Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3133312e37322e3135362e302f32322d3234203d3e203238333138.roa
File:                     3133312e37322e3135362e302f32322d3234203d3e203238333138.roa (raw, json)
Hash identifier:          IC/AvxblIIado/da0tMpK5iXzitbWq+rfHYlPV4kDUc=
Subject key identifier:   07:B7:1D:CC:1B:C3:17:31:30:A7:96:57:65:F6:00:3A:12:E7:5A:9D
Certificate issuer:       /CN=6901373ADF0D0461CC1A44926DE5F2462E477F44
Certificate serial:       5C633C8867789C1BE5DB61155C5A36A452C7B042
Authority key identifier: 69:01:37:3A:DF:0D:04:61:CC:1A:44:92:6D:E5:F2:46:2E:47:7F:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3133312e37322e3135362e302f32322d3234203d3e203238333138.roa
Signing time:             Tue 05 Mar 2024 18:22:04 +0000
ROA not before:           Tue 05 Mar 2024 18:17:04 +0000
ROA not after:            Tue 04 Mar 2025 18:22:04 +0000
asID:                     28318
IP address blocks:        131.72.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.crl
                          rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:63:3c:88:67:78:9c:1b:e5:db:61:15:5c:5a:36:a4:52:c7:b0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6901373ADF0D0461CC1A44926DE5F2462E477F44
        Validity
            Not Before: Mar  5 18:17:04 2024 GMT
            Not After : Mar  4 18:22:04 2025 GMT
        Subject: CN=07B71DCC1BC3173130A7965765F6003A12E75A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:f8:1b:a4:07:25:39:10:69:18:d3:41:e1:
                    be:d7:80:50:e9:11:ce:c4:8a:f0:4a:d8:c6:98:63:
                    7d:cf:47:3a:24:a7:97:1b:ac:df:3f:63:08:94:0e:
                    5e:80:a7:b4:6a:ad:00:7f:3c:b8:57:d3:fd:7a:31:
                    7f:33:f7:2e:d6:88:d9:de:b9:3a:78:f3:10:4a:24:
                    42:f6:de:7a:02:10:91:e9:c2:8b:54:bf:18:48:f4:
                    c8:87:ad:cc:e1:c4:03:99:89:5f:fc:94:34:97:66:
                    ae:c3:4f:18:18:eb:ce:35:6a:bb:bf:38:2b:e3:de:
                    88:0f:ca:c9:26:f8:8b:6c:b7:3a:d4:5f:00:ab:ca:
                    71:f5:cc:7e:2a:8d:c6:e7:83:a7:91:dc:38:e4:0e:
                    ad:28:ac:80:a6:fd:66:c4:6e:17:c7:37:58:a1:d4:
                    18:58:7d:a6:af:65:c5:17:10:b4:17:f4:d7:b3:7f:
                    07:d4:43:69:e7:92:fa:1e:b6:f8:e8:22:b9:af:10:
                    4b:a7:98:f9:f3:ca:3c:9a:fe:2c:6c:2e:f4:32:fb:
                    72:e9:2e:09:5b:02:42:bd:32:f3:3e:b4:88:19:95:
                    09:96:69:c1:f2:93:c4:48:a9:c6:35:5e:84:6e:5a:
                    6a:8a:7b:a4:f7:00:8d:59:61:75:28:00:d7:88:f4:
                    f6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B7:1D:CC:1B:C3:17:31:30:A7:96:57:65:F6:00:3A:12:E7:5A:9D
            X509v3 Authority Key Identifier:
                keyid:69:01:37:3A:DF:0D:04:61:CC:1A:44:92:6D:E5:F2:46:2E:47:7F:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3133312e37322e3135362e302f32322d3234203d3e203238333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:de:43:62:d5:90:87:ab:5c:e4:a7:5f:d4:4d:40:ee:5f:d0:
         c2:f1:e8:12:28:8c:8f:b5:45:bc:c0:fb:28:9e:aa:81:b7:13:
         11:90:23:5c:e7:74:48:24:e0:85:8f:5d:c5:33:ed:da:da:dd:
         b8:3e:17:8c:96:d7:29:d6:f3:52:51:91:e6:10:b2:58:cc:76:
         30:a4:9e:a6:02:70:82:70:e8:a0:0e:8f:4d:e9:6f:d6:19:01:
         f1:16:5b:60:e6:ca:10:fd:9f:df:31:97:36:c1:2d:8d:a9:f9:
         a5:91:1c:29:b2:93:0c:0e:60:8a:2c:57:51:26:af:d8:48:fe:
         c8:df:7b:40:71:00:ab:d2:af:ca:6c:ff:4f:4f:17:f8:f8:72:
         77:32:5f:4f:c9:c5:02:4e:7a:66:69:3b:3a:5e:92:7e:64:71:
         56:a2:71:42:6d:44:b2:ec:c9:c4:f3:02:a8:ed:d0:68:d5:f7:
         5b:d3:10:eb:82:67:aa:3a:9f:df:33:b1:ec:32:ab:3f:66:50:
         c2:40:9c:d0:60:f1:48:47:a3:90:d9:a1:5e:1e:3f:08:04:7f:
         49:05:d4:a7:f8:a8:bd:78:0a:32:84:d3:9d:66:77:31:8b:ee:
         e6:bb:22:a2:ad:7e:58:0a:e9:08:60:cd:d4:d5:34:99:39:f2:
         29:f0:fa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 23:55:24 2024 by rpki-client on console-fra.rpki-client.org