Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38352e302f32342d3234203d3e203237373831.roa
File:                     3133312e3136312e38352e302f32342d3234203d3e203237373831.roa (raw, json)
Hash identifier:          5OBkoPFCDLh+cJwopWltUOyk5svIXU2Fr/QfUnI5eYA=
Subject key identifier:   9B:96:7A:08:A7:71:C9:CE:36:A7:B0:50:5B:7A:AA:C4:C1:E3:C8:8A
Certificate issuer:       /CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
Certificate serial:       337FB261DA370BB09BC63FC9B4F02DD590AC8904
Authority key identifier: CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38352e302f32342d3234203d3e203237373831.roa
Signing time:             Mon 15 Apr 2024 04:50:01 +0000
ROA not before:           Mon 15 Apr 2024 04:45:01 +0000
ROA not after:            Mon 14 Apr 2025 04:50:01 +0000
asID:                     27781
IP address blocks:        131.161.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7f:b2:61:da:37:0b:b0:9b:c6:3f:c9:b4:f0:2d:d5:90:ac:89:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE32015DF3B3628FC4046F36C155FFCBA8B398A
        Validity
            Not Before: Apr 15 04:45:01 2024 GMT
            Not After : Apr 14 04:50:01 2025 GMT
        Subject: CN=9B967A08A771C9CE36A7B0505B7AAAC4C1E3C88A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:6f:ae:4e:1a:37:f2:26:96:b7:b9:a9:cd:
                    12:4b:5a:a2:08:50:21:4c:61:f0:49:e6:34:5c:0b:
                    26:ec:60:22:59:89:c4:1a:a8:9f:02:2b:d2:ce:c0:
                    3c:2a:44:cc:52:ec:66:8d:08:cc:bc:b9:de:11:c7:
                    53:27:dd:b9:3d:a0:27:fd:03:10:19:c1:9c:3a:e6:
                    6d:31:b6:77:97:00:39:a9:40:3d:a0:6e:7a:f8:4b:
                    90:02:47:9c:f9:1c:40:ec:78:05:65:6d:3a:f7:96:
                    29:17:65:07:93:91:4a:e1:e8:ed:f1:16:5e:df:57:
                    70:0a:67:9c:bf:16:d5:e0:b0:fb:ca:51:d4:ab:ff:
                    16:b0:0c:6f:96:d4:be:81:9b:3d:1e:ed:f8:2e:28:
                    6c:00:d3:3e:80:49:08:aa:65:98:70:d5:08:fd:4a:
                    4a:bc:a3:dd:4b:d9:3a:27:a5:9f:b4:5b:61:5c:f2:
                    1f:34:2c:c1:ed:c6:53:cc:26:40:6b:f1:14:93:20:
                    2c:51:ff:3c:07:1b:52:f8:f1:0d:03:35:17:c6:f7:
                    b3:71:86:53:2d:a2:d9:52:22:13:db:5b:f9:6b:9d:
                    19:d5:35:e4:82:74:24:95:14:9c:61:fe:30:67:e4:
                    c4:27:1c:92:cd:af:2a:aa:f6:0e:a8:22:db:fa:96:
                    e9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:96:7A:08:A7:71:C9:CE:36:A7:B0:50:5B:7A:AA:C4:C1:E3:C8:8A
            X509v3 Authority Key Identifier:
                keyid:CA:E3:20:15:DF:3B:36:28:FC:40:46:F3:6C:15:5F:FC:BA:8B:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAE32015DF3B3628FC4046F36C155FFCBA8B398A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52129E9398F37D239772C3C77723A4311BB12316A76ED893A23DCDEF18B20A69/0/3133312e3136312e38352e302f32342d3234203d3e203237373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:46:22:43:35:eb:3f:09:0b:1b:a0:63:0d:1a:90:24:de:d1:
