Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136392e302f32342d3234203d3e20323639393138.roa
File:                     3133312e37322e3136392e302f32342d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          OePhQkl4MxF/lyRW3y9gXTwFihFEPIo7w/IV02KfSak=
Subject key identifier:   AE:1A:EB:F7:0D:6F:CD:00:E0:03:BB:B1:DE:F5:D8:E4:54:2C:62:37
Certificate issuer:       /CN=2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5
Certificate serial:       0391E109D3B6D034F809BD4203747A94529AD97F
Authority key identifier: 2A:CD:8B:4C:70:40:6B:96:03:44:5B:F3:BA:B5:E3:87:DF:0D:F7:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136392e302f32342d3234203d3e20323639393138.roa
Signing time:             Sun 31 Mar 2024 12:40:02 +0000
ROA not before:           Sun 31 Mar 2024 12:35:02 +0000
ROA not after:            Sun 30 Mar 2025 12:40:02 +0000
asID:                     269918
IP address blocks:        131.72.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:91:e1:09:d3:b6:d0:34:f8:09:bd:42:03:74:7a:94:52:9a:d9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5
        Validity
            Not Before: Mar 31 12:35:02 2024 GMT
            Not After : Mar 30 12:40:02 2025 GMT
        Subject: CN=AE1AEBF70D6FCD00E003BBB1DEF5D8E4542C6237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:4b:fe:ef:dd:83:06:0a:3f:fb:d6:4f:06:
                    2c:e6:32:e4:cb:b8:43:d4:a1:3e:5d:78:e5:be:02:
                    68:9a:1f:6f:5f:5a:e4:bc:5e:c4:b8:c3:ba:fe:60:
                    23:87:e7:95:26:de:f9:3c:d4:0c:01:70:67:ff:4d:
                    6f:8c:c6:f3:d7:60:52:6d:cb:8d:4d:4d:ca:e9:2c:
                    b3:ef:3e:f1:24:74:5d:02:9f:36:49:24:cb:dd:71:
                    99:ed:d4:85:8d:c3:a3:d7:da:4e:2c:1a:21:db:ff:
                    92:c4:9d:a3:a3:a8:b1:c0:ef:9a:e0:75:bf:18:62:
                    28:e1:64:44:0e:54:32:50:94:5b:c1:a7:1a:bd:e4:
                    64:a0:58:90:4d:9a:30:cc:1d:96:4a:f5:ef:1e:d7:
                    81:1b:79:60:0c:af:05:0d:72:b2:7d:e7:c7:0b:22:
                    01:be:22:95:7c:93:3f:26:82:bf:a4:b4:62:80:71:
                    61:7c:05:39:d2:fa:5e:ef:3f:f0:40:d0:da:47:cd:
                    b9:d1:c3:70:2e:70:86:d3:aa:97:0c:ac:cf:23:21:
                    2b:99:9a:97:cf:f0:0f:a1:6c:15:32:94:33:85:5e:
                    7a:25:38:69:79:37:87:47:74:0a:e8:12:48:5c:3c:
                    b7:05:70:ff:0d:a6:e0:69:0a:ed:b3:51:0d:c3:ec:
                    f7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1A:EB:F7:0D:6F:CD:00:E0:03:BB:B1:DE:F5:D8:E4:54:2C:62:37
            X509v3 Authority Key Identifier:
                keyid:2A:CD:8B:4C:70:40:6B:96:03:44:5B:F3:BA:B5:E3:87:DF:0D:F7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136392e302f32342d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:28:80:13:72:d7:22:33:16:53:2a:3c:25:be:a4:ad:06:ab:
