Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/3133312e302e3130382e302f32322d3234203d3e20323637393036.roa
File:                     3133312e302e3130382e302f32322d3234203d3e20323637393036.roa (raw, json)
Hash identifier:          t9f1bkYk4o0jo4Dzxqq4tGVnDhN3gpC8sCmXZXBMsYk=
Subject key identifier:   07:CF:55:C2:C0:C8:56:60:FA:F4:59:71:6F:B5:C8:84:BD:FA:6D:E4
Certificate issuer:       /CN=4C23F5AA03BB1AFD7BAEE8E36D98415754948835
Certificate serial:       1087613DC1498E3B1BA921452AE5C6BC2F320BBD
Authority key identifier: 4C:23:F5:AA:03:BB:1A:FD:7B:AE:E8:E3:6D:98:41:57:54:94:88:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/3133312e302e3130382e302f32322d3234203d3e20323637393036.roa
Signing time:             Fri 15 Mar 2024 21:15:00 +0000
ROA not before:           Fri 15 Mar 2024 21:10:00 +0000
ROA not after:            Fri 14 Mar 2025 21:15:00 +0000
asID:                     267906
IP address blocks:        131.0.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.crl
                          rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:87:61:3d:c1:49:8e:3b:1b:a9:21:45:2a:e5:c6:bc:2f:32:0b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C23F5AA03BB1AFD7BAEE8E36D98415754948835
        Validity
            Not Before: Mar 15 21:10:00 2024 GMT
            Not After : Mar 14 21:15:00 2025 GMT
        Subject: CN=07CF55C2C0C85660FAF459716FB5C884BDFA6DE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:27:33:bf:10:90:5f:bd:49:b2:08:e7:c9:
                    43:6b:dc:df:14:e2:25:03:16:4c:bb:eb:e9:69:8b:
                    b9:23:cf:8a:be:f9:2f:a8:45:5c:93:46:fe:ab:cc:
                    7e:e8:5f:c5:71:4e:c5:13:92:63:9d:d2:25:9a:b1:
                    7b:b5:7a:f4:00:8b:74:04:e6:26:3c:14:7a:8c:2d:
                    37:c7:28:d9:ec:42:91:ac:d0:20:d9:31:f8:15:ba:
                    f6:a7:c1:77:a6:c7:9b:00:9e:ce:1d:87:62:20:a4:
                    81:7d:11:dc:a2:7a:43:8a:5d:e9:7c:9d:9e:d3:5b:
                    87:d9:d6:78:da:0f:f7:80:59:ad:3d:da:b2:f5:0e:
                    9d:ed:41:2c:a2:2d:5b:66:f1:ff:5d:d7:9c:da:98:
                    ef:b9:51:7b:c3:08:1e:12:21:8e:d5:1c:b3:ac:54:
                    74:d9:05:39:6f:09:01:cb:d3:01:04:d4:47:c7:16:
                    e9:f3:9f:5c:be:d9:c3:ca:fb:91:ee:00:11:98:76:
                    25:8d:41:92:ce:8d:9a:34:58:29:e7:5d:a8:fb:4c:
                    4f:54:41:94:e6:d4:74:49:bb:68:ac:b0:76:59:d6:
                    72:3c:e6:90:42:09:1a:4b:83:ab:a5:95:e9:e2:7a:
                    73:40:55:de:d2:5d:a7:50:45:13:df:af:17:24:63:
                    74:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CF:55:C2:C0:C8:56:60:FA:F4:59:71:6F:B5:C8:84:BD:FA:6D:E4
            X509v3 Authority Key Identifier:
                keyid:4C:23:F5:AA:03:BB:1A:FD:7B:AE:E8:E3:6D:98:41:57:54:94:88:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C23F5AA03BB1AFD7BAEE8E36D98415754948835.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55292B9CC339C7E1B4A9E0B296563A2C68F009ED954C0468DF79B667DB7CF487/0/3133312e302e3130382e302f32322d3234203d3e20323637393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:91:5e:53:ce:d0:c7:38:c5:10:60:0f:d7:90:62:f0:6b:c4:
         e3:65:9b:08:dd:d7:ae:a7:c1:72:13:5c:5e:41:1a:cb:96:9b:
         be:a1:88:9d:fd:9f:d3:3a:6e:1c:32:b2:b9:26:29:f0:b2:87:
         ac:f1:1a:be:86:cd:3d:41:10:c3:a2:1d:35:b1:f2:03:1e:6e:
         da:9f:b5:d3:f8:82:c1:af:c3:d5:b8:ef:29:be:9b:7d:93:63:
         62:fd:8c:f4:82:7b:e0:66:80:4a:bf:18:83:5c:15:a7:e3:b0:
         44:d1:8c:ff:7d:4c:1e:b3:f1:65:77:a0:d4:6d:ab:a7:80:93:
         58:9f:d8:4d:a4:aa:f1:54:e2:49:1d:4e:16:a6:bc:b4:9c:68:
         10:cf:7a:58:0e:7e:dc:20:dd:39:a0:fe:6e:b7:aa:94:92:94:
         42:76:1f:8b:ff:fe:68:04:7d:e3:e5:c8:91:9f:f0:93:58:df:
         0d:1b:bd:59:2c:cd:7a:43:8d:22:fd:63:6b:7c:34:02:91:a0:
         16:39:f7:b6:c4:f0:f9:73:6d:dd:47:d8:a2:84:25:ae:1e:79:
         dd:95:14:a9:03:4e:ae:24:44:ee:29:36:55:a4:fa:4b:21:97:
         bb:17:cd:c0:17:bd:8d:c9:1f:58:a7:fa:6e:b5:f2:ae:26:e1:
         55:b1:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org