Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3133312e3130382e3139322e302f32322d3234203d3e20323633373137.roa
File:                     3133312e3130382e3139322e302f32322d3234203d3e20323633373137.roa (raw, json)
Hash identifier:          xnw9t4hIYTXi+7CggpsgL81PNE83NTJOJfiEoOt+iBQ=
Subject key identifier:   E7:E3:31:06:68:BD:D4:97:67:98:73:E9:CA:FA:CD:3D:E2:92:52:B6
Certificate issuer:       /CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
Certificate serial:       02F65F7A9B32869E9ED09BB9DBBE6AC7A7D2CEB5
Authority key identifier: 84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3133312e3130382e3139322e302f32322d3234203d3e20323633373137.roa
Signing time:             Tue 05 Mar 2024 18:00:06 +0000
ROA not before:           Tue 05 Mar 2024 17:55:06 +0000
ROA not after:            Tue 04 Mar 2025 18:00:06 +0000
asID:                     263717
IP address blocks:        131.108.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f6:5f:7a:9b:32:86:9e:9e:d0:9b:b9:db:be:6a:c7:a7:d2:ce:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E
        Validity
            Not Before: Mar  5 17:55:06 2024 GMT
            Not After : Mar  4 18:00:06 2025 GMT
        Subject: CN=E7E3310668BDD497679873E9CAFACD3DE29252B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:bc:a7:a8:cf:c0:cf:b9:c6:20:1c:4c:80:
                    6b:75:f3:c0:1e:2c:19:72:07:45:30:35:42:f1:3b:
                    f2:94:b5:95:63:0e:17:0c:08:a7:b4:e0:41:2b:35:
                    5c:c2:cd:dc:fd:ef:50:cc:77:c6:0d:f7:e2:b9:87:
                    7a:f7:3b:02:d8:bf:43:67:cc:cf:18:38:1d:e6:d4:
                    85:a3:b4:ed:fc:e9:59:dd:e7:f3:d4:fc:57:e8:d3:
                    67:44:71:e2:c4:9f:02:3d:77:2a:0f:88:26:2a:19:
                    9e:3f:04:ef:12:fd:f0:07:5d:ed:5e:49:4c:b1:a8:
                    6f:b2:8f:46:a9:9e:0e:8b:36:a4:81:c5:29:bb:8f:
                    54:fd:9d:c7:82:04:a8:cc:b6:75:2c:10:82:35:2b:
                    95:1f:22:c5:80:88:dc:66:cb:3a:28:c2:5c:e6:9b:
                    cd:1b:e6:91:b4:81:61:9c:c4:e2:fa:db:50:3c:41:
                    df:75:bd:09:93:a1:c0:c6:15:62:5a:4d:a2:07:84:
                    85:37:de:a0:e9:64:0e:10:9b:eb:57:b6:90:c8:69:
                    be:45:60:ee:58:e2:9f:d1:45:d7:4e:20:b0:6c:2d:
                    44:32:3e:f7:42:4c:a5:35:e0:c0:a2:dc:08:3c:16:
                    57:c4:1e:18:fb:d9:f5:b2:18:85:7a:79:a8:2d:f5:
                    6e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E3:31:06:68:BD:D4:97:67:98:73:E9:CA:FA:CD:3D:E2:92:52:B6
            X509v3 Authority Key Identifier:
                keyid:84:F2:72:5A:D6:A9:BB:A5:68:3A:F6:D0:B5:3C:99:FA:DF:53:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84F2725AD6A9BBA5683AF6D0B53C99FADF53B99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D844F5ACD038DBD1A7ECF13B683589F2F11AED3BC8F598EF62D4E7921C8DA39/0/3133312e3130382e3139322e302f32322d3234203d3e20323633373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:3a:ab:9c:1d:39:7e:4f:41:74:7a:54:79:80:7b:77:69:96:
         83:57:6c:3d:3d:52:c5:d0:bc:0f:73:9e:ec:0f:25:3a:55:51:
         93:32:57:ad:70:f7:e9:f5:be:c3:ba:bd:a6:27:a8:49:02:59:
         91:5d:7c:ee:7d:40:9f:c0:dd:bc:ba:5e:d8:e2:6c:fe:f2:f6:
         fd:4c:f1:a9:6a:e1:0d:e7:9f:a6:d6:66:d7:90:cd:71:cd:4d:
         a5:88:5b:51:24:71:8c:94:93:9c:60:63:0f:02:24:a5:04:4e:
         b6:e8:a0:07:28:a3:82:3c:67:f3:18:ee:44:14:2f:33:7f:59:
         4d:d8:96:52:46:e2:f7:34:63:01:42:1b:1e:6a:76:dc:31:1c:
         a0:bd:9c:b5:dd:c4:e7:d4:40:92:6e:7e:84:db:6d:17:32:ea:
         ce:c7:e6:c5:7b:73:65:0b:9c:fd:12:b9:c6:4a:84:05:0b:f1:
         d4:9a:f0:77:95:0d:a5:11:ca:12:73:09:09:a6:cb:8c:02:8e:
         7d:78:7c:ed:60:df:1d:18:ae:56:38:9d:44:b8:68:2b:e1:2d:
         ab:e1:65:27:88:29:ba:4f:b4:e8:3d:fe:62:e4:76:ed:be:45:
         db:55:b9:a0:c0:c3:81:35:06:3e:02:99:6f:be:13:cf:54:4e:
         40:48:6a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org