Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/3133312e3136312e3134382e302f32322d3232203d3e203238303934.roa
File:                     3133312e3136312e3134382e302f32322d3232203d3e203238303934.roa (raw, json)
Hash identifier:          9Y6omD8Ai8DI8lAjbkhRSFGxrs+vrUYumw+gJ33WUR8=
Subject key identifier:   17:40:68:39:32:D1:CF:A4:F7:E8:1E:2F:0C:BB:F8:F8:E7:BC:AF:58
Certificate issuer:       /CN=E6643CD2835B8AF96C10248E2382CB3BA81EA12A
Certificate serial:       589B82A34B8A74524EABB75034B394BDCEB44A00
Authority key identifier: E6:64:3C:D2:83:5B:8A:F9:6C:10:24:8E:23:82:CB:3B:A8:1E:A1:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/3133312e3136312e3134382e302f32322d3232203d3e203238303934.roa
Signing time:             Tue 05 Mar 2024 18:00:33 +0000
ROA not before:           Tue 05 Mar 2024 17:55:33 +0000
ROA not after:            Tue 04 Mar 2025 18:00:33 +0000
asID:                     28094
IP address blocks:        131.161.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9b:82:a3:4b:8a:74:52:4e:ab:b7:50:34:b3:94:bd:ce:b4:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6643CD2835B8AF96C10248E2382CB3BA81EA12A
        Validity
            Not Before: Mar  5 17:55:33 2024 GMT
            Not After : Mar  4 18:00:33 2025 GMT
        Subject: CN=1740683932D1CFA4F7E81E2F0CBBF8F8E7BCAF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:37:83:28:14:66:7e:bb:cc:b7:ac:03:af:31:
                    b0:13:5c:1b:bb:3d:5d:01:6d:f6:59:1b:44:57:a2:
                    a6:89:b0:f5:be:ab:26:8e:93:2a:c7:12:66:d3:f4:
                    17:26:47:c0:55:d5:c2:5c:1f:5d:af:b3:36:44:08:
                    84:f1:6e:80:9f:a6:87:b2:95:30:f8:42:ff:38:a2:
                    93:c5:de:cb:ef:10:0a:14:e0:e8:95:40:7b:46:9b:
                    fc:7d:42:f1:6c:0f:1f:bc:33:8e:00:28:2b:05:3b:
                    f9:cc:88:c6:ac:55:04:62:7d:7c:51:55:9f:be:2a:
                    96:ac:8e:8a:4d:81:46:b6:d5:e4:bb:22:fe:90:74:
                    a2:85:d2:ec:09:02:e5:ad:f9:c9:ec:52:c7:b4:d4:
                    a3:a7:b4:51:84:fe:fb:a6:26:cf:48:ab:02:15:c0:
                    db:b5:77:ef:da:91:c5:a1:1e:f5:a0:c4:ce:26:44:
                    92:b1:7c:00:1e:bf:ee:ba:4a:0c:14:c8:9a:02:e8:
                    81:4c:ad:a9:ef:63:da:18:2f:63:22:af:6d:51:99:
                    e8:93:2b:6e:cd:19:87:7e:dc:3d:19:e6:5a:6b:c2:
                    0a:a0:48:4b:c0:9c:fc:6d:99:f9:d1:f2:84:1b:e2:
                    14:d2:94:d5:ab:75:94:da:64:7e:f7:59:5f:21:c9:
                    34:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:40:68:39:32:D1:CF:A4:F7:E8:1E:2F:0C:BB:F8:F8:E7:BC:AF:58
            X509v3 Authority Key Identifier:
                keyid:E6:64:3C:D2:83:5B:8A:F9:6C:10:24:8E:23:82:CB:3B:A8:1E:A1:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/3133312e3136312e3134382e302f32322d3232203d3e203238303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:fd:17:0b:ed:e5:03:18:2d:58:c2:dd:45:49:7d:7c:60:e9:
         20:82:56:d3:fe:9e:03:61:b3:a7:bd:9d:1c:6d:dc:da:59:dc:
         5a:ee:3c:4c:a9:c8:d7:56:25:29:0b:9c:f4:10:44:a3:65:38:
         5f:d8:45:ea:c3:62:3c:26:1b:d0:ec:4d:37:a0:75:00:82:79:
         7c:a1:87:42:bc:21:06:bc:29:1d:07:f2:cf:9a:a2:e5:91:98:
         d8:89:b4:59:60:46:1a:be:ae:27:c2:75:34:ba:68:48:dc:8f:
         e8:75:be:97:ee:3f:95:44:99:42:88:ab:63:0b:7f:df:ce:c0:
         c1:33:64:49:6f:05:a1:3c:ad:1e:56:11:d0:ce:3f:ae:a5:10:
         7a:e6:20:9e:a5:be:04:32:9d:15:8a:41:c9:13:31:39:6f:fd:
         4a:30:32:d3:47:db:2e:9a:20:f2:2b:45:10:95:97:fb:98:3a:
         c4:c7:ad:53:51:e0:62:03:7d:3a:4f:c9:3f:14:bd:9b:d0:a8:
         44:72:57:96:e6:5f:70:8d:73:bf:1a:55:7d:25:3e:1b:f6:53:
         55:60:90:0b:f2:af:e3:95:73:a1:0f:cd:60:bc:a0:35:6a:be:
         d2:1b:97:7f:97:58:32:28:13:5b:6a:c4:0c:30:28:2c:f5:2e:
         f2:fe:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org