Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3133312e302e3136382e302f32322d3234203d3e20323632313931.roa
File:                     3133312e302e3136382e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          3r9oxefaOXPjVM8WK2Bf0ETNIGLIpwbZYQD0k2iYu7k=
Subject key identifier:   B1:EF:E0:E2:BE:9B:9D:45:A0:4D:05:57:FD:6B:94:3F:B8:31:BC:EF
Certificate issuer:       /CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
Certificate serial:       12B71562AB7661CF3D9F4873B84C83E314EDA225
Authority key identifier: E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3133312e302e3136382e302f32322d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:09:18 +0000
ROA not before:           Tue 05 Mar 2024 18:04:18 +0000
ROA not after:            Tue 04 Mar 2025 18:09:18 +0000
asID:                     262191
IP address blocks:        131.0.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b7:15:62:ab:76:61:cf:3d:9f:48:73:b8:4c:83:e3:14:ed:a2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
        Validity
            Not Before: Mar  5 18:04:18 2024 GMT
            Not After : Mar  4 18:09:18 2025 GMT
        Subject: CN=B1EFE0E2BE9B9D45A04D0557FD6B943FB831BCEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f7:ac:f2:6b:1b:96:68:70:56:46:13:5e:4f:
                    a3:9e:ff:e1:b7:14:70:8a:a1:4e:71:35:42:b9:6b:
                    00:63:98:81:b5:e8:d1:52:c8:54:86:df:d7:58:69:
                    0b:d3:6a:55:6a:c7:5d:34:18:c4:81:ba:f7:d0:fa:
                    c0:87:82:bc:e0:19:6b:85:ba:43:69:35:bd:19:d3:
                    43:e7:e9:c6:64:de:e7:9b:86:75:ae:9a:0e:3b:34:
                    99:b6:a1:dd:fb:1f:bf:a4:f5:99:ec:95:b5:6a:2f:
                    71:83:f9:77:3c:63:4a:d0:e7:f2:af:54:b0:d2:b6:
                    4c:5e:68:15:dd:16:87:56:bf:f2:c4:ac:e6:8f:dd:
                    31:0e:f7:9f:81:ec:02:f4:2f:75:5a:2b:e3:4f:14:
                    9c:ca:d3:d5:96:ee:99:ef:b8:a8:42:4c:2f:b7:55:
                    33:42:4c:8d:74:83:53:59:0a:c2:c7:b9:d8:b0:89:
                    80:ba:90:5f:1f:d6:75:2f:08:38:35:99:40:35:7a:
                    ec:c5:5a:cf:14:ae:33:71:15:f0:99:03:31:c6:fd:
                    25:b8:97:03:1d:ae:2c:e9:63:d3:57:af:0b:c8:e1:
                    6e:b5:99:52:fe:13:f0:10:c7:86:d1:46:02:45:36:
                    a9:2c:a0:66:6e:8a:15:7b:a2:64:7c:f1:13:7a:81:
                    53:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EF:E0:E2:BE:9B:9D:45:A0:4D:05:57:FD:6B:94:3F:B8:31:BC:EF
            X509v3 Authority Key Identifier:
                keyid:E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3133312e302e3136382e302f32322d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:6b:dc:c7:a3:7b:51:35:10:c2:89:0b:20:6a:95:8a:3d:03:
         85:aa:a1:55:f1:bb:44:76:ea:9f:b7:21:37:f0:a1:a7:ef:82:
         cb:e4:88:37:f6:74:1f:21:a8:fb:20:5f:91:ee:d9:1f:6e:19:
         50:d4:2d:e3:05:60:ca:79:f3:36:02:f6:75:e8:f5:3e:de:63:
         94:41:4e:1f:13:1d:22:dc:23:f6:95:73:71:11:0c:de:39:f4:
         f5:df:99:f1:74:93:17:21:87:e1:63:a3:dd:78:92:c9:75:a6:
         c0:a8:29:92:00:83:25:9d:60:c5:6a:ed:a7:3a:d1:86:07:cd:
         4c:0a:c7:df:82:15:54:10:a6:54:86:45:ae:77:50:02:b8:ed:
         3c:9e:e8:b9:ac:93:90:07:10:a8:a5:38:88:f1:a1:8e:34:18:
         3b:e3:2b:df:dc:0d:a3:10:87:63:35:99:a3:35:27:b2:bd:53:
         67:f4:c8:87:d6:54:a0:28:89:03:f7:2b:60:fc:44:a5:43:9c:
         e5:ae:32:f8:78:1a:ae:7e:95:f8:08:c2:ba:4b:7d:71:a6:c4:
         47:82:2a:cf:81:6f:fb:5a:6b:09:9f:58:e9:cc:0b:42:39:09:
         ca:70:20:fd:83:a4:60:3e:b2:a6:e8:0a:14:b4:6c:0e:13:17:
         ce:59:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org