Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/3133312e3130382e342e302f32322d3234203d3e20333934363834.roa
File:                     3133312e3130382e342e302f32322d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          bHt6QzGngUMw0AxIhAyE7jxDc9/K41IvWZmZjzbTi3U=
Subject key identifier:   B8:B8:D3:87:22:01:29:2F:82:02:EC:9F:F6:B9:FA:C4:99:63:6D:DD
Certificate issuer:       /CN=DC17BDE9178A893A0E44505700003A43E9C81665
Certificate serial:       60D329189C189A286BC5C50A344BCD9C17D60156
Authority key identifier: DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/3133312e3130382e342e302f32322d3234203d3e20333934363834.roa
Signing time:             Tue 05 Mar 2024 17:59:56 +0000
ROA not before:           Tue 05 Mar 2024 17:54:56 +0000
ROA not after:            Tue 04 Mar 2025 17:59:56 +0000
asID:                     394684
IP address blocks:        131.108.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d3:29:18:9c:18:9a:28:6b:c5:c5:0a:34:4b:cd:9c:17:d6:01:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC17BDE9178A893A0E44505700003A43E9C81665
        Validity
            Not Before: Mar  5 17:54:56 2024 GMT
            Not After : Mar  4 17:59:56 2025 GMT
        Subject: CN=B8B8D3872201292F8202EC9FF6B9FAC499636DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:fa:42:4b:92:50:a6:c3:e9:49:df:d8:dc:
                    f9:7c:c6:65:22:49:1c:65:6c:f6:a8:ac:31:02:ca:
                    0b:bf:ee:0b:9b:17:a0:34:c3:0b:24:d3:43:68:86:
                    27:7c:eb:28:88:a4:12:c8:2a:35:02:8b:ae:d3:99:
                    ed:2e:30:41:42:e3:54:e7:90:bf:43:f3:b7:8e:67:
                    1b:a5:16:a3:70:9c:bd:da:cc:a0:36:9e:cc:af:8d:
                    e6:6e:09:f5:b4:85:58:19:1b:4d:64:81:dd:5d:e9:
                    a6:c8:2c:b2:63:6b:43:91:d1:8f:21:3c:0e:d6:e3:
                    ba:41:fb:bd:c8:81:40:aa:eb:6f:8e:b0:21:74:e6:
                    21:be:92:db:5d:d0:32:1c:14:c4:f3:57:eb:bd:56:
                    d7:68:36:a2:d6:28:b3:f0:93:25:0f:8a:7a:00:10:
                    7e:a9:54:bf:4d:d9:d9:b8:51:6b:e1:aa:13:86:0c:
                    ba:56:d3:cf:f0:c5:a4:ca:04:17:c9:c3:3a:77:a5:
                    2f:1b:80:a8:36:79:8c:03:79:b3:a0:c6:df:ea:80:
                    d1:e2:be:26:5e:27:1a:3e:34:25:bc:17:06:11:3c:
                    b6:12:bc:7f:ca:10:7e:31:ce:41:64:e7:91:f7:4f:
                    95:5f:ef:d7:42:d2:78:53:27:88:2a:16:17:04:a9:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B8:D3:87:22:01:29:2F:82:02:EC:9F:F6:B9:FA:C4:99:63:6D:DD
            X509v3 Authority Key Identifier:
                keyid:DC:17:BD:E9:17:8A:89:3A:0E:44:50:57:00:00:3A:43:E9:C8:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/DC17BDE9178A893A0E44505700003A43E9C81665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC17BDE9178A893A0E44505700003A43E9C81665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75859C85FD10CCA9A24A8B24EA8EF3324B8C37F6E01CE243E6BF656F9A2EF744/0/3133312e3130382e342e302f32322d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:28:b2:de:8c:bb:ee:f6:8c:59:52:f4:84:c5:7b:d7:e2:
         a2:14:61:1b:9e:dd:62:3a:cf:56:a9:87:b7:52:22:a9:c4:13:
         86:8d:7e:dd:4d:a4:77:49:7e:89:07:cc:d9:56:33:82:2e:87:
         07:77:7e:1f:63:c6:05:74:a0:ce:ea:62:16:f5:58:5e:40:fe:
         1e:fb:b6:06:78:9a:12:55:22:6b:6a:03:4c:79:96:46:20:9b:
         fc:72:1d:d1:ea:b6:45:65:b9:58:21:16:e5:88:93:40:76:a2:
         20:d0:25:e7:1a:0d:7a:73:57:79:4b:ff:27:8d:77:df:0b:b0:
         e8:96:cc:17:4d:b0:d3:c9:63:66:00:59:69:1c:93:f4:38:1b:
         d2:ae:b7:61:aa:6d:c9:1a:7a:7a:57:9a:46:f1:4f:9f:30:f4:
         14:a2:25:e9:9f:5b:c4:65:52:49:44:e4:1d:45:d1:02:38:bb:
         d9:83:7a:d2:39:e9:64:1d:60:89:a7:32:c4:05:e8:c4:48:44:
         70:b1:27:49:11:08:95:76:66:97:92:21:6b:83:56:c2:63:c4:
         3d:93:f9:47:55:5c:c1:46:b7:44:86:79:cd:1b:fe:b3:74:03:
         2a:cd:5a:37:f5:d5:15:f6:85:0f:f1:96:b8:a9:00:e2:96:98:
         ad:9d:40:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org