Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3133312e302e37322e302f32322d3232203d3e203133333335.roa
File:                     3133312e302e37322e302f32322d3232203d3e203133333335.roa (raw, json)
Hash identifier:          aOdrrdpQ3NYRYYmW/x6x3TL2qRKVWAD8QsBjHRH7mEA=
Subject key identifier:   CD:21:2C:53:33:DC:76:A2:49:F8:17:DE:15:81:BE:E4:0F:1B:68:F8
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       2012950A61F6AF95411F4126BB968DA1BA3DAC57
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3133312e302e37322e302f32322d3232203d3e203133333335.roa
Signing time:             Mon 29 Apr 2024 16:00:00 +0000
ROA not before:           Mon 29 Apr 2024 15:55:00 +0000
ROA not after:            Mon 28 Apr 2025 16:00:00 +0000
asID:                     13335
IP address blocks:        131.0.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:12:95:0a:61:f6:af:95:41:1f:41:26:bb:96:8d:a1:ba:3d:ac:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Apr 29 15:55:00 2024 GMT
            Not After : Apr 28 16:00:00 2025 GMT
        Subject: CN=CD212C5333DC76A249F817DE1581BEE40F1B68F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:ab:da:94:7f:f4:b2:14:4f:56:4d:5c:ae:
                    76:2f:ce:1d:37:c9:0e:40:fa:23:f8:f0:0f:01:33:
                    b7:99:1d:88:bc:2f:98:0f:29:2a:06:a2:71:a9:f8:
                    06:ce:86:d3:c1:36:fd:6c:24:ec:63:5f:35:be:03:
                    35:59:23:4b:c3:1c:b1:96:ee:04:b5:4f:ed:d2:88:
                    c3:80:75:9b:08:93:db:70:62:02:92:be:39:71:3b:
                    8e:e4:d1:e6:94:e4:07:4d:75:26:1a:bb:cd:5a:10:
                    49:ab:48:d4:44:a8:a4:f7:67:94:f2:87:4f:67:eb:
                    c7:99:a5:96:88:93:a7:b8:a3:0b:d8:94:7d:98:e6:
                    44:58:65:22:c1:da:a0:36:b1:68:de:f8:10:8d:2d:
                    bc:16:ec:b4:25:71:b1:e9:f7:5c:25:1f:3d:4d:09:
                    11:08:85:e1:3f:44:9b:22:ff:7b:fd:a2:04:8c:b1:
                    42:d1:83:ba:c4:a3:f3:d1:9b:08:82:59:5d:02:c0:
                    d9:a0:0d:9e:c4:c1:f6:a1:3d:a0:8a:d5:fd:43:69:
                    4d:42:c1:24:c6:16:90:59:ba:6f:62:c4:a4:29:ce:
                    82:0a:41:bc:77:66:91:48:3e:cb:d0:e6:0f:8a:db:
                    7d:52:07:8d:c0:0e:6e:19:28:dd:9f:76:d7:bd:5d:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:21:2C:53:33:DC:76:A2:49:F8:17:DE:15:81:BE:E4:0F:1B:68:F8
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3133312e302e37322e302f32322d3232203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:2c:67:59:d6:61:f4:7b:0d:ff:c5:fa:73:58:67:ec:88:64:
         df:95:b7:96:2a:70:9a:42:08:42:ac:6d:a1:92:bb:71:77:3d:
         90:86:74:be:99:9b:54:31:ed:1f:c6:cc:c3:8f:08:a8:ba:b3:
         cd:93:66:a0:07:1a:ac:21:67:98:6a:81:bb:0f:b8:31:0d:bb:
         65:fd:dd:e5:71:06:46:dd:e8:22:76:1d:68:13:04:cd:6e:0d:
         49:14:74:cd:58:9c:36:af:13:29:46:b6:9f:20:ca:d9:bb:e8:
         83:72:7c:72:2f:04:15:1d:86:49:f8:68:7d:c3:ec:3c:e8:b0:
         7b:be:20:1e:2e:07:be:9b:a0:7e:fc:ad:04:f5:ba:4c:87:cf:
         17:42:3d:2e:de:2f:22:b0:86:93:b7:9d:6b:d9:ea:eb:e0:cd:
         53:a4:31:1b:6c:5a:53:b9:25:81:57:8a:d7:7d:1b:b7:cc:d1:
         79:5c:19:9b:82:4a:9b:32:fe:69:76:35:f7:aa:19:d8:db:5a:
         6f:2d:55:e3:90:52:bf:1e:4b:52:82:f8:09:fb:f1:a5:ea:69:
         08:50:f2:68:99:a2:36:4b:67:d7:f4:09:58:6f:ff:14:56:96:
         c9:7b:1a:e9:a2:ad:06:d3:7e:ab:5a:32:e2:9a:fe:ad:0f:dc:
         1e:db:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org