Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/3133312e3130382e38302e302f32322d3234203d3e203631343536.roa
File:                     3133312e3130382e38302e302f32322d3234203d3e203631343536.roa (raw, json)
Hash identifier:          71GBs2SLIeWWCDvcIkV3sdiH/08GnMovRGxE9HLKtQs=
Subject key identifier:   54:D5:E1:B7:19:23:88:AF:A4:54:64:CF:4F:A2:EF:7B:AE:E7:F2:7C
Certificate issuer:       /CN=89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE
Certificate serial:       016AC92BA2102FC5490C84BBC26DCB23494BA978
Authority key identifier: 89:C8:23:AD:60:CB:A4:B0:7B:90:92:FB:3D:0B:F1:A0:B8:C1:5A:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/3133312e3130382e38302e302f32322d3234203d3e203631343536.roa
Signing time:             Tue 05 Mar 2024 17:59:10 +0000
ROA not before:           Tue 05 Mar 2024 17:54:10 +0000
ROA not after:            Tue 04 Mar 2025 17:59:10 +0000
asID:                     61456
IP address blocks:        131.108.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6a:c9:2b:a2:10:2f:c5:49:0c:84:bb:c2:6d:cb:23:49:4b:a9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE
        Validity
            Not Before: Mar  5 17:54:10 2024 GMT
            Not After : Mar  4 17:59:10 2025 GMT
        Subject: CN=54D5E1B7192388AFA45464CF4FA2EF7BAEE7F27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d8:8f:47:bd:d6:c1:ac:0d:2d:d6:77:77:b9:
                    25:d0:70:29:03:67:cc:76:d7:cc:55:b1:2d:b4:49:
                    f5:60:99:30:5c:70:26:00:c0:fc:5c:67:df:7b:7c:
                    a0:d6:0d:da:fd:b5:12:9c:6e:81:c1:c6:bb:8d:35:
                    c2:3f:60:18:57:e2:3b:e9:4a:22:77:67:a3:fb:28:
                    27:95:c4:3f:d4:db:27:bd:71:05:13:b0:26:6d:05:
                    c8:5f:97:ef:6f:3f:41:ee:4c:d0:f2:cb:81:7a:7d:
                    cd:3b:f0:e3:6c:ca:d9:33:94:8a:55:d2:ff:ff:83:
                    e5:c7:fb:4d:fd:34:ec:99:a8:ac:3e:f1:a9:bb:4d:
                    aa:b8:6c:f2:30:18:9f:7e:37:4f:e8:fe:53:5c:e7:
                    b4:ac:0b:2e:a9:a9:6d:eb:d8:16:c8:40:59:65:82:
                    12:82:9e:18:99:2e:4e:ad:09:af:dd:26:79:04:e9:
                    bb:36:c4:ee:04:28:a4:61:bd:d1:1f:2f:79:4e:f4:
                    f7:2c:49:30:a3:cb:06:13:99:fd:13:ab:9f:2d:d5:
                    4b:33:3e:fb:d0:e4:76:09:13:73:fd:29:08:c2:43:
                    73:74:70:ae:60:a0:52:8f:56:c8:ce:dd:1e:6b:17:
                    2f:91:5b:86:69:0e:39:e7:51:7d:10:10:fc:c6:ad:
                    23:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D5:E1:B7:19:23:88:AF:A4:54:64:CF:4F:A2:EF:7B:AE:E7:F2:7C
            X509v3 Authority Key Identifier:
                keyid:89:C8:23:AD:60:CB:A4:B0:7B:90:92:FB:3D:0B:F1:A0:B8:C1:5A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89C823AD60CBA4B07B9092FB3D0BF1A0B8C15ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32172A23BE77A860A2249F55413A16450A59671EF9A2F812A942EC07D9D05C0F/0/3133312e3130382e38302e302f32322d3234203d3e203631343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:41:ea:2a:7f:a1:75:6e:fc:6f:dd:90:c1:91:3c:f4:cd:d6:
         73:8f:17:75:51:ec:3e:6a:79:33:60:5e:d6:f8:a4:5d:95:9f:
         60:50:2d:df:81:fa:34:dd:60:2e:17:bb:6b:3a:d2:19:3d:15:
         5b:b7:1d:3d:51:5e:b0:af:70:1e:27:a5:65:b9:ac:15:ea:5d:
         1a:d2:af:6c:b8:34:fb:62:38:3f:77:46:0f:51:98:74:a6:18:
         ac:49:bb:eb:08:db:c8:09:57:2c:b5:27:c7:68:a8:ae:f4:94:
         31:4e:0f:28:78:99:f4:a6:7d:bd:d3:84:59:75:6d:b3:d9:56:
         87:84:8a:a3:03:bc:1d:a7:7e:9b:80:a3:96:17:23:0a:d1:c9:
         ee:28:af:c1:7c:6c:68:b8:50:67:bb:0e:0b:3d:1f:a1:10:2e:
         02:33:bc:05:d6:51:92:e4:00:cb:69:01:70:8c:fc:82:69:48:
         5a:38:5d:94:59:c3:18:a2:82:69:82:88:e6:cb:23:8e:06:f0:
         22:9d:91:58:96:2b:60:da:7c:35:f6:32:0b:3d:85:f9:83:4e:
         73:92:26:54:d6:b6:34:1f:ea:72:b7:98:79:be:26:15:90:44:
         f8:20:d2:d0:d8:ae:e6:2c:df:51:4d:ee:78:68:af:ae:21:70:
         2b:a1:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:37 2024 by rpki-client on console-ams.rpki-client.org