Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa
File:                     3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa (raw, json)
Hash identifier:          BhQyjY13xaN7urVS2bjAk0hYtz//FJbrGTSsqcuXGOY=
Subject key identifier:   07:3B:FD:73:22:1F:A5:C1:F7:FF:31:32:62:BD:01:C7:6F:78:61:C2
Certificate issuer:       /CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
Certificate serial:       188E88CB120B640F4F9EFC503A410279D286B822
Authority key identifier: 6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa
Signing time:             Tue 05 Mar 2024 17:47:40 +0000
ROA not before:           Tue 05 Mar 2024 17:42:40 +0000
ROA not after:            Tue 04 Mar 2025 17:47:40 +0000
asID:                     262187
IP address blocks:        131.100.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8e:88:cb:12:0b:64:0f:4f:9e:fc:50:3a:41:02:79:d2:86:b8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
        Validity
            Not Before: Mar  5 17:42:40 2024 GMT
            Not After : Mar  4 17:47:40 2025 GMT
        Subject: CN=073BFD73221FA5C1F7FF313262BD01C76F7861C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a7:e0:a0:fa:6d:f0:c5:31:3a:a3:7d:65:0d:
                    53:9e:55:6a:be:28:11:90:8d:fc:92:78:42:b6:f1:
                    3f:8d:3a:ac:fc:dd:29:20:2c:4d:6e:67:dd:a7:9b:
                    b2:b8:9d:84:8e:e5:d9:98:a6:b5:bc:51:98:bc:8b:
                    3f:07:c1:12:85:c8:a8:8d:ea:d5:d3:c1:6b:d8:93:
                    09:b9:8c:3c:1b:ec:8a:d9:4d:d9:1b:cc:ad:14:0a:
                    7d:26:fb:31:1f:af:f5:e3:0d:00:b3:72:9c:c8:59:
                    de:cb:d6:a9:0a:e1:ea:67:5f:99:cf:cb:e6:5f:2c:
                    93:a8:4c:3e:7e:12:6c:94:08:bd:94:80:57:a3:8b:
                    36:d3:7b:e9:e9:2e:a1:d6:f1:a0:9f:f5:99:18:ca:
                    f7:93:d2:32:ac:af:35:c7:6a:2e:d6:86:3f:ab:e5:
                    51:23:e6:be:bd:68:a7:8a:05:af:c1:74:65:72:e4:
                    2f:0c:2b:4a:0a:db:37:c1:ec:c7:bf:b0:a5:c1:ac:
                    6c:f3:49:9a:f4:1f:f3:f5:c3:dd:50:94:61:4b:5e:
                    46:61:3a:2d:eb:1a:48:03:6c:51:d1:70:be:dd:10:
                    4d:14:65:9c:c2:95:04:59:9a:d1:6b:80:ec:69:61:
                    fa:4a:48:82:6a:93:f6:87:53:f7:10:7f:b9:9f:fa:
                    3c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3B:FD:73:22:1F:A5:C1:F7:FF:31:32:62:BD:01:C7:6F:78:61:C2
            X509v3 Authority Key Identifier:
                keyid:6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3133312e3130302e3138302e302f32322d3234203d3e20323632313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:99:7b:d0:9e:f4:e9:32:59:13:12:5b:73:1a:47:fa:8f:
         dd:38:08:20:a7:17:91:00:bb:65:ef:60:75:90:fb:35:2c:4a:
         01:50:a0:96:43:71:16:01:14:cf:ca:b3:d7:5c:8e:04:2f:15:
         16:22:aa:76:52:85:b0:69:fc:d4:8d:59:fb:a7:5a:b0:a1:0d:
         b4:d5:c5:f8:31:67:36:8b:6b:a2:86:51:22:81:4d:aa:36:ea:
         95:98:ce:0a:3f:0e:cf:01:b6:f6:80:c5:c2:e3:c2:52:24:75:
         15:87:9c:d9:74:e0:30:9c:47:ee:4f:db:d0:ef:c6:38:fb:3b:
         3d:96:b3:f9:9e:3a:8c:86:cd:d1:54:b8:f1:6e:41:f5:97:13:
         26:3c:a2:e1:29:c7:e6:8c:ed:19:00:48:55:7a:7c:81:08:9d:
         1b:d1:01:25:f5:87:ca:c4:a7:fe:db:57:d9:39:31:3f:23:5c:
         94:fb:42:e0:95:8c:90:50:aa:ae:fa:53:d8:ff:20:f3:91:97:
         9d:75:84:f4:a6:da:60:54:27:b2:73:78:74:32:b8:88:aa:67:
         73:75:56:22:3c:80:31:44:09:89:78:d5:f2:52:07:8b:88:df:
         04:69:15:e6:50:43:d5:b2:fa:73:6d:32:cd:82:30:62:49:de:
         fc:31:52:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org