Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa
File:                     3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          PxtU//1nbDNcq3rQ/dksF3yRkYRgGyEVZo/sItSYTbc=
Subject key identifier:   D2:6E:25:07:10:DC:69:8E:8E:0D:5B:0E:76:DA:A2:F5:C0:76:7D:60
Certificate issuer:       /CN=9626A6128814BFABD36D86E0348EDC7C67F0F691
Certificate serial:       2BC6506C22AB3ABA0DCEBBB0272E5BD50532D53D
Authority key identifier: 96:26:A6:12:88:14:BF:AB:D3:6D:86:E0:34:8E:DC:7C:67:F0:F6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa
Signing time:             Thu 23 May 2024 00:50:02 +0000
ROA not before:           Thu 23 May 2024 00:45:02 +0000
ROA not after:            Thu 22 May 2025 00:50:02 +0000
asID:                     269918
IP address blocks:        131.72.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c6:50:6c:22:ab:3a:ba:0d:ce:bb:b0:27:2e:5b:d5:05:32:d5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9626A6128814BFABD36D86E0348EDC7C67F0F691
        Validity
            Not Before: May 23 00:45:02 2024 GMT
            Not After : May 22 00:50:02 2025 GMT
        Subject: CN=D26E250710DC698E8E0D5B0E76DAA2F5C0767D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:ae:66:f8:18:16:39:55:3b:c3:43:46:03:
                    03:56:a3:36:c1:53:85:d1:bb:48:6f:ee:c4:ae:c2:
                    2d:b0:6c:65:bd:b2:71:7b:11:f8:15:e8:a6:14:4f:
                    a0:e8:bd:6b:ef:9f:45:99:59:5a:ad:c2:74:97:4c:
                    26:c0:c2:5c:63:f8:82:e5:75:e9:1f:0a:19:7b:ae:
                    3e:bc:6d:cf:68:3f:10:9b:08:28:b5:05:e7:63:ef:
                    16:b8:9a:10:3a:01:59:cb:78:17:4d:2d:16:11:99:
                    55:12:36:c0:e7:5c:66:3b:81:80:4a:ac:e1:98:23:
                    c7:d4:bf:65:9e:bb:92:19:76:d7:0d:d6:03:40:8e:
                    09:69:fb:dd:de:6e:ba:4a:52:d9:d8:a4:44:3a:a3:
                    31:fb:52:7d:bf:a7:7f:f6:f8:02:b7:cc:7a:f7:eb:
                    2b:c4:93:f4:7b:4c:e9:4c:48:b3:c6:c8:1e:96:8c:
                    be:09:55:9a:5d:ba:ea:83:a6:a3:f4:97:28:17:ec:
                    d6:0b:46:3c:76:44:6b:66:2c:0c:c0:11:c4:25:6f:
                    b5:ea:74:f6:7b:df:04:19:87:8b:58:e4:bb:37:57:
                    36:dd:47:3b:a1:9e:b6:9c:07:81:4f:3f:ca:50:fe:
                    ef:65:ce:89:b3:39:b6:5e:94:fc:9d:e5:b7:4d:68:
                    92:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6E:25:07:10:DC:69:8E:8E:0D:5B:0E:76:DA:A2:F5:C0:76:7D:60
            X509v3 Authority Key Identifier:
                keyid:96:26:A6:12:88:14:BF:AB:D3:6D:86:E0:34:8E:DC:7C:67:F0:F6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9626A6128814BFABD36D86E0348EDC7C67F0F691.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32322d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:3b:6f:e9:2e:1f:84:8b:22:3c:b8:bd:d5:b2:55:7f:cc:
         f0:6c:c6:f7:9f:6e:3b:f4:09:1a:3a:41:95:83:76:75:a3:b0:
         1c:54:d5:50:38:1e:dd:6d:92:8c:ef:2a:e7:02:f9:be:95:58:
         e6:83:d1:34:c0:40:99:03:83:6f:1e:de:e8:af:92:89:43:7d:
         31:54:95:e8:ba:8c:10:de:fc:40:26:0a:f0:a0:23:4f:c9:6e:
         da:fa:a8:4b:77:fe:7c:0c:0c:22:37:c7:8f:1a:a9:ff:6d:17:
         b9:81:e7:a8:da:3b:3e:49:7d:31:e3:ce:c6:16:5a:c5:cc:71:
         fd:3f:46:27:55:b4:6c:1d:2f:21:94:f9:bb:1e:16:47:eb:5a:
         66:e6:bb:af:ea:63:65:b7:a6:ba:ff:56:85:d7:97:96:8e:65:
         cf:44:7c:dc:7f:df:b5:9d:ef:cc:85:cb:8f:95:68:eb:0b:40:
         8a:1e:c9:07:75:38:88:43:4f:ee:b6:0c:d9:2d:04:99:fa:40:
         36:aa:60:73:3a:ab:fe:3a:f3:43:eb:1e:e9:72:6f:6c:4c:bd:
         b3:86:c1:50:c2:89:02:aa:de:a3:8e:76:16:43:70:4b:c4:b5:
         8c:55:e4:45:79:91:ec:83:42:f1:9f:27:9c:70:13:61:3c:08:
         7a:b9:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:04 2024 by rpki-client on console-fra.rpki-client.org