Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32342d3234203d3e20323639393138.roa
File:                     3133312e37322e3137302e302f32342d3234203d3e20323639393138.roa (raw, json)
Hash identifier:          igwmflKBol+Iaz0RRZjJebZPZX1wz5IyD0mw50UaE+0=
Subject key identifier:   FC:6B:08:A1:5D:01:24:0E:0B:3F:B1:59:75:B3:15:68:68:94:13:29
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       058BD0E88567905268B5C1F822ED9BEBD3D39012
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32342d3234203d3e20323639393138.roa
Signing time:             Tue 17 Sep 2024 15:05:05 +0000
ROA not before:           Tue 17 Sep 2024 15:00:05 +0000
ROA not after:            Tue 16 Sep 2025 15:05:05 +0000
asID:                     269918
IP address blocks:        131.72.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8b:d0:e8:85:67:90:52:68:b5:c1:f8:22:ed:9b:eb:d3:d3:90:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Sep 17 15:00:05 2024 GMT
            Not After : Sep 16 15:05:05 2025 GMT
        Subject: CN=FC6B08A15D01240E0B3FB15975B3156868941329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:bd:b2:42:d7:b7:2b:ed:a6:4d:fd:75:6d:
                    88:8e:95:91:ab:1d:ab:21:35:ee:44:c8:02:8b:de:
                    2c:1a:b0:37:f9:f4:2e:e4:e2:27:1d:a5:7c:f3:cf:
                    f0:bd:b6:b9:db:b7:24:f1:dc:e2:0c:a7:cd:f1:c0:
                    9c:0d:22:8b:ae:a5:51:41:7d:b3:15:45:08:84:c8:
                    a8:a9:d4:56:f8:6d:88:f2:e7:9e:d1:85:da:8b:63:
                    ca:e8:cc:35:41:9f:06:e3:9b:8a:99:74:28:1b:61:
                    d8:b5:91:2d:19:89:af:1b:be:8e:00:bb:d7:19:89:
                    41:3a:95:9f:bf:43:de:83:0d:88:a6:d8:79:d5:f0:
                    43:90:c3:79:94:5d:34:b6:6a:9c:97:6f:dc:be:18:
                    91:46:6d:d6:9e:84:67:3d:2f:b9:76:7e:8b:d0:64:
                    d8:aa:ba:ea:1d:5b:b8:f0:92:04:37:b3:e5:72:3e:
                    9c:38:54:b6:b3:1e:79:c7:2c:63:ec:91:20:bd:02:
                    2c:2d:b1:a7:34:c6:8a:14:cf:f3:d5:08:c4:20:c8:
                    ba:a7:ef:c7:96:b2:bc:b0:9c:5d:ba:b1:bc:53:89:
                    cd:ec:2a:bd:1c:9e:50:18:99:0e:8e:42:d9:aa:85:
                    85:84:88:6f:f5:03:c1:92:10:6a:4d:39:a9:ff:7e:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6B:08:A1:5D:01:24:0E:0B:3F:B1:59:75:B3:15:68:68:94:13:29
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/3133312e37322e3137302e302f32342d3234203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:92:6f:86:17:dd:44:42:ef:9b:75:e1:e6:49:d0:9c:61:0c:
         2f:5f:18:af:f7:81:ad:cb:5e:ad:7c:88:d3:73:8a:c6:dd:a3:
         7a:7d:22:67:94:46:11:36:f4:45:41:57:26:7f:d2:5d:2e:cf:
         1d:c3:63:17:99:77:3b:60:ae:b9:62:94:9b:e8:6d:18:e0:11:
         aa:ca:bd:ce:5b:97:07:47:bb:b0:26:17:74:6d:65:ab:fc:1d:
         df:2e:b1:56:55:68:d3:b0:c0:78:e9:25:01:42:9b:31:9a:c8:
         77:3f:b9:8a:27:a5:b5:9c:6e:52:74:da:4f:4a:39:d3:5a:64:
         67:3c:c2:eb:87:7e:50:0f:b5:f5:66:e6:89:52:9b:34:a2:77:
         de:7e:ef:d8:eb:f6:b4:91:1d:28:70:90:99:fa:2b:28:b0:ae:
         d4:ba:88:a4:2f:e4:6c:65:d2:de:02:1b:47:95:00:15:e0:ec:
         c0:1c:ad:ef:ae:ad:d6:45:14:4e:29:c5:72:cb:c5:68:35:ce:
         ec:f7:8f:61:43:5b:2c:0e:21:af:af:e3:cd:e7:5a:f1:fd:51:
         fe:e1:bb:54:fc:d4:36:a9:1d:1f:cc:c1:40:a7:58:eb:43:eb:
         35:8c:65:06:43:17:ea:93:11:6d:67:e3:df:a1:71:67:89:35:
         96:ed:7e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org