Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3138322e302f32342d3234203d3e203134373935.roa
File:                     3136312e3133312e3138322e302f32342d3234203d3e203134373935.roa (raw, json)
Hash identifier:          AGm7rxRAm+5AFoJ2F1Xj/JrfyjP+SDfrEzlszU8xvaw=
Subject key identifier:   1B:75:71:EA:77:7B:16:49:C1:F2:EC:C6:B1:12:6B:8A:AA:1B:08:60
Certificate issuer:       /CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
Certificate serial:       6870216B07837CB7F9ADE2358A473E23A955504F
Authority key identifier: F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3138322e302f32342d3234203d3e203134373935.roa
Signing time:             Tue 05 Mar 2024 18:22:52 +0000
ROA not before:           Tue 05 Mar 2024 18:17:52 +0000
ROA not after:            Tue 04 Mar 2025 18:22:52 +0000
asID:                     14795
IP address blocks:        161.131.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:70:21:6b:07:83:7c:b7:f9:ad:e2:35:8a:47:3e:23:a9:55:50:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
        Validity
            Not Before: Mar  5 18:17:52 2024 GMT
            Not After : Mar  4 18:22:52 2025 GMT
        Subject: CN=1B7571EA777B1649C1F2ECC6B1126B8AAA1B0860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:c5:ba:6c:19:9d:32:92:1a:4f:6b:c1:ef:
                    6e:1d:63:54:9e:29:8b:bb:6e:92:ab:1b:99:ff:96:
                    b8:67:0c:81:30:78:51:05:c0:e0:8f:8e:af:29:e6:
                    da:e3:67:25:44:22:12:84:a2:a9:19:e2:02:36:a1:
                    74:d1:e6:8d:d1:8e:c7:75:80:5b:46:2c:e6:90:07:
                    74:89:37:1c:9f:09:36:3f:4b:fd:85:6d:8f:26:2e:
                    42:08:53:11:f3:e3:9b:ca:9b:1e:be:28:4a:5f:17:
                    7f:dc:bb:49:08:f4:d5:15:91:69:86:70:d9:7d:b4:
                    c8:d4:fd:ce:9f:01:8e:bf:3f:47:15:f6:0e:13:8d:
                    cc:9c:8f:6d:02:9c:b8:07:0f:5d:4e:fa:09:5c:35:
                    0f:91:54:4b:12:ff:3a:92:a7:a5:93:bb:0e:4f:87:
                    03:18:8d:dc:9e:ca:ef:f5:65:f1:f1:ac:fa:5a:1a:
                    0c:8f:d7:bd:9a:3c:fa:ad:fc:75:c2:49:3a:fa:68:
                    8a:5d:10:3e:cc:3b:dc:75:c7:83:07:c8:ef:c7:32:
                    7d:dc:3d:00:9d:fb:3a:ab:4d:3e:75:d1:9d:68:df:
                    5d:6e:0a:5e:0b:90:49:30:36:d1:28:49:b0:e4:11:
                    ed:0a:cb:6a:35:8f:85:37:6f:82:c6:76:16:42:32:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:75:71:EA:77:7B:16:49:C1:F2:EC:C6:B1:12:6B:8A:AA:1B:08:60
            X509v3 Authority Key Identifier:
                keyid:F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3138322e302f32342d3234203d3e203134373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.131.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:7e:1d:20:c3:95:6a:75:64:14:bf:90:9a:17:ed:e0:ec:42:
         03:d5:ca:26:3a:4e:4a:74:78:ff:69:c7:b3:d0:24:fd:6f:98:
         a9:7a:4d:e2:74:98:7d:5c:f8:45:24:7d:c9:93:63:0e:81:aa:
         18:2b:f3:1b:5b:e5:f6:6a:ed:38:5b:25:30:44:46:20:7b:3b:
         b7:ea:8d:9c:31:0a:ac:a9:95:de:39:89:02:df:19:b1:38:a5:
         03:04:ae:26:aa:47:0a:d4:3e:49:d0:32:e0:14:be:b8:ce:a9:
         fa:90:e8:aa:60:94:ce:13:9f:47:46:57:b3:6d:fa:9b:5b:91:
         56:e8:02:1c:b6:27:d8:d3:5a:eb:75:40:f5:1c:ad:f0:de:d7:
         d2:8f:08:af:c0:19:d7:1b:c8:97:fc:f0:b0:dd:b9:9e:0b:02:
         a0:6b:49:f1:f3:14:3f:c6:d1:03:ba:9f:a2:c2:4c:f5:29:c9:
         40:f3:92:c2:8e:e4:40:15:f0:39:81:8a:69:64:2f:d6:c6:ab:
         91:df:ac:34:5f:e2:ca:3e:c6:5c:7d:f2:1c:6a:2a:2b:0d:b2:
         48:f9:5e:c1:58:6b:90:d6:dc:0b:65:87:74:fd:84:57:52:13:
         e9:eb:c5:bf:c7:7e:c2:f8:ce:a6:a2:a0:6e:28:bd:d3:0e:98:
         45:86:39:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org