Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38342e302f32332d3233203d3e203237373831.roa
File:                     3133312e3136312e38342e302f32332d3233203d3e203237373831.roa (raw, json)
Hash identifier:          FqdrS8P1hmi2uAXn9y0PSNjUNMCnaeMvBkWLb5dqvH8=
Subject key identifier:   55:87:A6:2B:38:0E:D9:8A:F1:8C:53:A5:7F:20:DF:91:55:98:C8:BA
Certificate issuer:       /CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
Certificate serial:       26AF809E89D7E83AECFF53769EC416FBA80EECBA
Authority key identifier: CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38342e302f32332d3233203d3e203237373831.roa
Signing time:             Mon 15 Apr 2024 04:50:01 +0000
ROA not before:           Mon 15 Apr 2024 04:45:01 +0000
ROA not after:            Mon 14 Apr 2025 04:50:01 +0000
asID:                     27781
IP address blocks:        131.161.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:af:80:9e:89:d7:e8:3a:ec:ff:53:76:9e:c4:16:fb:a8:0e:ec:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Validity
            Not Before: Apr 15 04:45:01 2024 GMT
            Not After : Apr 14 04:50:01 2025 GMT
        Subject: CN=5587A62B380ED98AF18C53A57F20DF915598C8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:dd:68:02:f0:dd:f5:18:6e:ee:0d:29:2b:
                    b0:79:ac:a4:55:4f:b6:8f:21:0e:c0:d7:c4:10:24:
                    df:47:a2:d0:a8:d8:e1:e7:d8:8d:e2:43:1c:b0:59:
                    e3:54:64:0c:06:48:91:b4:b6:58:50:81:31:05:aa:
                    7b:97:7a:da:8d:82:e0:b1:37:fa:ba:b6:1b:6b:0c:
                    5e:0b:02:bf:bc:95:87:33:da:c4:69:c5:d2:03:35:
                    bb:56:7e:b0:d7:7d:0b:7f:dc:35:1f:25:40:21:a6:
                    e8:fd:7d:f5:74:dd:22:ea:b1:50:92:ca:b7:9b:66:
                    69:14:ee:3d:db:55:cc:d2:03:8e:99:00:85:50:29:
                    49:be:97:68:4d:83:03:86:d9:dc:5a:67:fa:6a:43:
                    03:73:a0:89:11:cf:f0:aa:ff:c3:bc:fe:4a:37:42:
                    50:75:11:7d:c0:a8:38:51:63:0d:e7:26:1d:12:fa:
                    27:2f:2d:2d:b9:50:94:e8:db:a8:f4:84:0c:b2:ff:
                    d6:a7:6f:37:d6:98:6e:0a:8e:23:60:e5:33:cb:6b:
                    30:6a:7f:cf:0c:25:a3:f7:db:28:d1:7f:19:39:5a:
                    fb:a4:5a:34:81:93:65:10:c6:1c:f3:3f:9d:7e:00:
                    62:22:9f:cb:1d:45:bb:ae:99:78:47:22:1c:44:a3:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:87:A6:2B:38:0E:D9:8A:F1:8C:53:A5:7F:20:DF:91:55:98:C8:BA
            X509v3 Authority Key Identifier:
                keyid:CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38342e302f32332d3233203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:d4:a1:e7:bf:e3:e6:29:6e:a9:88:e4:a6:eb:26:11:d5:c6:
