Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32342d3234203d3e20323639393138.roa
File:                     3133312e37322e3137302e302f32342d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          TGS9X7XPTiDR7A++z4SwCdJGr+bRnpif/cKGei1MgPA=
Subject key identifier:   85:B4:9C:09:7C:90:5D:40:7E:74:F4:38:23:7C:E6:B5:15:5B:95:B1
Certificate issuer:       /CN=2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5
Certificate serial:       2E7A5E34DFC01E8469FB902C37E47E4346126EA5
Authority key identifier: 2A:CD:8B:4C:70:40:6B:96:03:44:5B:F3:BA:B5:E3:87:DF:0D:F7:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32342d3234203d3e20323639393138.roa
Signing time:             Sun 31 Mar 2024 12:40:00 +0000
ROA not before:           Sun 31 Mar 2024 12:35:00 +0000
ROA not after:            Sun 30 Mar 2025 12:40:00 +0000
asID:                     269918
IP address blocks:        131.72.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7a:5e:34:df:c0:1e:84:69:fb:90:2c:37:e4:7e:43:46:12:6e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5
        Validity
            Not Before: Mar 31 12:35:00 2024 GMT
            Not After : Mar 30 12:40:00 2025 GMT
        Subject: CN=85B49C097C905D407E74F438237CE6B5155B95B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:00:bd:d6:90:85:e4:d7:6f:ff:4a:ad:98:
                    0a:cc:8f:e1:23:1a:3f:f2:a5:d6:95:06:6c:bb:c0:
                    23:97:ad:48:d6:29:0d:9a:9c:de:7d:19:ad:34:8a:
                    4a:ce:28:5f:9e:fb:00:8f:b8:78:21:14:ef:a4:89:
                    1e:8c:02:04:e8:90:3c:93:1f:08:93:cf:c9:ad:9e:
                    f3:dd:e4:59:56:07:68:46:da:b1:92:57:97:68:e9:
                    d1:90:5f:62:a4:a1:0e:d1:30:f3:5a:ab:d3:03:1f:
                    65:ec:f6:fb:41:39:4b:ab:97:3f:3a:d6:c0:cc:72:
                    e7:c1:60:4f:42:18:90:b1:fc:12:76:20:70:94:f3:
                    6a:3c:12:3b:db:7d:55:3d:44:c9:6e:51:ca:f1:f9:
                    b5:9a:d5:97:8a:81:de:7d:99:11:a1:ba:83:e1:e4:
                    bb:af:4b:57:15:91:d0:ad:e3:5f:e2:fe:cc:5e:78:
                    d2:58:e6:ad:21:82:c4:45:be:39:d5:1e:6e:40:d8:
                    fe:e4:d4:27:f4:b8:b1:24:f0:f9:66:52:94:b4:c4:
                    ae:f6:b3:1c:45:e1:95:98:25:26:09:5c:17:61:d3:
                    d7:ee:e1:5d:f6:93:5c:4d:8a:e4:1b:38:35:76:b8:
                    4d:25:38:5c:34:fc:07:5f:e3:e1:e8:a0:a4:35:c4:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B4:9C:09:7C:90:5D:40:7E:74:F4:38:23:7C:E6:B5:15:5B:95:B1
            X509v3 Authority Key Identifier:
                keyid:2A:CD:8B:4C:70:40:6B:96:03:44:5B:F3:BA:B5:E3:87:DF:0D:F7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACD8B4C70406B9603445BF3BAB5E387DF0DF7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32342d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:43:ac:8d:c6:e1:cb:19:71:18:ab:4a:c8:89:7e:a0:99:d3:
         22:35:12:4c:fc:9f:13:66:a1:09:2d:24:b2:d8:a9:9d:a1:63:
         7e:dc:85:da:b5:b5:3c:a5:78:b5:bb:e0:9a:56:56:d9:b1:18:
         1d:8c:a0:bb:33:b0:df:73:e8:3f:29:63:45:c2:66:5a:02:5a:
         95:05:4e:49:30:8f:10:b5:10:7a:38:0e:86:d7:41:58:59:54:
         dd:ed:27:17:00:67:b3:66:88:55:1e:94:30:00:3c:12:9b:ac:
         07:b2:d2:cf:d2:48:71:99:f0:2b:e6:32:0e:f4:db:00:d5:c9:
         88:97:31:5f:b1:23:f3:47:1e:a7:f7:db:ec:bd:43:10:b7:7e:
         0c:61:e7:86:22:59:1e:ad:9c:0e:a9:58:6f:2b:b1:28:81:03:
         68:6d:8f:7e:1f:3b:08:32:78:09:64:03:1f:76:57:98:20:c9:
         5f:53:9f:f2:f1:de:49:19:04:72:f5:6b:43:93:f6:ab:25:cb:
         52:bf:0f:07:0e:fc:7b:02:57:af:49:9b:b6:66:c0:0d:4c:48:
         a2:88:2c:5e:79:db:08:a8:50:32:26:61:4a:d0:06:ea:2f:21:
         87:14:28:2a:bf:5f:54:8d:20:ae:58:20:38:08:68:ed:c2:9c:
         bd:b2:bc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:04:38 2024 by rpki-client on console-fra.rpki-client.org