Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/3133312e3235352e3234382e302f32322d3232203d3e20323633373132.roa
File:                     3133312e3235352e3234382e302f32322d3232203d3e20323633373132.roa (raw, json)
Hash identifier:          /G801otLuWop7Er4w1L30lyKrreGqogPqpV1Z3bv0jo=
Subject key identifier:   ED:25:83:3A:B9:5B:41:8F:E4:7A:67:E7:13:92:69:07:58:11:C8:04
Certificate issuer:       /CN=7DD319E50D207C28E8350630130153059EE93773
Certificate serial:       7C04623FF3BC4D1C41FBBA2B22C5BFBE2A346FA7
Authority key identifier: 7D:D3:19:E5:0D:20:7C:28:E8:35:06:30:13:01:53:05:9E:E9:37:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DD319E50D207C28E8350630130153059EE93773.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/3133312e3235352e3234382e302f32322d3232203d3e20323633373132.roa
Signing time:             Tue 05 Mar 2024 18:03:42 +0000
ROA not before:           Tue 05 Mar 2024 17:58:42 +0000
ROA not after:            Tue 04 Mar 2025 18:03:42 +0000
asID:                     263712
IP address blocks:        131.255.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/7DD319E50D207C28E8350630130153059EE93773.crl
                          rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/7DD319E50D207C28E8350630130153059EE93773.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DD319E50D207C28E8350630130153059EE93773.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:04:62:3f:f3:bc:4d:1c:41:fb:ba:2b:22:c5:bf:be:2a:34:6f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DD319E50D207C28E8350630130153059EE93773
        Validity
            Not Before: Mar  5 17:58:42 2024 GMT
            Not After : Mar  4 18:03:42 2025 GMT
        Subject: CN=ED25833AB95B418FE47A67E7139269075811C804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:54:e6:aa:d2:8a:ae:85:48:90:ff:1c:21:
                    d6:76:a6:70:07:63:49:78:06:db:57:b9:5d:d8:73:
                    85:28:10:1c:f2:05:01:09:c9:22:ce:1c:8f:3c:c3:
                    8d:59:91:f9:16:3e:07:56:6a:da:18:fe:de:0a:56:
                    13:3b:0d:11:19:3b:05:d3:f9:52:aa:bb:b9:fe:8c:
                    cf:96:ef:c5:12:76:0e:70:78:52:d9:0c:a6:2d:cb:
                    02:67:c8:be:40:25:6c:98:eb:c7:3e:3c:37:df:eb:
                    ed:f2:eb:6f:8c:93:41:32:8d:3f:21:73:6b:9a:8a:
                    9d:66:fb:62:de:d9:34:9f:b7:f4:82:c3:b3:46:bd:
                    3f:31:49:e4:c1:f3:93:19:a6:03:a0:f4:72:b0:39:
                    82:74:2d:76:bc:dd:b6:f4:26:02:30:47:cd:eb:54:
                    5b:03:d1:75:70:1c:5a:69:4b:e9:08:49:37:46:48:
                    4f:89:34:c7:3d:7c:c6:6b:67:60:5a:0c:b5:02:8e:
                    2f:70:62:97:6f:af:14:9b:09:c9:b6:bd:89:bb:00:
                    2f:2c:04:8a:a7:28:30:6d:db:08:4b:e7:e6:6a:87:
                    2c:76:fc:48:1a:e6:4b:9b:4b:d8:20:d6:65:29:93:
                    cf:88:da:f9:b7:91:c9:7a:a6:24:ae:06:6e:67:86:
                    dc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:25:83:3A:B9:5B:41:8F:E4:7A:67:E7:13:92:69:07:58:11:C8:04
            X509v3 Authority Key Identifier:
                keyid:7D:D3:19:E5:0D:20:7C:28:E8:35:06:30:13:01:53:05:9E:E9:37:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/7DD319E50D207C28E8350630130153059EE93773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DD319E50D207C28E8350630130153059EE93773.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/78EFF77116AFDF69E848D65FC171B0F9F5D148072665E8A641A3F73749E020A7/0/3133312e3235352e3234382e302f32322d3232203d3e20323633373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:ee:02:07:24:4f:93:8d:8b:f4:fc:53:de:6a:82:da:83:75:
         d1:56:ac:71:77:2e:d0:3e:a2:2d:78:60:86:78:d5:6a:bd:44:
         c9:dc:0a:a2:55:df:dc:9d:c4:d5:5c:aa:97:91:04:fa:4d:cc:
         c9:8d:13:25:15:b8:28:48:03:83:0a:2c:f0:c8:8f:1a:61:a9:
         6b:75:a5:d1:39:9d:a3:c3:95:e1:94:86:0b:24:8f:24:77:f7:
         e3:3f:74:32:52:75:19:e6:70:e7:07:18:20:3d:32:c3:99:39:
         5a:21:f0:b7:a6:15:69:de:bb:cb:07:5f:7e:ff:fd:6b:95:c3:
         4b:65:97:17:2d:98:4b:9d:72:48:43:e7:9e:b9:29:e2:15:d3:
         6b:ff:9d:8b:0d:2a:ea:5b:f2:a4:b3:87:94:a6:c0:4f:96:65:
         22:6a:c1:87:ec:2b:2e:fa:72:c4:29:e7:54:b6:8d:b6:c7:53:
         8b:45:a7:42:6b:2e:53:df:09:1f:bb:3f:a7:f2:42:fe:18:51:
         9c:d2:68:a3:0d:c3:b8:11:2b:3d:4f:94:1f:11:42:75:56:0c:
         d1:82:7d:b4:7f:bd:ac:44:30:8c:ed:0d:91:9a:fa:cb:1b:b8:
         25:2c:d4:8e:c7:ec:fd:b4:2d:c1:74:2c:63:b5:c1:de:c0:81:
         5f:08:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:28:18 2024 by rpki-client on console-ams.rpki-client.org