Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233322e302f32322d3232203d3e20323633373238.roa
File:                     3133312e37322e3233322e302f32322d3232203d3e20323633373238.roa (raw, json)
Hash identifier:          QmUUbvIbnBsBtP3xni8FHyM3VYKK+Q0Vim6Ma4NxOmE=
Subject key identifier:   BC:C1:CC:8A:F0:1F:47:68:13:C4:0B:76:2A:98:59:9D:C3:A3:0C:C1
Certificate issuer:       /CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
Certificate serial:       084E2691724944FBCB3FE8EDEA3342224AF2387B
Authority key identifier: A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233322e302f32322d3232203d3e20323633373238.roa
Signing time:             Tue 05 Mar 2024 17:53:22 +0000
ROA not before:           Tue 05 Mar 2024 17:48:22 +0000
ROA not after:            Tue 04 Mar 2025 17:53:22 +0000
asID:                     263728
IP address blocks:        131.72.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4e:26:91:72:49:44:fb:cb:3f:e8:ed:ea:33:42:22:4a:f2:38:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
        Validity
            Not Before: Mar  5 17:48:22 2024 GMT
            Not After : Mar  4 17:53:22 2025 GMT
        Subject: CN=BCC1CC8AF01F476813C40B762A98599DC3A30CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:5c:51:83:b1:9f:39:f9:fa:17:a6:90:dc:
                    21:5e:2b:a3:c4:fe:32:ee:65:77:ac:79:86:e8:c1:
                    26:03:e1:d8:4b:4c:fc:f1:d6:26:72:5c:ff:7a:85:
                    72:bf:a3:42:61:c0:77:66:74:0f:2b:41:78:92:d2:
                    0a:e7:34:63:d3:9d:0d:1c:a2:a9:f8:a4:75:f6:b7:
                    5c:7c:3b:62:88:57:f1:a5:0f:dc:a7:84:5d:35:26:
                    3c:10:b8:d9:24:8e:f3:28:ae:bf:2a:80:e8:79:5b:
                    46:19:f1:a7:a1:b6:14:00:6c:1f:c7:5e:5d:84:98:
                    43:4c:26:26:da:68:78:07:e3:4c:13:af:45:74:41:
                    05:0d:e5:33:49:22:6c:f2:ab:e4:5f:a7:0e:72:8f:
                    3d:08:7d:d9:89:04:29:8b:35:2f:24:df:f4:54:c5:
                    91:61:63:69:d5:cc:14:fe:7b:22:18:b6:fc:e3:27:
                    17:80:bb:45:38:96:28:ce:4e:6b:38:af:86:c9:90:
                    61:b9:f2:71:1a:ec:c3:7b:fe:68:bc:7c:c8:d3:a3:
                    47:6f:c9:fd:6d:cb:81:8b:d1:02:4b:44:55:13:f4:
                    49:cf:ab:13:a2:16:29:32:c2:17:2a:95:a6:20:1c:
                    c8:61:34:ac:f8:f2:eb:21:77:06:29:4b:e9:33:00:
                    ce:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C1:CC:8A:F0:1F:47:68:13:C4:0B:76:2A:98:59:9D:C3:A3:0C:C1
            X509v3 Authority Key Identifier:
                keyid:A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233322e302f32322d3232203d3e20323633373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:92:4d:2f:5c:f4:3a:3a:31:71:28:4f:95:d4:82:95:cb:44:
         fe:1e:2f:1c:d3:7f:7c:f0:38:9e:06:01:56:f9:d1:69:22:e5:
         e2:5f:5b:e0:7e:62:42:95:a0:b1:98:54:7a:e9:1a:7a:e7:b3:
         8e:3c:15:a9:2f:3f:1c:ea:0e:6d:7e:45:7e:7a:ca:21:5f:0e:
         ba:60:e0:59:86:fc:e9:36:2e:2e:9d:b4:fd:3b:47:4e:51:47:
         2a:43:2b:28:1f:08:fb:9c:b3:9a:bb:40:31:a9:aa:86:bb:85:
         77:52:fe:db:6e:3a:3f:91:3f:b2:c8:40:6b:8b:f2:52:71:3c:
         ef:6f:f9:c9:3b:66:77:b9:eb:26:a2:26:9b:f6:56:76:52:f4:
         f3:40:22:08:7c:e4:33:55:1a:24:43:bc:31:37:db:5c:99:ba:
         af:f5:d8:1f:81:85:19:17:ef:07:21:ca:8a:60:6e:4b:a0:07:
         c1:ca:b0:93:f8:4f:c7:22:62:74:6c:55:97:70:c2:a1:b0:6c:
         e4:76:99:b1:66:7c:71:f0:05:21:1b:01:5b:b7:ed:33:9f:e7:
         14:07:24:37:f6:35:f9:ff:6e:cc:6a:a4:0c:c0:0d:59:9c:ad:
         a9:cb:70:38:d3:a7:26:f6:da:dd:a1:a4:26:da:c4:46:5a:fc:
         1f:a5:d7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org