Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/3133312e37322e3133362e302f32322d3234203d3e20323732303433.roa
File:                     3133312e37322e3133362e302f32322d3234203d3e20323732303433.roa (raw, json)
Hash identifier:          FPcfYwvc8DNy9x+kagN7/A7pvqQ05SEccZBCCK6QVL4=
Subject key identifier:   74:18:D3:EE:0E:FF:F8:D1:C3:5B:28:02:99:FA:48:48:98:59:FC:57
Certificate issuer:       /CN=AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192
Certificate serial:       3247A935FCFBB3CA3B93AF24A8CE0CC5FA66CC76
Authority key identifier: AD:0A:C5:C8:18:83:14:F9:3F:8D:AB:29:61:A0:B2:1B:0B:3B:21:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/3133312e37322e3133362e302f32322d3234203d3e20323732303433.roa
Signing time:             Tue 05 Mar 2024 18:17:54 +0000
ROA not before:           Tue 05 Mar 2024 18:12:54 +0000
ROA not after:            Tue 04 Mar 2025 18:17:54 +0000
asID:                     272043
IP address blocks:        131.72.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:47:a9:35:fc:fb:b3:ca:3b:93:af:24:a8:ce:0c:c5:fa:66:cc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192
        Validity
            Not Before: Mar  5 18:12:54 2024 GMT
            Not After : Mar  4 18:17:54 2025 GMT
        Subject: CN=7418D3EE0EFFF8D1C35B280299FA48489859FC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:e3:b5:b7:9d:e9:23:6b:e6:91:dc:7f:82:
                    91:ff:6d:dc:b7:44:32:6e:f5:d3:19:fe:73:00:59:
                    13:23:2e:10:5e:b5:85:f8:dd:97:6b:11:42:c8:bf:
                    ab:ef:ad:f4:7e:8b:b7:44:1c:aa:77:75:2a:06:a4:
                    39:05:f8:42:4f:6f:7c:c0:0d:7e:85:e1:67:95:d2:
                    fb:48:5e:1a:26:3e:8f:fc:f4:44:f3:b1:0d:ad:03:
                    74:7e:07:ba:b9:47:0c:5f:2b:4c:15:1c:b9:bb:e9:
                    8e:2b:b0:fc:2f:d3:11:6c:15:4d:07:6e:8f:5f:26:
                    be:5e:b5:4e:61:94:fc:ae:a2:9d:64:2e:a3:d3:86:
                    1d:e3:54:f7:3c:7a:7b:07:00:7a:fb:9d:b3:1f:63:
                    b1:77:bc:ef:16:43:5c:a8:d5:38:cf:be:52:7f:51:
                    88:77:94:40:1d:4c:eb:00:1a:69:32:03:5a:07:8a:
                    3c:40:42:44:1b:b7:d9:ae:eb:24:c4:34:43:ba:80:
                    9b:ef:92:90:5b:92:40:33:cc:2c:8c:5f:a9:86:61:
                    ff:d3:9f:58:70:b4:3e:b9:e8:e7:ac:e7:08:eb:c2:
                    1a:38:30:a9:a3:89:16:59:96:76:44:01:11:5f:65:
                    56:54:39:c8:3c:64:63:3b:8f:fa:93:60:05:6c:4f:
                    fd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:D3:EE:0E:FF:F8:D1:C3:5B:28:02:99:FA:48:48:98:59:FC:57
            X509v3 Authority Key Identifier:
                keyid:AD:0A:C5:C8:18:83:14:F9:3F:8D:AB:29:61:A0:B2:1B:0B:3B:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD0AC5C8188314F93F8DAB2961A0B21B0B3B2192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AA2EBB687195FD49844E1D0D3115E92CDA6103B3994B0D6303D16B1799B337B/0/3133312e37322e3133362e302f32322d3234203d3e20323732303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:48:ac:6a:35:5e:a7:95:72:fc:cf:32:61:a4:95:92:50:
         d6:2a:9e:df:9c:81:2f:5b:2c:50:84:ef:d4:f7:71:ca:af:12:
         dc:f4:c1:60:ee:6b:6d:a8:f2:df:81:4c:3b:5f:21:f2:1a:ef:
         40:f3:d7:0e:e3:d0:96:88:80:ee:2b:50:9c:d5:0a:c5:2c:da:
         7b:52:bf:0a:5e:7e:04:e7:29:0e:3c:25:42:49:7a:78:b9:3a:
         b9:94:de:06:dc:4c:42:a9:d5:99:a4:ae:92:ec:b9:c1:2f:27:
         c6:37:8b:f0:10:50:fc:3e:d6:56:f9:06:10:72:fc:7f:1c:60:
         21:3b:b2:70:35:17:30:f0:5c:5f:17:0a:66:39:f1:23:eb:6d:
         e6:2a:46:55:df:75:da:23:aa:f7:91:ea:68:0c:71:d4:4f:34:
         a6:5e:84:e5:83:59:90:e9:e0:c7:fa:f3:db:c7:f6:b4:0d:f7:
         60:f6:82:5a:71:29:25:b2:fc:ba:00:02:03:f3:68:53:27:0a:
         ef:00:f7:8d:f2:ef:85:c8:69:56:8c:7a:9a:a9:ba:1d:fc:2c:
         b2:58:35:3a:6a:66:07:b8:9a:99:79:88:2f:93:45:86:1b:5f:
         27:c9:4c:a7:64:76:e3:f3:7f:e5:1c:4d:77:a3:67:64:d2:47:
         6f:be:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:16 2024 by rpki-client on console-ams.rpki-client.org