Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3133312e3136312e3130312e302f32342d3234203d3e20323632313832.roa
File:                     3133312e3136312e3130312e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          VI/K0wpGqxkBoJHA1D7/BB1IR8OPY7GS0MaFoxqzZuc=
Subject key identifier:   42:95:5F:ED:9B:E7:35:86:78:40:C6:C9:99:8A:55:60:C7:73:E9:EE
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       318C91EBB008F4D30C8944746A23B086AB7B47A8
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3133312e3136312e3130312e302f32342d3234203d3e20323632313832.roa
Signing time:             Mon 11 Mar 2024 19:00:00 +0000
ROA not before:           Mon 11 Mar 2024 18:55:00 +0000
ROA not after:            Mon 10 Mar 2025 19:00:00 +0000
asID:                     262182
IP address blocks:        131.161.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8c:91:eb:b0:08:f4:d3:0c:89:44:74:6a:23:b0:86:ab:7b:47:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Mar 11 18:55:00 2024 GMT
            Not After : Mar 10 19:00:00 2025 GMT
        Subject: CN=42955FED9BE735867840C6C9998A5560C773E9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:90:07:21:53:64:71:f2:cc:95:8b:27:91:
                    55:54:32:97:a4:9a:ce:96:95:a5:a1:1b:a3:2f:09:
                    0c:1b:93:40:e2:b3:6b:99:96:28:f0:10:73:be:25:
                    d0:25:da:c4:25:28:45:d1:14:f6:e5:79:14:4a:71:
                    77:78:33:a1:ae:41:90:18:ac:81:d4:40:ca:c6:c3:
                    2f:cc:e4:d3:07:5d:ca:72:af:7b:f1:48:54:e5:ca:
                    af:11:72:6b:7a:65:bd:11:48:ce:2e:13:28:aa:79:
                    fe:6d:40:f7:4c:82:35:eb:0f:13:0d:cf:38:db:4d:
                    c1:56:c0:5d:39:af:06:41:3c:dc:fa:36:f9:b3:cd:
                    28:bf:3e:fa:a7:1e:df:90:e4:96:83:72:ee:4f:3b:
                    2a:8b:e3:0a:c6:93:af:57:73:35:4a:7d:91:65:f0:
                    43:86:94:ac:ba:94:29:de:5b:72:6e:1e:67:df:ac:
                    a3:b5:ad:1f:3b:70:c8:f8:74:e1:4d:11:60:ed:93:
                    25:b9:e8:05:74:2a:4f:1b:af:60:be:b2:09:19:94:
                    64:12:f1:b1:21:fc:25:de:dc:70:6b:7a:7e:02:dd:
                    41:9e:fa:45:09:49:7f:b7:36:ec:2f:6c:a4:f6:13:
                    2f:2d:fe:fe:fe:f8:c4:71:0f:c1:7c:36:48:75:2e:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:95:5F:ED:9B:E7:35:86:78:40:C6:C9:99:8A:55:60:C7:73:E9:EE
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3133312e3136312e3130312e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:67:27:70:3b:b2:16:f9:5f:cf:1a:f2:22:e3:22:81:bb:82:
         42:b9:7f:db:87:d2:f3:6c:90:a9:8d:cf:46:22:45:1c:bb:8b:
         bd:3e:f4:0b:50:43:37:4a:b4:2c:73:3f:49:d5:a6:52:f7:12:
         81:51:c4:27:55:d9:57:19:4f:c3:9c:02:b8:b1:fd:f4:26:6e:
         aa:5c:d5:44:52:42:84:ac:ed:0d:41:48:ef:0a:46:3b:28:af:
         29:ae:cc:fa:5e:3b:d6:e9:e6:b4:e7:56:fa:e8:ce:c1:aa:34:
         0e:1e:47:2c:6f:a9:c1:f3:97:59:a9:a7:9e:39:ae:7e:99:3d:
         2b:6e:ac:68:77:85:e2:2f:5e:ac:f8:c5:af:b6:21:b4:a5:f7:
         a5:95:5a:22:6f:ae:b6:e5:71:c5:34:28:59:74:6b:12:6c:32:
         c4:5c:c7:f3:ad:75:10:4e:f3:86:02:fc:8a:5b:54:6f:95:5e:
         57:a0:5a:3e:ba:59:a1:26:92:a3:f6:a8:97:24:c0:94:b3:80:
         33:a5:9c:5a:7c:98:36:a1:e2:4c:8f:44:ed:65:8e:f2:50:9e:
         df:51:a9:1c:8a:d0:9c:e4:67:3f:02:a6:57:e8:4a:45:d0:8c:
         06:6c:6a:9a:37:5c:18:07:69:57:21:80:f0:a9:56:4d:75:4d:
         f5:f6:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:48 2024 by rpki-client on console-ams.rpki-client.org