Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/3133312e3235352e3133392e302f32342d3234203d3e20323731383631.roa
File:                     3133312e3235352e3133392e302f32342d3234203d3e20323731383631.roa (raw, json)
Hash identifier:          4dhA8tpZT+PxmfWi/I90MQOmKzE/xPPKeLH2uflSL1Q=
Subject key identifier:   59:D1:77:FA:2E:BD:BE:B6:B5:3A:AE:C3:F9:7A:BC:89:41:18:55:86
Certificate issuer:       /CN=8CECD8998683594E93B9972D95397E3623CDB7A8
Certificate serial:       21592F9B1FC7BB908D622FA7548A32F51CAC0DF5
Authority key identifier: 8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/3133312e3235352e3133392e302f32342d3234203d3e20323731383631.roa
Signing time:             Wed 15 May 2024 14:45:00 +0000
ROA not before:           Wed 15 May 2024 14:40:00 +0000
ROA not after:            Wed 14 May 2025 14:45:00 +0000
asID:                     271861
IP address blocks:        131.255.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:59:2f:9b:1f:c7:bb:90:8d:62:2f:a7:54:8a:32:f5:1c:ac:0d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CECD8998683594E93B9972D95397E3623CDB7A8
        Validity
            Not Before: May 15 14:40:00 2024 GMT
            Not After : May 14 14:45:00 2025 GMT
        Subject: CN=59D177FA2EBDBEB6B53AAEC3F97ABC8941185586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:19:fd:20:cb:8c:62:85:f4:b2:d2:e8:4e:d0:
                    db:f9:39:bb:8c:8c:14:57:a7:19:e3:ab:24:92:63:
                    7e:69:2b:ac:f8:f3:2b:35:78:cc:f2:6b:b6:59:b2:
                    be:5a:cd:e7:d2:d8:06:12:90:ae:95:50:56:fb:ea:
                    65:e3:c6:58:49:14:e5:1b:ee:8f:10:f9:45:a2:82:
                    b1:0b:2e:e8:a7:09:4e:c0:ca:f9:9e:99:d1:ac:b7:
                    73:56:fb:1e:e1:50:ea:a9:63:40:02:64:08:1a:fc:
                    ba:4b:b2:0e:9e:73:35:de:b5:c4:7a:34:f1:30:28:
                    df:0a:91:f2:c1:8e:ba:05:c0:90:0e:2d:a5:a1:53:
                    93:30:94:6d:c1:ce:73:ee:6f:95:9f:c8:2d:9f:48:
                    ee:bb:d1:72:ce:b2:3e:a2:ec:35:15:52:50:7b:70:
                    3d:3d:ec:3b:d8:97:0d:15:52:b1:12:9f:cf:09:ea:
                    51:e6:cc:ec:6c:cc:cf:64:7c:f3:fc:30:61:8f:15:
                    ac:19:b6:7f:d3:ec:3a:7f:54:6f:59:6d:65:f1:79:
                    5c:d2:b5:a8:54:ec:fc:10:81:85:74:77:24:c0:ea:
                    d0:41:49:50:30:95:34:12:3e:d3:7f:a5:df:68:31:
                    19:7e:80:f5:a4:6f:82:b2:ca:77:ca:39:80:af:44:
                    4d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D1:77:FA:2E:BD:BE:B6:B5:3A:AE:C3:F9:7A:BC:89:41:18:55:86
            X509v3 Authority Key Identifier:
                keyid:8C:EC:D8:99:86:83:59:4E:93:B9:97:2D:95:39:7E:36:23:CD:B7:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/8CECD8998683594E93B9972D95397E3623CDB7A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8CECD8998683594E93B9972D95397E3623CDB7A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67E8497BE2811FBA6D2C5D1CA1356D07B839D71D8E186CFE1EE3A24230F7F4FF/0/3133312e3235352e3133392e302f32342d3234203d3e20323731383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:48:a3:b5:39:9e:01:4a:1c:56:3d:60:ae:21:d6:6a:01:1e:
         7d:59:ec:8a:70:c1:97:da:1e:80:b8:f2:74:3b:6e:a0:26:a7:
         f6:4e:06:42:9a:e1:21:42:20:58:66:55:eb:a1:ea:67:dd:8d:
         a7:34:a7:da:1c:63:2c:c8:ea:2d:2d:b7:8e:88:1a:e4:6f:96:
         fd:67:b1:9a:10:c9:04:62:5d:94:82:ea:2e:d3:63:28:cb:a7:
         e9:f4:6a:70:5e:da:fe:85:7d:57:66:38:d8:92:c9:c8:44:c8:
         8a:78:ff:d9:60:7f:c1:72:01:72:d6:b1:07:0e:c3:80:7d:78:
         4a:b2:55:fe:e7:d8:bc:16:cb:5b:dc:01:c8:41:26:6c:69:72:
         63:a1:b0:5b:36:10:0c:22:b9:e0:5f:24:29:80:7c:1a:2b:c8:
         86:6e:21:63:46:02:99:c6:9a:82:e4:d9:70:0b:9e:48:53:20:
         de:8d:79:52:34:9b:77:73:15:d0:2d:61:23:95:ce:fc:20:24:
         02:99:f1:41:7a:32:b5:f3:e0:2f:2f:00:f7:7f:76:23:74:1f:
         6d:27:c3:c3:ea:b7:a8:7d:6b:e2:7a:5c:11:e7:37:7b:87:e5:
         35:b6:52:50:04:9a:10:ca:d6:6f:17:21:da:67:af:84:58:1a:
         f8:48:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 05:58:20 2024 by rpki-client on console-ams.rpki-client.org