Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3232203d3e20323639393138.roa
File:                     3133312e37322e3136382e302f32322d3232203d3e20323639393138.roa (raw, json)
Hash identifier:          pJW5wiGuIBaKQ9mS4y2f+2fcrAUxYfghIiN/8Yg2ddg=
Subject key identifier:   DA:5C:19:60:E7:8B:71:EC:0B:A5:FF:20:ED:E1:17:1A:FF:17:21:FD
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       5BFB3A32DB6142A8C29AC2B792101B20F9D93FDA
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3232203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:03 +0000
ROA not before:           Tue 17 Sep 2024 15:00:03 +0000
ROA not after:            Tue 16 Sep 2025 15:05:03 +0000
asID:                     269918
IP address blocks:        131.72.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fb:3a:32:db:61:42:a8:c2:9a:c2:b7:92:10:1b:20:f9:d9:3f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:03 2024 GMT
            Not After : Sep 16 15:05:03 2025 GMT
        Subject: CN=DA5C1960E78B71EC0BA5FF20EDE1171AFF1721FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5f:ef:be:d1:d3:3f:f4:a5:36:39:f0:34:e8:
                    3d:0a:f1:e3:ea:29:5c:4b:dd:7c:ad:f9:2e:3e:2b:
                    8b:b5:a8:f7:92:18:0d:48:21:75:fc:2e:9c:91:31:
                    cb:9f:3d:82:ae:6b:9d:96:18:48:7b:1a:34:81:cf:
                    c3:f5:fa:9c:3d:a6:4d:5a:d0:04:09:8e:a0:3d:46:
                    05:46:9c:17:a9:b4:9e:84:f4:35:7b:0d:4c:02:c7:
                    21:b5:88:51:0d:be:a8:5e:c8:fe:d4:64:5e:8d:52:
                    3e:3f:8c:0c:56:70:41:1b:c8:87:63:70:d3:b4:69:
                    4c:fa:36:72:8b:69:8e:f9:b9:7d:b2:79:ec:5f:5a:
                    c4:22:2d:eb:bd:32:e8:76:ea:34:62:70:e5:56:79:
                    6b:cb:71:56:de:fb:65:7a:5e:45:e6:35:94:db:33:
                    bf:02:f6:26:c1:7e:0b:02:60:52:e6:94:74:f4:eb:
                    b5:a1:ad:87:21:38:25:a0:56:1e:bd:ce:d9:2d:5c:
                    e3:ab:c4:10:19:e6:17:2f:76:9f:50:5d:f6:46:bf:
                    91:e8:e6:14:88:15:49:bc:37:ac:57:a1:7b:26:9b:
                    91:1c:52:76:ae:65:95:ee:97:6d:e8:a5:bf:19:33:
                    96:35:44:a5:a3:9c:96:88:ec:3d:80:15:3e:ea:de:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5C:19:60:E7:8B:71:EC:0B:A5:FF:20:ED:E1:17:1A:FF:17:21:FD
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3232203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:3a:08:eb:31:bc:e2:34:79:56:14:aa:b0:94:f1:c7:57:
         67:31:5e:26:ff:9a:de:68:63:15:a9:b1:9c:41:a6:db:e8:ff:
         2e:3b:75:35:f0:fe:a5:da:fa:a4:52:9c:6b:59:c1:b4:6c:6c:
         fd:b9:08:01:ea:32:08:f6:ae:5e:59:b7:2e:74:34:b0:5e:ba:
         6f:85:0c:d2:32:e0:7a:87:a3:b4:04:8c:a6:96:7a:06:ea:dd:
         88:99:f4:00:49:19:49:d4:1e:62:d5:f2:56:09:70:c5:c1:21:
         c7:a5:2f:d4:87:48:61:85:c2:d6:d4:57:b1:bc:c4:3a:f0:71:
         6a:a7:66:1f:f0:80:62:93:21:5a:bc:f4:2e:37:66:66:7f:f6:
         ef:22:61:fd:90:c4:ab:24:d5:32:3c:03:90:97:08:70:7c:53:
         f0:5f:e5:9b:a1:31:69:e9:1a:ad:9e:55:e0:4f:5f:c7:a2:09:
         21:b4:17:87:1f:99:2a:51:47:92:5d:4e:5e:36:cc:18:28:e0:
         48:af:5a:f2:34:c7:17:01:d7:6e:a0:29:0d:16:1e:cb:d1:31:
         38:d4:c5:fe:4b:ea:26:93:d3:7e:55:e6:5c:fb:ea:8a:bd:7d:
         ee:6a:77:a6:47:bf:1c:70:3b:1d:01:f1:92:30:02:d5:15:9d:
         fa:72:c6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org