         24:e0:69:f4:35:da:2f:ad:66:ef:08:fd:6f:6b:67:74:28:41:
         ea:52:dc:35:2a:2e:dd:14:bf:b4:8b:3f:7d:ec:5b:24:af:61:
         47:b3:0d:96:a0:4b:9b:ca:e9:73:86:93:1a:74:4c:63:1f:4b:
         18:c5:cf:32:00:e0:60:a4:c7:85:85:be:87:96:6e:5a:5c:41:
         5c:8f:83:6b:50:26:32:91:c5:98:d6:14:b7:09:53:ba:9d:f1:
         42:31:3d:0e:24:c9:7f:ab:23:c5:ca:c2:c2:76:c3:1d:08:20:
         0c:fc:51:f5:70:29:b1:8d:7a:22:a6:34:b1:13:9a:da:1f:58:
         76:70:0e:15:32:90:f1:d6:80:aa:66:e1:36:7d:9a:0c:2a:63:
         07:4d:d6:68:58:5e:3f:4f:41:1b:01:23:03:4b:7c:25:b3:67:
         ca:d1:b9:11:03:3a:e0:ff:2c:5f:66:30:66:55:fc:51:93:4a:
         42:92:40:3c:d8:7d:1f:18:7d:05:e7:76:5f:4a:ae:12:a8:6f:
         f3:2f:18:d7:c9:4e:cf:8c:0b:53:a2:07:1a:b2:9d:35:b2:a8:
         63:98:9d:b8:bf:de:4a:6a:f9:54:f5:87:ab:35:3e:a5:d9:a0:
         5c:41:91:9a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJq+AnonX6Drs/1N2nsQW+6gO7LowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FFMzIwMTVERjNCMzYyOEZDNDA0NkYzNkMxNTVGRkNC
QThCMzk4QTAeFw0yNDA0MTUwNDQ1MDFaFw0yNTA0MTQwNDUwMDFaMDMxMTAvBgNV
BAMTKDU1ODdBNjJCMzgwRUQ5OEFGMThDNTNBNTdGMjBERjkxNTU5OEM4QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuht1oAvDd9Rhu7g0pK7B5rKRV
T7aPIQ7A18QQJN9HotCo2OHn2I3iQxywWeNUZAwGSJG0tlhQgTEFqnuXetqNguCx
N/q6thtrDF4LAr+8lYcz2sRpxdIDNbtWfrDXfQt/3DUfJUAhpuj9ffV03SLqsVCS
yrebZmkU7j3bVczSA46ZAIVQKUm+l2hNgwOG2dxaZ/pqQwNzoIkRz/Cq/8O8/ko3
QlB1EX3AqDhRYw3nJh0S+icvLS25UJTo26j0hAyy/9anbzfWmG4KjiNg5TPLazBq
f88MJaP32yjRfxk5WvukWjSBk2UQxhzzP51+AGIin8sdRbuumXhHIhxEo951AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUVYemKzgO2YrxjFOlfyDfkVWYyLowHwYDVR0j
BBgwFoAUyuMgFd87Nij8QEbzbBVf/LqLOYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MjEyOUU5Mzk4RjM3RDIzOTc3MkMzQzc3NzIzQTQzMTFC
QjEyMzE2QTc2RUQ4OTNBMjNEQ0RFRjE4QjIwQTY5LzAvQ0FFMzIwMTVERjNCMzYy
OEZDNDA0NkYzNkMxNTVGRkNCQThCMzk4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUUzMjAxNURGM0IzNjI4RkM0
MDQ2RjM2QzE1NUZGQ0JBOEIzOThBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTIxMjlFOTM5OEYzN0QyMzk3NzJDM0M3NzcyM0E0MzExQkIxMjMxNkE3
NkVEODkzQTIzRENERUYxOEIyMEE2OS8wLzMxMzMzMTJlMzEzNjMxMmUzODM0MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzM3MzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYOhVDAN
BgkqhkiG9w0BAQsFAAOCAQEAItSh57/j5iluqYjkpusmEdXGJOBp9DXaL61m7wj9
b2tndChB6lLcNSou3RS/tIs/fexbJK9hR7MNlqBLm8rpc4aTGnRMYx9LGMXPMgDg
YKTHhYW+h5ZuWlxBXI+Da1AmMpHFmNYUtwlTup3xQjE9DiTJf6sjxcrCwnbDHQgg
DPxR9XApsY16IqY0sROa2h9YdnAOFTKQ8daAqmbhNn2aDCpjB03WaFheP09BGwEj
A0t8JbNnytG5EQM64P8sX2YwZlX8UZNKQpJAPNh9Hxh9Bed2X0quEqhv8y8Y18lO
z4wLU6IHGrKdNbKoY5iduL/eSmr5VPWHqzU+pdmgXEGRmg==
-----END CERTIFICATE-----
Generated at Tue Nov 19 04:01:17 2024 by rpki-client on console-ams.rpki-client.org