Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231312e302f32342d3234203d3e20323635363936.roa
File:                     3133312e3139362e3231312e302f32342d3234203d3e20323635363936.roa (raw, json)
Hash identifier:          5RERmwcZe3Z51Lt60d9OXWHZsVj8/3opV7M7j6YtMoQ=
Subject key identifier:   7E:97:C3:49:93:52:DA:9F:E5:25:4D:98:68:A8:74:91:C7:40:4F:BD
Certificate issuer:       /CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
Certificate serial:       19A21DD09A2EBE16F6A0EBF840626E250CD6F980
Authority key identifier: 0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231312e302f32342d3234203d3e20323635363936.roa
Signing time:             Tue 05 Mar 2024 17:40:24 +0000
ROA not before:           Tue 05 Mar 2024 17:35:24 +0000
ROA not after:            Tue 04 Mar 2025 17:40:24 +0000
asID:                     265696
IP address blocks:        131.196.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a2:1d:d0:9a:2e:be:16:f6:a0:eb:f8:40:62:6e:25:0c:d6:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D60903B8375FC5C2CB891635E0EA87B50DA3595
        Validity
            Not Before: Mar  5 17:35:24 2024 GMT
            Not After : Mar  4 17:40:24 2025 GMT
        Subject: CN=7E97C3499352DA9FE5254D9868A87491C7404FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:bf:38:70:94:3d:14:01:f9:18:95:0f:e6:
                    6b:fc:5f:52:a9:61:f3:bf:de:d2:f3:94:9c:a0:80:
                    ff:3e:c9:0f:03:6f:2f:97:f9:9d:c0:73:b8:e0:22:
                    0d:09:5f:4a:8b:b5:4a:d3:72:eb:97:ae:ef:2d:59:
                    a2:b8:9f:01:b3:4c:c4:a2:e6:58:44:46:a9:62:2a:
                    54:c1:b6:ba:1e:a4:ec:4d:3f:dd:16:ec:af:66:37:
                    ba:53:e5:a9:67:46:98:90:b9:08:d9:17:69:bf:37:
                    97:30:a4:15:fa:ee:b0:26:5f:a5:69:f9:0f:5f:2b:
                    e8:58:53:e7:b9:a2:a7:31:78:d6:e0:62:db:e2:17:
                    42:e1:d3:7a:47:98:a5:9d:d5:62:fc:16:0b:37:2b:
                    e4:63:fd:be:b2:a4:c6:a7:f8:2d:6d:19:0e:ee:e9:
                    15:d0:37:d6:55:08:aa:6b:09:0a:62:3a:d5:6b:06:
                    a3:72:43:de:6d:45:09:d4:6d:eb:53:15:2b:e7:ff:
                    fa:46:45:79:a9:f0:e1:36:be:21:29:6b:dc:02:88:
                    9d:ba:d4:8e:7f:26:9d:81:1b:74:a8:eb:fc:9c:c2:
                    d5:3e:9d:b4:89:b7:ed:f2:c3:08:e2:f9:2b:39:f8:
                    89:11:ea:cd:2d:28:a4:9c:53:5e:33:02:ed:13:c3:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:97:C3:49:93:52:DA:9F:E5:25:4D:98:68:A8:74:91:C7:40:4F:BD
            X509v3 Authority Key Identifier:
                keyid:0D:60:90:3B:83:75:FC:5C:2C:B8:91:63:5E:0E:A8:7B:50:DA:35:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D60903B8375FC5C2CB891635E0EA87B50DA3595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CE5CD9E42F98AC797D65E96A9D09E31F5FBC5884D1F802FAE80CF8FD50FDF9D/0/3133312e3139362e3231312e302f32342d3234203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:bb:1a:1d:75:de:f2:5a:72:4f:2a:d1:b7:f2:0f:26:74:49:
         38:e2:b4:c7:73:93:3a:d8:22:c6:af:d8:c3:9a:6e:ac:4e:c4:
         c9:70:2b:a6:c7:17:82:25:96:b4:20:11:aa:f7:bc:a7:8b:6d:
         df:2f:1a:44:10:b4:73:99:42:a3:db:02:44:ad:4a:22:c3:af:
         1e:a4:4f:8a:ea:dc:e7:7c:af:ce:d5:da:59:33:49:b4:46:07:
         a5:34:5d:aa:6c:65:55:62:02:53:5a:dd:3e:18:92:fb:2b:ed:
         2a:08:77:5c:5e:3e:65:73:bd:c1:3f:64:27:40:0d:59:23:fd:
         e8:07:65:45:f0:45:e4:5f:9e:77:55:c6:42:0d:0b:29:33:0d:
         f4:d0:4b:e4:d9:cc:fb:4a:d7:e2:13:de:c4:eb:07:7c:e7:b3:
         5d:56:b4:c9:27:98:2a:2b:4d:90:e5:79:e9:a7:a2:81:74:b6:
         35:34:b6:6d:bc:16:ba:10:00:99:21:9f:21:18:9b:7d:72:8b:
         f7:7b:aa:88:af:b9:9a:24:9a:ab:7a:1b:70:85:d3:34:71:9d:
         9f:dc:61:e8:ca:da:e1:57:9a:a8:67:dd:72:59:f8:4d:f9:be:
         3c:8a:23:46:c2:91:a0:22:a1:ec:57:ce:fe:a8:53:df:b8:1c:
         a0:de:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org