Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/3133312e3232312e342e302f32322d3232203d3e203436313938.roa
File:                     3133312e3232312e342e302f32322d3232203d3e203436313938.roa (raw, json)
Hash identifier:          6ueLZJ7DNFb3l5NpIRAzAX7tYUFLt/u17WxpyJgAfrM=
Subject key identifier:   F9:29:A8:44:F1:69:18:B9:4B:99:AB:9A:32:E1:A0:BF:20:09:CC:74
Certificate issuer:       /CN=BA1555F56F1EE9CECA76B3AD5D23EE829D006D98
Certificate serial:       09C06CF8D3B279B96F84F5F4A3F582CB54C4524D
Authority key identifier: BA:15:55:F5:6F:1E:E9:CE:CA:76:B3:AD:5D:23:EE:82:9D:00:6D:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/3133312e3232312e342e302f32322d3232203d3e203436313938.roa
Signing time:             Tue 05 Mar 2024 17:52:47 +0000
ROA not before:           Tue 05 Mar 2024 17:47:47 +0000
ROA not after:            Tue 04 Mar 2025 17:52:47 +0000
asID:                     46198
IP address blocks:        131.221.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c0:6c:f8:d3:b2:79:b9:6f:84:f5:f4:a3:f5:82:cb:54:c4:52:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1555F56F1EE9CECA76B3AD5D23EE829D006D98
        Validity
            Not Before: Mar  5 17:47:47 2024 GMT
            Not After : Mar  4 17:52:47 2025 GMT
        Subject: CN=F929A844F16918B94B99AB9A32E1A0BF2009CC74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3e:d1:0d:47:78:4d:5b:e2:f7:1d:30:e4:b0:
                    41:f3:9f:9a:be:1f:ec:04:1e:05:ab:ed:67:69:9b:
                    79:7a:ae:0e:fd:4b:a1:64:ce:d1:60:f6:8c:c4:94:
                    5a:75:d7:98:53:9a:53:1e:6c:58:71:79:f5:0c:fb:
                    60:3d:38:4e:9c:95:73:f0:71:6e:0f:9b:56:05:cf:
                    f0:e0:5a:b2:46:45:37:43:00:9c:df:b1:9d:01:43:
                    63:96:64:8a:96:46:09:50:cd:60:f4:58:2d:5b:48:
                    ee:05:e0:e6:72:65:c8:9d:53:f2:7b:36:e5:41:4b:
                    71:fd:3b:8e:65:7a:4d:e9:d5:9f:d4:5c:82:1e:af:
                    9f:54:25:ef:1f:a4:32:90:4b:3d:dd:6f:95:3f:2f:
                    83:d9:22:51:e5:ef:e0:5d:26:13:2a:8b:e4:96:b0:
                    40:42:87:da:8a:78:b5:92:d3:16:11:98:e2:e0:ee:
                    da:5a:6d:01:ee:04:b1:d6:d3:fa:12:23:ac:a1:40:
                    2d:48:2b:79:c2:ea:e5:7d:8b:d4:63:9f:48:8d:b5:
                    36:dd:a4:04:62:98:ac:87:9a:b5:0c:39:20:ac:66:
                    dd:fe:05:d2:6a:c3:72:30:9b:c2:f2:d7:8f:0d:d7:
                    c6:6f:6b:a5:6a:56:1c:04:44:d0:8e:48:34:80:34:
                    03:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:29:A8:44:F1:69:18:B9:4B:99:AB:9A:32:E1:A0:BF:20:09:CC:74
            X509v3 Authority Key Identifier:
                keyid:BA:15:55:F5:6F:1E:E9:CE:CA:76:B3:AD:5D:23:EE:82:9D:00:6D:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/3133312e3232312e342e302f32322d3232203d3e203436313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:f5:29:36:6a:0f:a7:fb:ff:b1:98:54:af:84:63:41:99:ac:
         ff:25:78:dc:4a:9c:9c:18:13:7a:77:68:89:f2:14:eb:00:9f:
         76:22:b1:c3:31:bf:6f:26:cf:c0:93:5c:1f:ee:20:00:21:ae:
         26:ef:0d:67:1b:61:5f:d9:fb:d0:e0:25:b3:c0:2e:15:f0:a0:
         d7:a1:61:16:23:b5:e2:67:ae:ba:55:3e:86:da:26:8a:cf:98:
         e4:89:99:7d:5a:21:5e:d7:39:6b:ad:2f:f1:21:25:2f:44:a2:
         45:1b:e1:80:cc:96:b0:87:38:0c:df:5a:62:02:71:a1:4b:36:
         ae:2d:e7:b6:a4:32:0a:bb:e4:16:df:a4:b2:48:86:b7:a0:8f:
         14:0d:d8:6d:ef:87:1b:b3:b8:bf:60:cd:bc:b7:9b:50:3f:f4:
         67:f8:57:be:e6:a1:b8:1c:10:4e:51:fa:8e:a9:c3:6f:31:a0:
         87:70:e1:be:4b:4c:de:62:4b:99:a0:64:44:f8:e2:22:16:16:
         8d:82:64:19:ff:ef:51:7a:0a:cc:8b:41:38:80:8a:a9:2b:a5:
         00:3e:37:d2:ef:da:47:4f:37:9e:6d:91:02:b3:f4:31:fe:c9:
         c6:b2:92:bf:f7:1c:a5:f9:cc:77:d4:4f:29:a4:42:8e:e9:a8:
         4a:b2:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org