Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/3133312e3232312e302e302f32322d3232203d3e203631343936.roa
File:                     3133312e3232312e302e302f32322d3232203d3e203631343936.roa (raw, json)
Hash identifier:          VfPGGUY/792ZSJUJVWOIjXRN3f0JxsQT1YY2omNBYyo=
Subject key identifier:   A1:5A:4F:39:DA:14:99:18:8E:04:38:24:80:2E:69:44:7B:2C:15:8D
Certificate issuer:       /CN=5B9F0C6DD937A790D2253F464556FB7F19BBAF49
Certificate serial:       74B25D8830754322B8F4DA6C51367BEF2AA7ABE3
Authority key identifier: 5B:9F:0C:6D:D9:37:A7:90:D2:25:3F:46:45:56:FB:7F:19:BB:AF:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/3133312e3232312e302e302f32322d3232203d3e203631343936.roa
Signing time:             Tue 05 Mar 2024 17:51:40 +0000
ROA not before:           Tue 05 Mar 2024 17:46:40 +0000
ROA not after:            Tue 04 Mar 2025 17:51:40 +0000
asID:                     61496
IP address blocks:        131.221.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b2:5d:88:30:75:43:22:b8:f4:da:6c:51:36:7b:ef:2a:a7:ab:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9F0C6DD937A790D2253F464556FB7F19BBAF49
        Validity
            Not Before: Mar  5 17:46:40 2024 GMT
            Not After : Mar  4 17:51:40 2025 GMT
        Subject: CN=A15A4F39DA1499188E043824802E69447B2C158D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:d7:96:20:9b:c4:a5:ca:05:67:1c:50:3b:
                    1b:ec:dd:a4:42:b2:4b:68:0e:6b:c7:91:e9:86:cb:
                    a5:00:23:4b:2f:37:84:0e:d4:e0:31:be:6c:45:6b:
                    2e:de:ac:3d:3b:83:7f:38:3a:32:1b:6c:38:af:69:
                    ff:9c:e5:c8:34:39:2a:19:7d:1e:e1:cf:ef:1d:bc:
                    87:f2:f5:af:5a:a0:b1:a7:64:99:32:65:58:e7:08:
                    8e:87:90:3f:32:10:8c:35:07:e6:56:05:81:78:26:
                    12:c0:d5:9a:c2:2b:e2:e6:13:81:0d:82:85:b7:0f:
                    a6:40:b5:da:c9:6f:0e:26:9c:33:c5:c3:72:c8:8f:
                    aa:db:ae:6d:da:cf:ab:70:16:83:45:f8:28:ed:4c:
                    80:64:17:c0:66:70:f8:6c:a5:ef:39:6a:85:05:dc:
                    a3:65:a4:1d:eb:84:24:00:c7:69:42:9f:2c:d5:db:
                    fc:6d:d4:a9:73:c4:37:32:1a:84:86:d7:9e:a4:de:
                    5a:cb:80:18:c5:80:88:3d:8a:fb:34:29:3c:a5:00:
                    ba:58:ad:20:bf:bf:2b:80:80:06:70:e1:0f:52:1c:
                    a6:f9:0e:d8:4a:b0:59:90:eb:9a:06:ab:8c:c5:d0:
                    18:40:9c:44:da:3c:0a:0f:7c:15:d8:0d:dd:f6:33:
                    27:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5A:4F:39:DA:14:99:18:8E:04:38:24:80:2E:69:44:7B:2C:15:8D
            X509v3 Authority Key Identifier:
                keyid:5B:9F:0C:6D:D9:37:A7:90:D2:25:3F:46:45:56:FB:7F:19:BB:AF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9F0C6DD937A790D2253F464556FB7F19BBAF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E096433E294E2F7CC18CB583D47E63876B9D01D3E2F48C3517630DE4685DA28/0/3133312e3232312e302e302f32322d3232203d3e203631343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:11:de:92:43:ac:fb:7f:37:58:0d:1a:f3:ed:33:b2:47:f7:
         07:9d:23:16:2f:fe:ac:b8:dc:16:f3:81:49:99:72:28:e4:59:
         dc:86:3b:98:04:3b:85:b2:46:a2:51:e6:a0:1d:be:6a:59:f6:
         53:33:4e:dd:3e:04:57:81:34:6e:15:99:eb:39:39:6a:64:f6:
         6c:e1:2d:29:c4:9c:60:83:1f:ea:2d:4c:34:e7:50:c6:ec:29:
         8c:64:d5:06:70:8a:83:a2:c1:d6:8e:04:cc:fc:ec:02:02:fd:
         b8:3c:c8:5b:66:1b:67:d4:5f:16:7e:d6:e4:1c:64:b6:80:53:
         07:1c:bd:0c:26:45:ba:79:b4:1d:a0:36:67:41:0d:c9:55:e6:
         24:89:db:0a:11:af:92:98:12:8e:e8:9e:a9:49:a1:6d:a0:ea:
         73:ce:da:5d:47:3a:3f:23:43:00:d5:fc:60:33:8a:53:46:bb:
         a2:7e:b8:0d:fc:28:2c:ad:17:f1:92:dd:d0:26:53:4e:47:f6:
         ea:96:13:44:71:2d:4b:f5:4b:08:c0:3e:7f:68:36:9f:a5:be:
         4c:ef:03:b3:3c:12:79:93:69:ec:49:87:ac:d5:68:8d:39:60:
         4a:df:7e:7b:ca:d2:7c:3f:ea:3f:bb:89:30:7d:b9:24:6e:1e:
         23:e0:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org