Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32342d3234203d3e20323639393138.roa
File:                     3133312e37322e3136382e302f32342d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          klk0niAoWVqQVtdoOQViljDa1Ue0aHFwXDGM5bHWFdg=
Subject key identifier:   91:D6:7E:D5:4E:4B:28:06:2F:3F:C1:64:B6:95:4F:42:AB:3C:93:78
Certificate issuer:       /CN=2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5
Certificate serial:       1AE131D5C05EC2E4E36DD83437D9F248CE6D4906
Authority key identifier: 2A:CD:8B:4C:70:40:6B:96:03:44:5B:F3:BA:B5:E3:87:DF:0D:F7:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32342d3234203d3e20323639393138.roa
Signing time:             Sun 31 Mar 2024 12:40:00 +0000
ROA not before:           Sun 31 Mar 2024 12:35:00 +0000
ROA not after:            Sun 30 Mar 2025 12:40:00 +0000
asID:                     269918
IP address blocks:        131.72.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e1:31:d5:c0:5e:c2:e4:e3:6d:d8:34:37:d9:f2:48:ce:6d:49:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5
        Validity
            Not Before: Mar 31 12:35:00 2024 GMT
            Not After : Mar 30 12:40:00 2025 GMT
        Subject: CN=91D67ED54E4B28062F3FC164B6954F42AB3C9378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:af:bc:83:b0:6c:fc:4b:bd:2f:c9:11:40:
                    48:17:a8:8b:bb:d6:7b:55:64:80:7d:88:2a:2d:4c:
                    c0:21:5f:d2:86:79:e5:ee:b8:b4:65:8d:6e:5b:2d:
                    7c:81:e4:4e:46:97:95:7c:97:81:29:53:ea:b2:50:
                    f7:b6:ab:1d:aa:1c:60:54:15:15:b8:79:cb:f5:5d:
                    d2:17:79:95:46:52:ca:76:39:47:97:2e:6c:f7:ca:
                    ff:2a:cc:30:a1:eb:19:6e:c3:c2:24:d5:63:86:30:
                    9a:15:f0:cb:61:cb:a6:a2:e9:7e:d5:bc:06:8f:84:
                    77:11:04:ac:b8:ee:16:cb:f5:68:c3:4b:a0:28:28:
                    c9:4a:a7:6d:ef:05:cd:88:03:f7:42:73:6f:ed:49:
                    67:15:f9:19:ad:f6:67:9b:12:17:cd:ed:d4:ee:eb:
                    04:2c:fa:0d:3c:b1:f2:22:64:b9:d5:63:68:88:fc:
                    84:1c:6b:2e:51:c1:d0:ea:a0:46:1f:7a:7d:dd:cd:
                    4d:23:c0:d3:8d:c5:46:fe:d5:c5:dd:57:59:66:80:
                    31:f0:67:5c:2c:7f:48:ff:fc:a9:bf:a6:75:5f:22:
                    fc:95:91:18:d9:89:fb:76:24:c1:51:e3:2d:8a:3a:
                    fc:7f:34:15:93:60:de:8b:cb:7a:0e:16:53:f7:72:
                    7d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D6:7E:D5:4E:4B:28:06:2F:3F:C1:64:B6:95:4F:42:AB:3C:93:78
            X509v3 Authority Key Identifier:
                keyid:2A:CD:8B:4C:70:40:6B:96:03:44:5B:F3:BA:B5:E3:87:DF:0D:F7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32342d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ea:56:b2:1f:b8:14:6b:91:8d:a4:9f:4a:0f:3a:ac:79:af:
         07:04:54:19:bf:7a:50:81:ec:a0:e9:01:7a:d9:c0:b5:b9:9d:
         5d:c6:e8:71:9b:b5:27:9d:d7:0c:94:31:f4:4a:33:f9:d4:57:
         ce:c2:69:09:36:4f:7f:0e:7f:0f:82:cc:8a:b2:22:c9:2c:52:
         04:85:67:4d:9b:89:31:77:3f:a9:91:99:ac:07:31:5d:40:3b:
         18:c9:db:73:3e:3e:8f:5b:00:da:5c:43:c2:37:0d:f4:d1:c4:
         5d:ef:51:8a:76:f3:b5:89:53:92:ae:3d:15:ab:2d:90:fe:39:
         96:6b:30:b4:1a:f6:55:e3:56:95:3d:ad:31:a3:a7:28:a4:0b:
         f0:06:ff:ce:e8:94:ab:97:e3:bb:26:54:5b:55:83:24:81:1e:
         8c:12:d9:f8:32:d4:e3:ad:78:70:82:39:53:a6:4c:62:b3:fd:
         53:17:ea:0b:e0:33:84:b0:ff:df:10:0c:fa:ed:32:fb:8a:37:
         ab:d8:91:ec:6b:d7:92:c7:11:17:fd:8a:b6:94:b0:57:4e:f9:
         32:36:85:e5:2c:98:61:07:e9:6b:35:52:28:ea:23:2d:2c:ea:
         a4:95:78:33:4b:6e:f7:f7:94:09:96:87:57:dc:ff:c6:42:a2:
         d7:26:e4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 01:51:44 2024 by rpki-client on console-ams.rpki-client.org