b:3b:cb:
                    01:fb:26:67:66:8a:47:ad:76:9d:78:f5:34:a0:4b:
                    ed:a1:36:58:fa:c8:42:79:c3:fb:4f:d2:08:41:03:
                    7a:0d:67:60:60:cc:f9:1c:4f:fc:7b:d3:cb:d3:09:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:64:DA:AF:26:F5:71:F0:FA:21:F3:08:08:D2:30:D6:E7:95:9B:54
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3133312e3130302e3136302e302f32322d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:d8:0c:1a:4a:5f:6a:83:00:4c:53:45:83:6b:a6:24:ed:08:
         6b:71:e0:7c:e7:ae:a4:75:dd:9a:84:2d:4b:44:ed:a6:2f:86:
         90:ea:93:a8:f0:18:a4:19:63:45:0b:93:6c:22:68:95:a4:2a:
         d6:b3:ec:5c:72:79:ac:1b:0d:5f:04:5c:2b:70:f7:1e:dd:af:
         8a:c7:a9:5a:44:82:b5:9d:c2:61:c4:62:39:7b:c0:79:7f:69:
         75:2a:45:30:66:d8:b7:6b:24:7a:fe:57:3a:4e:58:33:fc:2c:
         74:8d:f8:d8:5d:88:b1:06:86:92:ef:0d:1d:97:b1:79:9f:32:
         a2:05:02:9e:6f:31:23:cd:4e:b5:0d:05:73:f4:f2:02:b0:69:
         0f:c7:c0:85:f4:d2:ce:70:f6:07:de:df:fb:d0:55:c7:a1:56:
         0a:37:f4:cf:b8:29:61:52:07:fe:a3:fc:ee:ce:8e:f8:5b:df:
         e1:6e:18:2c:ae:f6:9b:ce:16:16:15:0a:6b:bc:3b:70:e9:73:
         84:10:55:af:7d:64:51:82:22:07:68:a7:17:37:1e:b6:39:3d:
         ae:f6:61:ea:e1:50:f8:76:10:2d:eb:a7:81:7b:71:17:a4:72:
         01:76:57:eb:b3:6b:14:3d:8d:8c:aa:a5:c3:f0:cd:ff:b2:7f:
         a8:ec:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:56:15 2025 by rpki-client