Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233342e302f32342d3234203d3e20323633373238.roa
File:                     3133312e37322e3233342e302f32342d3234203d3e20323633373238.roa (raw, json)
Hash identifier:          LYXmH2WzcZNPjJuCo2JyWX62/5sdFM/UrVDGiJ/V2B8=
Subject key identifier:   66:DA:AA:5E:25:45:D8:88:9A:AB:DE:E8:AD:69:50:F4:F9:55:04:46
Certificate issuer:       /CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
Certificate serial:       4AF781726C536BD18F7F56CB00767B86385CDBDE
Authority key identifier: A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233342e302f32342d3234203d3e20323633373238.roa
Signing time:             Tue 05 Mar 2024 17:53:22 +0000
ROA not before:           Tue 05 Mar 2024 17:48:22 +0000
ROA not after:            Tue 04 Mar 2025 17:53:22 +0000
asID:                     263728
IP address blocks:        131.72.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f7:81:72:6c:53:6b:d1:8f:7f:56:cb:00:76:7b:86:38:5c:db:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
        Validity
            Not Before: Mar  5 17:48:22 2024 GMT
            Not After : Mar  4 17:53:22 2025 GMT
        Subject: CN=66DAAA5E2545D8889AABDEE8AD6950F4F9550446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:30:79:52:19:b6:50:d0:7a:08:cb:34:39:40:
                    3b:47:47:68:c7:32:7b:be:03:24:42:8a:c6:da:06:
                    74:fd:28:f1:f5:30:06:d7:8f:ee:a0:1a:31:c1:2c:
                    d2:fe:32:27:08:53:3d:d4:79:9e:6f:ae:96:b6:ff:
                    ff:0e:b2:f2:77:d2:2e:b4:aa:5b:17:e1:19:0f:11:
                    a0:96:76:e8:26:86:79:24:08:30:15:9a:24:a6:88:
                    65:c1:71:97:7e:fe:e4:d4:7e:84:44:8d:12:56:5c:
                    31:ea:8a:cf:bf:46:93:b3:3f:c4:38:f5:ba:32:85:
                    84:33:a3:04:99:77:04:7f:13:bf:3f:b5:c2:5c:12:
                    96:29:bc:63:20:d0:c5:17:a8:6d:15:7b:69:ef:9a:
                    bc:81:97:e6:c9:ba:68:2c:cd:22:5f:8a:14:e4:db:
                    5e:49:2c:55:73:64:91:e6:07:a4:32:c5:82:c4:3b:
                    88:c4:e1:58:ff:ce:24:38:80:87:97:17:db:a4:86:
                    d3:65:f6:e3:02:c7:ee:53:d2:27:6f:3d:99:84:7b:
                    61:c7:43:1c:73:08:43:62:a6:15:38:69:be:10:af:
                    a7:8e:59:f4:9b:20:0e:52:4c:ad:f9:d3:7d:58:37:
                    0a:38:69:13:3d:d4:72:c1:46:36:24:a1:18:f8:f7:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DA:AA:5E:25:45:D8:88:9A:AB:DE:E8:AD:69:50:F4:F9:55:04:46
            X509v3 Authority Key Identifier:
                keyid:A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233342e302f32342d3234203d3e20323633373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:51:a0:3d:02:4b:cd:f6:e1:e6:67:f4:79:42:da:2f:d7:a6:
         37:9f:21:cf:4e:57:20:8f:97:fb:19:6f:d5:73:c1:9e:5d:30:
         c7:8f:d4:d4:47:4c:d8:23:ee:a0:31:7b:47:e7:ec:5a:3b:4d:
         c4:38:51:b3:95:d6:c9:b3:62:16:8c:0b:23:2d:0e:f9:d8:1a:
         5b:be:7d:41:cb:09:32:22:51:d5:12:63:91:b8:75:80:18:f7:
         44:8d:f9:86:bf:89:4e:a6:df:40:de:a6:fa:78:d6:fc:28:4b:
         3f:1e:a5:a8:b4:59:09:6b:d8:a2:fe:ab:1c:10:fa:88:6a:de:
         18:24:bc:b3:1c:b3:45:a7:45:5d:ca:f7:a1:dc:73:1d:fb:df:
         dc:9d:dd:1d:a8:ca:1f:3f:f3:9d:39:f5:5d:d3:0c:ff:75:85:
         06:2f:1c:54:31:f9:7c:e1:50:e8:54:eb:59:d7:e0:3d:74:35:
         d9:d7:b4:c5:4b:31:17:84:68:97:fd:63:3a:6c:97:b7:61:26:
         34:17:7e:e5:dc:82:79:9a:93:a4:a6:c0:6c:88:0d:88:d1:ff:
         62:a7:da:b8:d2:e9:22:68:38:81:1b:c0:76:d2:c8:b7:06:26:
         e4:2e:52:41:73:3d:2f:8a:1c:23:b4:af:50:86:56:45:f3:51:
         53:0c:33:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org