Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32332d3233203d3e20323639393138.roa
File:                     3133312e37322e3137302e302f32332d3233203d3e20323639393138.roa (raw, json)
Hash identifier:          eEntOQNkOaYNUPwP8pYhLWt8eVOuQXnC9W8aN8cPYjM=
Subject key identifier:   1B:FB:BC:98:16:C6:D2:54:85:0E:82:C5:2C:27:AD:32:BD:45:A6:BA
Certificate issuer:       /CN=2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5
Certificate serial:       7CC806AAE236C71D8840CE756057A896F36E7C2C
Authority key identifier: 2A:CD:8B:4C:70:40:6B:96:03:44:5B:F3:BA:B5:E3:87:DF:0D:F7:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32332d3233203d3e20323639393138.roa
Signing time:             Sun 31 Mar 2024 11:40:00 +0000
ROA not before:           Sun 31 Mar 2024 11:35:00 +0000
ROA not after:            Sun 30 Mar 2025 11:40:00 +0000
asID:                     269918
IP address blocks:        131.72.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c8:06:aa:e2:36:c7:1d:88:40:ce:75:60:57:a8:96:f3:6e:7c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5
        Validity
            Not Before: Mar 31 11:35:00 2024 GMT
            Not After : Mar 30 11:40:00 2025 GMT
        Subject: CN=1BFBBC9816C6D254850E82C52C27AD32BD45A6BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:1d:db:98:ee:71:e1:e9:dc:51:88:9a:98:
                    1c:fe:0b:97:66:ef:da:8d:45:b6:dd:17:1b:76:16:
                    d5:77:65:ba:71:13:a0:32:41:2e:03:de:7d:8c:c7:
                    6e:ca:2c:e8:55:ff:62:9d:ec:e9:66:2a:1b:f4:99:
                    71:3c:a2:e7:10:aa:d9:6b:de:6f:ea:2c:91:ce:b2:
                    7a:ab:dc:eb:43:ff:11:83:8b:44:87:78:fa:38:1d:
                    ed:2a:54:5f:75:35:6c:d7:a9:dd:75:88:ae:9d:f2:
                    c8:a2:21:60:47:3d:5f:f5:74:ee:6a:89:d4:2d:90:
                    c7:37:91:b4:90:6e:61:48:ea:e3:23:5c:22:3f:10:
                    8b:27:ca:77:16:e2:e8:0f:b2:eb:a7:25:f8:62:42:
                    ff:4f:5a:4c:44:6d:ee:97:c4:f1:bd:9e:e3:ec:84:
                    6f:4f:1e:ac:77:c4:c9:52:b2:d2:58:81:a0:f0:3d:
                    ef:00:b1:45:30:f2:4f:45:3e:dd:3c:1b:1e:b4:47:
                    fa:a7:c6:bc:18:fd:e1:56:d7:a2:de:ef:25:77:17:
                    39:a0:d5:8a:92:eb:61:27:72:5e:53:af:b1:e4:68:
                    af:b8:ec:2c:56:c4:0d:c3:dd:08:90:21:b3:e1:c9:
                    74:27:cc:59:df:19:31:d9:15:19:1e:34:b2:bc:f1:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FB:BC:98:16:C6:D2:54:85:0E:82:C5:2C:27:AD:32:BD:45:A6:BA
            X509v3 Authority Key Identifier:
                keyid:2A:CD:8B:4C:70:40:6B:96:03:44:5B:F3:BA:B5:E3:87:DF:0D:F7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32332d3233203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:07:d4:a7:06:b5:7c:f1:df:c8:28:7d:9d:39:ae:9b:a2:91:
         bb:36:4f:ea:49:d9:19:35:ea:1e:2f:9c:64:d9:5f:e6:b0:35:
         64:b1:c4:1b:ee:e5:01:fd:e8:a8:db:ab:82:da:48:a5:e1:0f:
         5c:41:75:a3:90:29:8d:bd:16:8e:4e:c4:81:55:a9:4b:35:9c:
         0f:29:7d:20:e2:aa:3f:3e:ac:6e:b9:2c:b9:02:52:16:a3:9a:
         6b:6b:13:93:92:db:13:48:18:c1:a8:aa:f0:0a:06:a9:16:b2:
         b3:93:ae:4b:27:72:3e:43:aa:9a:90:f8:a1:08:5b:8e:dd:ad:
         06:a4:6d:cf:bb:70:16:42:65:8a:b6:03:d6:a5:62:3f:f5:b3:
         ce:f3:be:d3:f8:62:03:00:04:63:4a:c4:db:83:86:dd:75:aa:
         da:42:30:6b:c0:3f:08:de:eb:a6:84:7f:2a:9b:07:f7:7a:5f:
         46:31:a0:7a:92:58:4b:8c:d6:2e:5d:2d:cd:ee:3f:36:5b:90:
         37:7f:f4:5d:fd:ad:51:14:c0:ee:a2:ec:e0:2d:20:cd:7a:db:
         43:70:85:be:dd:ca:40:52:85:08:cc:53:c7:36:90:92:f5:26:
         d4:d7:78:5c:eb:24:cd:45:2f:c7:78:de:e9:fe:a2:f3:72:8c:
         27:70:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 01:51:44 2024 by rpki-client on console-ams.rpki-client.org