Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136312e302f32342d3237203d3e20323635373632.roa
File:                     3132382e3230312e3136312e302f32342d3237203d3e20323635373632.roa (raw, json)
Hash identifier:          YnPuoLnTvJsvy8WorasfdruVuurlBU7EbZIY4zuqUJQ=
Subject key identifier:   53:5C:DC:DD:18:EB:EE:F5:32:C3:0A:8D:75:62:7F:5D:88:F5:C3:82
Certificate issuer:       /CN=CF5339F87B278717067560B9059C3098661F754B
Certificate serial:       125A0A264A41C6F0FA4F2D358A377748A28C5D14
Authority key identifier: CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136312e302f32342d3237203d3e20323635373632.roa
Signing time:             Tue 05 Mar 2024 17:48:08 +0000
ROA not before:           Tue 05 Mar 2024 17:43:08 +0000
ROA not after:            Tue 04 Mar 2025 17:48:08 +0000
asID:                     265762
IP address blocks:        128.201.161.0/24 maxlen: 27

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5a:0a:26:4a:41:c6:f0:fa:4f:2d:35:8a:37:77:48:a2:8c:5d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5339F87B278717067560B9059C3098661F754B
        Validity
            Not Before: Mar  5 17:43:08 2024 GMT
            Not After : Mar  4 17:48:08 2025 GMT
        Subject: CN=535CDCDD18EBEEF532C30A8D75627F5D88F5C382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:d8:94:cb:44:da:86:5c:77:8d:e4:61:1e:
                    0f:54:fe:55:79:2f:c4:82:b2:c9:6f:12:07:ee:78:
                    21:95:f7:59:06:42:80:95:4d:93:c8:40:30:8c:7a:
                    19:88:0e:53:a1:a4:82:49:2e:23:6f:b5:93:76:0d:
                    ff:d9:54:f7:94:4b:58:16:a7:d1:b3:c8:4d:c1:d0:
                    84:e6:06:4e:52:e7:6e:b6:c8:94:bc:4b:70:fa:a5:
                    69:64:88:09:a3:de:9e:03:67:ad:16:a7:d0:5a:56:
                    e0:f3:9d:0f:29:ee:d1:d2:60:ac:15:41:c6:90:62:
                    6b:a5:11:83:21:ec:ad:51:f9:57:a5:22:99:49:20:
                    7e:49:46:b5:74:f1:3d:c7:f0:35:db:cd:0f:d7:4a:
                    11:2e:de:44:ad:55:58:90:f1:c2:cd:c0:3c:f6:1f:
                    ec:8e:a3:a8:e7:fd:cc:de:8f:a3:3a:1d:d3:61:d7:
                    83:c6:bb:55:d0:a2:2a:65:91:39:ce:ba:7d:9f:54:
                    46:cd:88:3c:c1:c1:ae:ee:d2:e1:0e:6a:c7:6d:2b:
                    41:36:01:53:aa:23:f3:b0:da:b4:ce:22:ac:55:b1:
                    83:f7:e2:38:ed:56:38:c2:bd:a6:ae:fd:d8:61:fc:
                    23:6e:5d:eb:9d:57:de:50:64:7e:b7:42:d5:70:28:
                    fc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5C:DC:DD:18:EB:EE:F5:32:C3:0A:8D:75:62:7F:5D:88:F5:C3:82
            X509v3 Authority Key Identifier:
                keyid:CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136312e302f32342d3237203d3e20323635373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:46:8c:ce:91:89:62:20:9d:cf:e9:57:b8:ad:eb:07:e7:98:
         cb:32:81:03:b1:9e:ad:49:76:4f:85:fa:96:00:ed:3f:3e:08:
         bf:13:b0:e9:98:0c:7c:86:23:cd:50:c8:23:4d:c5:a8:00:10:
         f5:bb:02:60:e9:8d:db:45:9a:c0:4a:01:00:46:f6:98:1e:d9:
         86:96:6a:42:a0:58:e5:a2:23:b3:b1:fd:fd:ec:03:80:dc:50:
         36:5c:32:8c:a4:2c:63:68:90:bb:1f:aa:bf:e1:e1:53:fa:19:
         6f:1d:64:a9:d7:49:d1:96:65:90:be:4f:b6:9b:30:d3:e6:02:
         b2:de:26:48:fb:8a:02:f9:02:b3:11:f7:a3:4e:78:8d:26:fa:
         b7:52:13:17:1a:da:da:e4:76:40:28:22:a0:56:a2:cc:b1:f3:
         fa:df:ae:a4:15:1b:42:fc:e0:d9:76:61:cf:e4:dd:fd:4c:09:
         47:0d:a2:8d:41:62:e3:bc:01:99:cd:91:50:42:92:58:cc:a9:
         99:7e:41:a1:e6:fa:fb:99:77:d9:06:75:24:84:e5:28:92:8c:
         0e:7d:9b:b5:02:9a:7d:67:1d:36:dd:8b:70:44:fb:4d:8d:92:
         9e:6a:b9:f6:4a:91:26:b4:25:a5:44:7f:b6:5a:91:9f:30:88:
         48:d4:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:44 2024 by rpki-client on console-fra.rpki-client.org