Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3133312e302e37322e302f32322d3232203d3e203133333335.roa
File:                     3133312e302e37322e302f32322d3232203d3e203133333335.roa (raw, json)
Hash identifier:          Gv4K2Y8evYsutBOa1QMafzzFxWy16H7IPBfNPJkyesg=
Subject key identifier:   94:8D:3C:D9:43:D1:45:65:D7:23:E5:A7:2F:CC:A9:56:3C:C9:E4:25
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       545AB859DC772D85990CAB3E2634C9D0A25881D8
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3133312e302e37322e302f32322d3232203d3e203133333335.roa
Signing time:             Mon 31 Mar 2025 16:13:23 +0000
ROA not before:           Mon 31 Mar 2025 16:08:23 +0000
ROA not after:            Mon 30 Mar 2026 16:13:23 +0000
asID:                     13335
IP address blocks:        131.0.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5a:b8:59:dc:77:2d:85:99:0c:ab:3e:26:34:c9:d0:a2:58:81:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Mar 31 16:08:23 2025 GMT
            Not After : Mar 30 16:13:23 2026 GMT
        Subject: CN=948D3CD943D14565D723E5A72FCCA9563CC9E425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:6e:e5:56:0c:29:2d:30:93:01:ae:de:dc:
                    64:69:d9:a2:88:ed:d3:c4:4d:5b:51:b7:c8:dc:2c:
                    0e:88:b1:74:6d:7d:8e:05:16:89:6e:11:86:14:0d:
                    17:14:ed:1b:97:7c:68:85:8d:7c:ec:a0:86:9d:a9:
                    86:46:2b:d8:b8:57:93:7d:70:9b:be:74:43:a4:ad:
                    69:1b:99:e9:9b:8a:18:d9:52:d6:c4:d3:05:63:1e:
                    9c:0d:d7:1b:ea:ae:2b:74:ff:c2:59:b1:ab:aa:f0:
                    22:63:7c:d5:42:1f:a5:d5:47:b9:ca:8e:5c:d2:64:
                    58:27:ea:28:13:e2:cc:3f:18:e8:48:8e:93:d0:9e:
                    29:27:33:e7:6b:87:09:7d:9c:01:07:ab:18:f0:57:
                    c4:4e:a7:da:a7:cb:f7:df:d3:a2:04:8a:43:73:78:
                    30:4c:25:81:ff:e6:e9:6e:4b:f6:0e:e5:c0:b6:6e:
                    ce:30:07:c4:18:28:54:46:88:b1:22:5a:96:05:54:
                    64:dc:7c:41:7b:72:a2:01:a4:5c:54:0d:01:72:e3:
                    0f:60:d6:6f:98:fe:80:58:75:45:82:e2:a6:50:97:
                    01:e4:66:8d:24:11:80:86:49:d4:ec:cb:73:8b:c3:
                    68:57:3d:75:52:b8:f7:c1:84:95:1c:41:c1:c5:fc:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8D:3C:D9:43:D1:45:65:D7:23:E5:A7:2F:CC:A9:56:3C:C9:E4:25
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3133312e302e37322e302f32322d3232203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:fe:89:17:7d:a6:a6:8c:13:15:b3:cd:bf:52:4a:15:05:6e:
         c6:d9:b6:43:73:e2:e5:e4:fb:4d:14:3b:ab:e4:0c:41:95:51:
         23:7c:fd:b4:3c:02:a1:41:18:dc:6a:6d:27:43:35:6b:b6:02:
         0e:21:41:7f:19:06:f4:ab:c8:11:27:3e:6b:ff:92:95:47:d6:
         01:d3:04:a1:a6:2d:a6:34:61:39:67:23:37:ee:6c:3e:fe:38:
         2c:e6:76:a9:75:7c:f3:d7:78:73:5f:26:a1:40:2d:22:f0:86:
         d3:6a:04:fc:63:08:01:2a:ea:c3:3a:a0:58:a2:5d:2e:3e:1e:
         d1:4c:55:45:00:46:33:c4:b7:e7:a8:89:67:cb:a2:37:d8:15:
         0e:4e:91:18:aa:db:79:fb:47:3c:f9:7e:b8:44:2e:fc:dd:91:
         e0:b6:aa:1a:9c:af:2c:e5:e1:1e:9f:c8:ac:fc:34:50:04:6c:
         9e:5b:94:31:15:aa:1c:b0:e5:80:0c:11:64:02:96:8c:b2:5f:
         e4:1a:36:c5:ec:b5:4b:cd:3b:80:ef:92:e1:a7:2c:80:ac:24:
         38:03:46:b6:ea:81:8b:7b:49:5e:d4:2e:85:c9:03:19:3a:09:
         86:17:73:af:00:a4:11:73:3f:06:d7:d0:f1:b5:4a:53:8b:59:
         d1:83:c0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:30 2025 by rpki-client