Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32342d3234203d3e20323639393138.roa
File:                     3133312e37322e3136382e302f32342d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          MkElGm5DMV2FFDnhPge6E4wqAF6FFVxmQCgygmTKeRA=
Subject key identifier:   66:E3:13:5B:D8:A7:90:E5:03:86:64:DB:BD:4E:2B:A5:BF:59:10:5C
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       796424FF8C654A912DDBC4C10F11023BBFE92069
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32342d3234203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:05 +0000
ROA not before:           Tue 17 Sep 2024 15:00:05 +0000
ROA not after:            Tue 16 Sep 2025 15:05:05 +0000
asID:                     269918
IP address blocks:        131.72.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:64:24:ff:8c:65:4a:91:2d:db:c4:c1:0f:11:02:3b:bf:e9:20:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:05 2024 GMT
            Not After : Sep 16 15:05:05 2025 GMT
        Subject: CN=66E3135BD8A790E5038664DBBD4E2BA5BF59105C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:22:64:c1:10:69:eb:4b:12:ab:89:25:49:8f:
                    14:31:68:8c:96:c5:f2:48:07:45:39:a3:3b:99:55:
                    53:7c:53:1c:8f:b0:af:c6:80:4e:68:44:22:a4:65:
                    5e:e7:ae:ee:bb:a7:4f:f5:da:fd:3f:9f:86:c0:b5:
                    07:4b:38:b7:91:80:24:5b:e6:37:c0:f2:07:49:6a:
                    4a:27:4e:0b:a3:02:c8:74:54:42:8a:7b:76:9c:83:
                    9c:8e:93:9c:20:56:43:46:7b:b0:da:8e:15:43:fd:
                    67:3e:92:d8:0c:85:4e:49:cf:cf:ae:45:08:51:0b:
                    c0:98:01:cf:50:73:28:f4:47:e4:f2:42:85:dd:7d:
                    2f:77:de:37:ee:8d:3d:f4:40:93:12:cd:64:39:6d:
                    a3:05:71:28:d8:c7:60:39:e9:fd:31:2d:10:b9:d8:
                    fc:ac:c7:31:d8:8d:22:96:3f:09:40:d0:ac:fe:43:
                    23:10:d9:00:f4:ac:4e:0a:84:34:6c:d6:2b:1f:9e:
                    9c:d4:2a:11:62:ae:eb:12:97:f5:26:32:cb:96:26:
                    61:f2:e8:74:e2:80:46:b8:59:23:94:11:be:35:22:
                    a2:2b:d8:98:74:c2:05:4f:38:b2:07:40:2b:fa:b7:
                    81:57:83:53:ea:3a:50:cf:2b:58:c1:2b:32:77:bf:
                    88:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E3:13:5B:D8:A7:90:E5:03:86:64:DB:BD:4E:2B:A5:BF:59:10:5C
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136382e302f32342d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:db:09:9d:41:dd:d5:f7:d1:b7:22:b7:bc:19:e2:db:5d:a6:
         c1:8a:89:89:ca:4c:1d:08:2e:30:f1:56:5e:66:81:df:bd:1b:
         cb:fd:2d:d9:f3:fe:7d:84:3a:3c:e8:e1:ab:9a:87:77:b9:d8:
         ec:71:37:a1:dd:09:7d:86:e0:bd:ba:31:e0:fc:65:0c:07:38:
         7d:0f:fe:40:76:ab:46:de:78:94:9f:ba:19:ac:40:bd:5d:cd:
         b7:eb:dc:7e:d8:95:45:e7:e3:57:78:d3:de:dc:37:f1:9d:77:
         fe:9a:88:34:11:27:0b:ad:80:d6:79:38:07:04:80:f8:aa:b9:
         0b:7d:d2:d8:12:64:cf:b0:97:33:c5:0b:00:18:c7:5f:c4:c5:
         01:ff:eb:07:13:d0:c7:7c:3e:20:84:bb:c2:16:22:2e:a5:d2:
         d5:57:c9:5e:57:38:3b:b5:7f:c0:fa:b1:91:02:e5:6a:64:59:
         60:d1:ad:a5:cc:b4:c3:30:b7:29:7b:29:5d:55:d8:01:e2:d5:
         b2:1b:0d:dd:99:3a:6d:16:ba:65:e8:ce:87:06:d3:0f:6e:04:
         eb:f2:50:ca:b9:75:4c:dc:a8:e7:d3:69:e7:9c:0b:bc:77:21:
         a2:6a:3d:82:b9:2d:61:b7:c1:6f:98:1f:c4:48:d6:f3:3f:f6:
         b5:cd:e6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org