         e7:6c:40:4f:58:f6:b2:6b:1e:b5:fd:2f:04:2b:9d:30:f0:03:
         63:a4:10:3c:49:f7:f2:d6:11:0c:eb:cc:47:34:3b:4e:90:71:
         6b:cf:f4:df:5d:54:7b:66:39:d2:7d:a7:71:bc:a0:07:22:6b:
         f0:c7:0e:30:37:fa:e1:8f:e9:f1:64:41:06:d2:9b:f9:c3:85:
         dc:a6:7d:91:8b:d1:b3:82:ca:78:a3:bb:75:ff:d5:32:79:63:
         4c:fe:ed:34:69:65:8b:25:ac:e3:9e:75:f9:23:c5:65:4d:ef:
         df:1a:7f:86:48:a4:d3:8b:3c:e6:cc:c4:42:b2:b1:05:6a:e2:
         ad:61:e3:a7:de:e6:52:77:22:86:ff:04:ca:cd:01:c2:86:0f:
         41:bc:50:f5:62:d5:9c:b3:9b:52:83:d6:49:43:0a:59:fc:7d:
         69:8c:44:e8:d4:65:d3:65:c8:82:03:dd:d6:09:e6:74:61:07:
         98:b4:4e:96:7f:97:93:f7:74:1a:b0:11:3e:96:a6:52:62:82:
         1a:59:52:dc:72:f0:9d:8b:1f:d3:f2:f5:7a:79:62:b2:40:3a:
         de:74:54:03:34:ec:a0:c2:75:03:6a:f5:68:a0:31:62:15:43:
         d7:4b:ec:96
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUA5HhCdO20DT4Cb1CA3R6lFKa2X8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFDRDhCNEM3MDQwNkI5NjAzNDQ1QkYzQkFCNUUzODdE
RjBERjdBNTAeFw0yNDAzMzExMjM1MDJaFw0yNTAzMzAxMjQwMDJaMDMxMTAvBgNV
BAMTKEFFMUFFQkY3MEQ2RkNEMDBFMDAzQkJCMURFRjVEOEU0NTQyQzYyMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHs0v+792DBgo/+9ZPBizmMuTL
uEPUoT5deOW+AmiaH29fWuS8XsS4w7r+YCOH55Um3vk81AwBcGf/TW+MxvPXYFJt
y41NTcrpLLPvPvEkdF0CnzZJJMvdcZnt1IWNw6PX2k4sGiHb/5LEnaOjqLHA75rg
db8YYijhZEQOVDJQlFvBpxq95GSgWJBNmjDMHZZK9e8e14EbeWAMrwUNcrJ958cL
IgG+IpV8kz8mgr+ktGKAcWF8BTnS+l7vP/BA0NpHzbnRw3AucIbTqpcMrM8jISuZ
mpfP8A+hbBUylDOFXnolOGl5N4dHdAroEkhcPLcFcP8NpuBpCu2zUQ3D7PepAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUrhrr9w1vzQDgA7ux3vXY5FQsYjcwHwYDVR0j
BBgwFoAUKs2LTHBAa5YDRFvzurXjh98N96UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMzI4QjE4QzU2NzZBOTM3QUNENDZEMTk1NjUwNkMxQTlE
RDc4MUYyNzBEMjk5MkM1MjlCMTc1ODVDMDY1QjU5LzAvMkFDRDhCNEM3MDQwNkI5
NjAzNDQ1QkYzQkFCNUUzODdERjBERjdBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUNEOEI0QzcwNDA2Qjk2MDM0
NDVCRjNCQUI1RTM4N0RGMERGN0E1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDMyOEIxOEM1Njc2QTkzN0FDRDQ2RDE5NTY1MDZDMUE5REQ3ODFGMjcw
RDI5OTJDNTI5QjE3NTg1QzA2NUI1OS8wLzMxMzMzMTJlMzczMjJlMzEzNjM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzMTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg0ip
MA0GCSqGSIb3DQEBCwUAA4IBAQAdKIATctciMxZTKjwlvqStBqvnbEBPWPayax61
/S8EK50w8ANjpBA8Sffy1hEM68xHNDtOkHFrz/TfXVR7ZjnSfadxvKAHImvwxw4w
N/rhj+nxZEEG0pv5w4Xcpn2Ri9Gzgsp4o7t1/9UyeWNM/u00aWWLJazjnnX5I8Vl
Te/fGn+GSKTTizzmzMRCsrEFauKtYeOn3uZSdyKG/wTKzQHChg9BvFD1YtWcs5tS
g9ZJQwpZ/H1pjETo1GXTZciCA93WCeZ0YQeYtE6Wf5eT93QasBE+lqZSYoIaWVLc
cvCdix/T8vV6eWKyQDredFQDNOygwnUDavVooDFiFUPXS+yW
-----END CERTIFICATE-----
Generated at Thu May 16 01:51:44 2024 by rpki-client on console-ams.rpki-client.org