Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136392e302f32342d3234203d3e20323639393138.roa
File:                     3133312e37322e3136392e302f32342d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          ZGcTqdX5Wot6DHKmzPWWaSG2IyORj2ZQw7uapDcgHh0=
Subject key identifier:   03:A5:A6:48:B2:EC:AE:FF:30:EC:BB:1F:18:76:79:68:E2:0A:99:B8
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       1CF1EEE7ED5519F722B36C8F06351D87F6CDD52A
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136392e302f32342d3234203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:05 +0000
ROA not before:           Tue 17 Sep 2024 15:00:05 +0000
ROA not after:            Tue 16 Sep 2025 15:05:05 +0000
asID:                     269918
IP address blocks:        131.72.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f1:ee:e7:ed:55:19:f7:22:b3:6c:8f:06:35:1d:87:f6:cd:d5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:05 2024 GMT
            Not After : Sep 16 15:05:05 2025 GMT
        Subject: CN=03A5A648B2ECAEFF30ECBB1F18767968E20A99B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4f:ad:aa:41:e0:ed:d5:ce:b1:5e:84:27:cb:
                    8d:10:be:b9:77:d9:0f:a1:5c:c2:99:95:d6:67:c3:
                    60:61:48:22:8c:06:a4:be:f2:20:42:9f:60:bf:2c:
                    5b:cb:a9:bb:ab:08:d9:24:4c:42:14:ea:5d:f7:4e:
                    ab:5c:5d:de:ff:65:d5:46:e7:41:04:52:1a:b6:36:
                    98:03:82:81:54:3e:8c:4f:df:e0:d0:5a:78:55:80:
                    74:3d:d4:b6:2f:aa:23:36:46:5f:e6:a8:78:8a:16:
                    35:15:7c:85:bf:04:65:04:26:31:70:c9:80:f7:b0:
                    19:87:68:ce:6d:27:20:d5:1c:5d:ab:1a:6d:b2:34:
                    db:f6:97:24:4f:24:0c:37:9e:75:be:aa:2e:ed:b9:
                    f8:bb:e1:4b:c8:30:cf:93:27:71:9b:70:0e:4a:22:
                    b6:20:22:fc:e4:ff:f2:16:ef:86:a1:e9:a2:cd:78:
                    8a:66:a1:5e:e9:a6:28:5c:bb:06:d1:52:b9:7b:41:
                    ac:96:c5:e9:9f:83:ea:83:3c:f7:36:1f:60:da:aa:
                    a3:38:55:4a:7b:46:19:cd:fd:9c:75:0a:16:a0:77:
                    b6:70:70:2e:62:42:3a:79:d9:f7:bb:15:bb:d8:ca:
                    ed:b7:29:c7:34:57:94:2f:2e:c4:44:bb:7a:02:75:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:A6:48:B2:EC:AE:FF:30:EC:BB:1F:18:76:79:68:E2:0A:99:B8
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3136392e302f32342d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c0:7f:b7:af:ef:6d:0c:7c:dc:fd:8d:8b:4e:11:06:1e:81:
         61:7e:2b:80:7f:59:d6:e2:37:aa:73:cb:61:fa:50:ba:12:01:
         9b:61:82:e6:85:30:89:f3:06:1b:d3:b6:4b:18:f3:22:a5:82:
         62:6c:cf:1e:6b:f3:3e:67:a8:92:e5:25:d7:5b:2e:dc:88:d1:
         cd:cb:65:ca:78:98:59:4c:98:2e:45:a4:45:a7:82:33:94:a4:
         72:c7:a5:e2:5d:7a:51:2c:34:64:03:ff:df:bf:4b:e2:dc:a8:
         e9:58:f7:b6:c0:f6:f8:a1:c4:c9:11:64:bf:3d:87:ce:44:dc:
         c0:9b:d6:20:84:b4:44:52:90:72:ea:3f:ec:80:2b:71:86:15:
         6c:f7:58:a1:ca:d2:45:47:a7:34:a3:4c:32:47:20:ed:7f:6c:
         38:97:da:f1:d8:ea:ce:b9:1e:88:13:2b:c8:2f:ac:9b:a2:40:
         5f:0a:58:2c:d5:f4:d3:f9:4c:e9:59:cf:3b:27:e0:cd:c9:a8:
         e6:1a:ff:09:71:cf:73:5e:e7:0f:c9:f3:79:62:ed:2d:06:94:
         2e:b7:8f:ee:bb:57:6c:52:b0:ba:8d:a3:87:e6:42:fb:35:90:
         35:d9:9c:cb:39:29:53:e5:2b:4f:6c:d8:5f:00:a1:2f:52:ba:
         82:63:5d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org