         76:83:9d:c9:2f:a7:08:02:31:2f:23:79:46:66:76:1c:26:de:
         5b:6a:ca:a9:df:64:b0:76:d3:a1:18:02:a4:4b:a4:c8:23:ee:
         5b:8b:3d:8c:66:c6:83:3d:fa:1e:38:07:8e:d0:de:b7:2e:37:
         7f:68:15:b2:a5:88:43:c8:8d:a9:93:bd:18:5e:48:8f:6b:fa:
         5a:a7:ce:e7:ab:0a:e9:44:93:1b:c8:88:e5:df:dd:05:e0:d9:
         3b:e5:fa:ed:9d:73:29:40:92:8f:dc:78:08:be:2d:4c:bd:24:
         83:5a:65:7d:b0:c6:b4:54:34:d8:00:8c:d5:60:22:f6:7b:d0:
         1b:88:2d:75:5a:4f:c2:d6:e3:86:f7:5d:cd:f6:76:ff:b3:8b:
         64:cc:34:e3:5d:d6:21:c0:f2:56:a2:d6:a7:a1:22:57:2c:d1:
         a8:2e:2e:8b:3a:34:85:d5:73:88:d3:1a:23:b7:09:d7:10:0e:
         a8:9a:24:f6:cb:3f:d9:33:bc:26:e8:ce:76:33:fe:13:6c:a5:
         92:6e:9c:a4:6d:8b:c2:b7:9a:3f:0c:89:4c:25:21:8c:b3:4f:
         39:d6:57:31:e9:a6:24:25:81:d6:b6:00:0d:d9:73:90:52:be:
         47:37:f3:3c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUM3+yYdo3C7Cbxj/JtPAt1ZCsiQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FFMzIwMTVERjNCMzYyOEZDNDA0NkYzNkMxNTVGRkNC
QThCMzk4QTAeFw0yNDA0MTUwNDQ1MDFaFw0yNTA0MTQwNDUwMDFaMDMxMTAvBgNV
BAMTKDlCOTY3QTA4QTc3MUM5Q0UzNkE3QjA1MDVCN0FBQUM0QzFFM0M4OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrXG+uTho38iaWt7mpzRJLWqII
UCFMYfBJ5jRcCybsYCJZicQaqJ8CK9LOwDwqRMxS7GaNCMy8ud4Rx1Mn3bk9oCf9
AxAZwZw65m0xtneXADmpQD2gbnr4S5ACR5z5HEDseAVlbTr3likXZQeTkUrh6O3x
Fl7fV3AKZ5y/FtXgsPvKUdSr/xawDG+W1L6Bmz0e7fguKGwA0z6ASQiqZZhw1Qj9
Skq8o91L2TonpZ+0W2Fc8h80LMHtxlPMJkBr8RSTICxR/zwHG1L48Q0DNRfG97Nx
hlMtotlSIhPbW/lrnRnVNeSCdCSVFJxh/jBn5MQnHJLNryqq9g6oItv6lumtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUm5Z6CKdxyc42p7BQW3qqxMHjyIowHwYDVR0j
BBgwFoAUyuMgFd87Nij8QEbzbBVf/LqLOYowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MjEyOUU5Mzk4RjM3RDIzOTc3MkMzQzc3NzIzQTQzMTFC
QjEyMzE2QTc2RUQ4OTNBMjNEQ0RFRjE4QjIwQTY5LzAvQ0FFMzIwMTVERjNCMzYy
OEZDNDA0NkYzNkMxNTVGRkNCQThCMzk4QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUUzMjAxNURGM0IzNjI4RkM0
MDQ2RjM2QzE1NUZGQ0JBOEIzOThBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTIxMjlFOTM5OEYzN0QyMzk3NzJDM0M3NzcyM0E0MzExQkIxMjMxNkE3
NkVEODkzQTIzRENERUYxOEIyMEE2OS8wLzMxMzMzMTJlMzEzNjMxMmUzODM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3MzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIOhVTAN
BgkqhkiG9w0BAQsFAAOCAQEAZ0YiQzXrPwkLG6BjDRqQJN7RdoOdyS+nCAIxLyN5
RmZ2HCbeW2rKqd9ksHbToRgCpEukyCPuW4s9jGbGgz36HjgHjtDety43f2gVsqWI
Q8iNqZO9GF5Ij2v6WqfO56sK6USTG8iI5d/dBeDZO+X67Z1zKUCSj9x4CL4tTL0k
g1plfbDGtFQ02ACM1WAi9nvQG4gtdVpPwtbjhvddzfZ2/7OLZMw0413WIcDyVqLW
p6EiVyzRqC4uizo0hdVziNMaI7cJ1xAOqJok9ss/2TO8JujOdjP+E2ylkm6cpG2L
wreaPwyJTCUhjLNPOdZXMemmJCWB1rYADdlzkFK+RzfzPA==
-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:17 2024 by rpki-client on console-fra.rpki-client.org