Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3231372e302f32342d3234203d3e2038303735.roa
File:                     3136312e3133312e3231372e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier:          gYbG3RgQihCRcSmd97i1y029S4LdQThIBA8S2HszYRg=
Subject key identifier:   A0:D0:D8:E6:82:51:2E:FB:11:56:A6:98:DE:82:98:2D:3F:56:46:D2
Certificate issuer:       /CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
Certificate serial:       5E11B77B2DD14B3D0593A2A521769E016211E1D8
Authority key identifier: F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3231372e302f32342d3234203d3e2038303735.roa
Signing time:             Tue 05 Mar 2024 18:22:51 +0000
ROA not before:           Tue 05 Mar 2024 18:17:51 +0000
ROA not after:            Tue 04 Mar 2025 18:22:51 +0000
asID:                     8075
IP address blocks:        161.131.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:11:b7:7b:2d:d1:4b:3d:05:93:a2:a5:21:76:9e:01:62:11:e1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239
        Validity
            Not Before: Mar  5 18:17:51 2024 GMT
            Not After : Mar  4 18:22:51 2025 GMT
        Subject: CN=A0D0D8E682512EFB1156A698DE82982D3F5646D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:21:35:7b:c1:4c:d9:d3:a5:d5:6e:cb:a1:
                    b8:48:68:b2:85:e9:5e:d2:56:53:62:e9:26:57:15:
                    22:c0:50:7d:46:6d:45:dc:31:5e:9b:cb:9e:ed:af:
                    d3:ba:a8:50:f4:5c:30:d2:6d:e7:c2:f3:48:73:8d:
                    72:22:85:a6:31:33:22:03:8f:72:63:60:10:0c:00:
                    3e:e7:bd:ed:47:1f:d7:88:98:d0:30:3e:d2:ad:e5:
                    f1:a2:10:b1:59:69:76:20:11:ed:8c:ee:f6:f5:82:
                    05:4f:d8:10:23:fb:71:25:ca:87:56:9d:b1:94:65:
                    91:96:1b:7c:7e:bb:72:3d:61:78:f9:28:28:9b:bc:
                    a1:0b:fe:13:07:fd:c0:f1:fc:ad:00:de:b4:2f:3e:
                    37:e7:e1:bd:e4:04:29:1e:32:a0:ce:bf:a6:a4:dd:
                    a0:b8:1d:bd:5b:be:49:a3:53:da:04:dd:5c:45:7c:
                    10:f6:91:f4:5d:d1:26:c4:76:e0:1c:84:3f:f9:03:
                    1a:a3:d7:df:f5:c5:77:a5:54:f3:6d:77:75:17:23:
                    dd:26:0d:94:40:27:85:7c:d7:05:00:35:09:18:e3:
                    87:0f:af:08:90:07:b8:b2:2e:cd:de:48:a0:5f:2a:
                    0c:ce:85:0f:75:ed:b5:07:9f:77:3b:70:e6:e1:b2:
                    d7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D0:D8:E6:82:51:2E:FB:11:56:A6:98:DE:82:98:2D:3F:56:46:D2
            X509v3 Authority Key Identifier:
                keyid:F9:7E:CF:83:D1:AD:72:AD:DB:E7:48:13:CF:34:0F:1E:5B:DA:02:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F97ECF83D1AD72ADDBE74813CF340F1E5BDA0239.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2744BCFE048E0FAE20FABDA7476170B1ED1F86F0D6D5985AA93E11C9CA868B19/0/3136312e3133312e3231372e302f32342d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.131.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:dc:2e:12:de:12:d8:25:36:59:96:60:74:60:df:e7:a8:8b:
         c7:21:04:2f:45:33:5c:ba:dd:db:d4:51:27:cd:3b:30:10:df:
         32:55:8a:da:97:1b:fa:07:15:31:77:26:64:90:7c:f2:a9:e7:
         09:bd:b0:ad:1c:f0:82:b5:5b:87:93:4b:5b:b2:c9:f4:c6:8b:
         0f:a8:3b:65:ad:59:59:7d:fc:f0:2e:54:bd:7d:1c:04:93:8b:
         48:7f:e1:21:25:61:ce:78:c7:83:1a:ce:57:3b:51:61:ed:14:
         cb:c6:ed:5b:71:16:07:5d:74:4c:a2:32:4d:c0:68:15:92:c7:
         1c:33:12:ce:9b:15:ee:77:27:ae:1c:85:79:6f:19:08:c0:20:
         69:b3:c8:b1:a8:b8:03:dc:bd:37:b8:1b:1d:e1:dd:14:12:5a:
         89:ba:f9:fc:0e:03:72:e5:01:67:b9:4b:37:01:f6:d1:dc:4f:
         94:2e:e6:af:d8:3a:f1:32:24:fc:73:a5:a6:91:2d:64:6b:5f:
         e1:e3:f3:a3:50:59:c0:16:9f:6a:e0:35:be:e7:e5:ab:95:f6:
         bc:24:bf:68:39:73:29:55:0c:74:80:0f:9a:2c:11:42:9c:7c:
         0d:38:18:74:fd:9e:2c:ad:42:18:7f:b0:06:c2:4a:cf:95:0e:
         81:d9:c6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org