Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231302e302f32332d3233203d3e20323635363936.roa
File:                     3133312e3139362e3231302e302f32332d3233203d3e20323635363936.roa (raw, json)
Hash identifier:          w4CGi/tgpPWTMHQgvhPsPdiCqhPIgsyRFZgODWiYlbU=
Subject key identifier:   B6:3D:75:EF:93:A8:B6:30:9B:57:85:F0:65:5D:F0:E8:97:2F:1B:1D
Certificate issuer:       /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial:       236670A32B9B1944EE43E49DA9A15447CEF213C9
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231302e302f32332d3233203d3e20323635363936.roa
Signing time:             Tue 05 Mar 2024 17:40:25 +0000
ROA not before:           Tue 05 Mar 2024 17:35:25 +0000
ROA not after:            Tue 04 Mar 2025 17:40:25 +0000
asID:                     265696
IP address blocks:        131.196.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:66:70:a3:2b:9b:19:44:ee:43:e4:9d:a9:a1:54:47:ce:f2:13:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
        Validity
            Not Before: Mar  5 17:35:25 2024 GMT
            Not After : Mar  4 17:40:25 2025 GMT
        Subject: CN=B63D75EF93A8B6309B5785F0655DF0E8972F1B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:28:56:73:b9:02:43:b7:12:79:4e:98:a1:fd:
                    d4:ad:64:5e:20:b9:42:00:60:61:23:f4:3b:53:63:
                    13:9f:ae:63:69:e1:b8:c7:ec:5f:fe:2b:21:42:1e:
                    25:81:c4:e6:44:84:28:42:2e:17:c2:0b:ee:ad:3e:
                    a7:4c:d7:29:ac:9c:51:42:ec:ea:0d:de:b4:be:e9:
                    70:45:7f:73:04:12:0a:38:ba:a2:79:64:92:a8:18:
                    ae:d2:fb:be:24:f8:8e:5c:10:4c:dd:d0:44:ae:35:
                    84:d9:f5:e6:8a:93:08:8f:08:ed:56:1d:a3:94:3d:
                    7b:ce:9d:a5:73:14:db:82:83:2e:f8:b4:43:2a:af:
                    84:11:54:cb:94:45:43:74:e0:aa:88:60:bb:66:a0:
                    11:4c:71:5e:74:58:ea:79:7c:15:2d:d0:93:7c:f1:
                    11:21:40:f6:74:1f:87:1d:bb:c6:c7:05:bd:76:d0:
                    06:f0:9c:83:e2:e0:33:88:92:e0:25:f7:82:46:94:
                    39:37:8a:34:f7:9c:43:ac:a7:7b:a4:e9:60:97:b3:
                    21:c2:d3:4f:3d:e9:56:a8:9e:49:65:51:6b:9f:9a:
                    75:e9:04:05:d3:05:18:14:74:71:22:6b:67:11:f6:
                    67:a4:5d:13:07:41:2d:d3:21:f8:6c:4c:2e:01:36:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3D:75:EF:93:A8:B6:30:9B:57:85:F0:65:5D:F0:E8:97:2F:1B:1D
            X509v3 Authority Key Identifier:
                keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231302e302f32332d3233203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:d8:ff:06:ce:09:c3:0a:76:0e:d0:da:b7:c8:fd:66:d0:e9:
         b2:49:4f:3f:3c:93:bc:1f:19:c9:13:76:57:7e:8a:38:8a:04:
         0f:c0:04:30:d1:0f:2f:04:f7:11:db:c5:e8:a5:c0:d9:42:d3:
         06:1c:68:28:b8:32:4f:99:a8:53:2c:40:8f:38:f9:61:1e:63:
         b6:f3:f8:e3:45:4c:79:78:e3:cb:f4:a3:f9:54:b9:88:3b:13:
         6f:69:e2:37:9f:34:fe:34:3c:a7:c1:52:61:c5:9f:4d:67:b5:
         cc:5f:51:d7:b0:ee:7b:3b:68:3b:02:17:38:aa:40:e9:e8:5e:
         f8:55:5b:d3:80:c8:6b:b2:df:c2:61:7f:f3:ea:f3:38:ad:5f:
         8b:0c:26:9e:1f:cd:8c:d3:fa:77:5f:40:23:00:d0:3a:07:12:
         fc:2d:63:89:83:26:ab:86:7b:fe:94:c1:9d:50:eb:da:e8:46:
         df:28:2f:36:96:46:76:2d:fc:88:0a:92:97:b2:04:8b:e7:6d:
         d1:b2:a9:5e:76:e4:dc:df:76:10:2f:5d:09:c2:19:64:1f:31:
         19:cd:57:57:59:63:67:cb:aa:f4:d5:11:5e:f9:a8:b9:01:1c:
         27:f5:16:ec:38:7e:08:84:99:fa:c1:b1:b1:a6:69:c5:e9:85:
         8f:28:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org