Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/3133312e3136312e3135322e302f32322d3234203d3e203237383138.roa
File:                     3133312e3136312e3135322e302f32322d3234203d3e203237383138.roa (raw, json)
Hash identifier:          7N81fnjylIK2alXMU0rQiHGGc148r0RA2IqkXYqoY5g=
Subject key identifier:   88:1B:D2:3F:08:B4:75:C3:3A:46:3F:01:0C:FC:C4:54:C6:76:A2:71
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       1B00780A42ACF3C00272A52CB4307C6D045276E8
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/3133312e3136312e3135322e302f32322d3234203d3e203237383138.roa
Signing time:             Tue 05 Mar 2024 18:17:16 +0000
ROA not before:           Tue 05 Mar 2024 18:12:16 +0000
ROA not after:            Tue 04 Mar 2025 18:17:16 +0000
asID:                     27818
IP address blocks:        131.161.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:00:78:0a:42:ac:f3:c0:02:72:a5:2c:b4:30:7c:6d:04:52:76:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Mar  5 18:12:16 2024 GMT
            Not After : Mar  4 18:17:16 2025 GMT
        Subject: CN=881BD23F08B475C33A463F010CFCC454C676A271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cf:6d:02:06:1f:c9:18:f2:be:bb:29:2a:89:
                    36:0f:c2:55:6f:b3:88:b5:b8:45:d5:a7:24:d5:de:
                    a2:4d:83:38:96:e4:f8:7f:da:bb:da:1b:ef:84:9f:
                    a4:6f:42:8d:e4:f0:7b:d0:12:d4:31:00:01:32:92:
                    62:f0:7b:39:c0:06:84:9a:42:43:05:88:ed:0d:07:
                    35:73:32:b9:6b:b7:0d:86:23:f5:65:eb:6c:34:87:
                    56:1a:27:68:82:ad:a8:52:bd:be:e0:e3:a2:65:a0:
                    6b:3d:50:bf:7d:59:f8:ec:93:0a:48:3b:c8:77:67:
                    63:67:a3:81:a3:64:ec:46:62:5d:6e:3a:b6:73:5f:
                    81:09:40:ac:0e:01:a8:c0:b3:98:cc:d0:fb:0f:dd:
                    38:83:a3:52:b9:cd:09:f9:6a:05:87:3b:d6:11:bf:
                    d2:b4:01:75:96:1b:8a:12:cd:62:33:30:ca:d2:41:
                    b1:6f:99:10:ad:a0:9c:ed:d6:77:b0:e1:30:70:b9:
                    03:60:02:3f:19:60:c5:f2:5d:2f:aa:80:db:ad:24:
                    6d:2b:fa:bc:6f:ff:f7:95:53:df:a6:6c:90:b8:0c:
                    53:ed:c1:ef:4e:43:df:fd:9c:db:c5:a9:cd:c6:18:
                    9d:d2:07:43:2d:f7:8e:7e:ed:61:49:79:08:90:19:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1B:D2:3F:08:B4:75:C3:3A:46:3F:01:0C:FC:C4:54:C6:76:A2:71
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/3133312e3136312e3135322e302f32322d3234203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:dd:bd:f3:b0:18:05:43:4d:52:39:fe:42:4a:5a:14:5b:7f:
         ff:31:d2:34:60:53:58:9d:3b:e6:72:52:96:c0:9c:59:97:db:
         0e:68:c7:c1:2c:82:f1:34:01:9f:da:e7:15:2e:16:b1:5e:e8:
         c1:28:a2:cd:1b:05:33:91:45:3d:2b:01:82:86:12:43:1c:d5:
         24:38:12:50:0e:0c:ab:c6:4d:5f:6b:73:55:32:ea:1d:17:da:
         30:d9:55:85:a6:0a:e3:96:7e:c7:4e:06:20:8b:ce:ea:88:b6:
         0f:82:f6:2e:80:1d:22:17:c7:e2:8e:72:46:5a:5b:b2:1c:9b:
         33:f6:70:7a:ce:2c:5f:90:fb:ed:c8:1f:28:27:c1:5f:d1:10:
         ba:94:69:14:f4:c7:a7:16:b6:db:be:3f:d4:81:9c:64:e6:ce:
         d1:01:3e:d5:2e:0c:d9:11:72:38:6e:6a:29:8c:c5:f0:37:d9:
         93:2b:d9:17:58:a9:b3:ac:04:c8:1f:5c:cf:ef:0a:36:47:7e:
         e3:10:0d:f8:af:cb:6c:8b:3a:81:cd:0a:d3:9e:5f:29:64:68:
         33:b9:ff:4e:9c:f9:74:c4:0e:cb:f9:5b:b6:0c:7a:e4:b1:30:
         01:51:93:97:ab:bc:96:2b:d8:17:8f:45:7a:fe:f7:53:93:7a:
         d0:2f:63:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org