Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133312e3139362e33322e302f32322d3234203d3e203238313130.roa
File:                     3133312e3139362e33322e302f32322d3234203d3e203238313130.roa (raw, json)
Hash identifier:          iU7IpJtin5P74EeO1nFUMugvtYSidFHB4U9SDPMCN44=
Subject key identifier:   4B:57:17:3A:8C:47:7C:03:16:56:88:22:37:91:0E:29:46:DF:16:44
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       7000FA39B2A4F43899ADCA61B22E95D55880E629
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133312e3139362e33322e302f32322d3234203d3e203238313130.roa
Signing time:             Tue 05 Mar 2024 18:15:05 +0000
ROA not before:           Tue 05 Mar 2024 18:10:05 +0000
ROA not after:            Tue 04 Mar 2025 18:15:05 +0000
asID:                     28110
IP address blocks:        131.196.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:00:fa:39:b2:a4:f4:38:99:ad:ca:61:b2:2e:95:d5:58:80:e6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Mar  5 18:10:05 2024 GMT
            Not After : Mar  4 18:15:05 2025 GMT
        Subject: CN=4B57173A8C477C031656882237910E2946DF1644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:f3:fe:e3:61:6b:a7:bc:31:07:20:3a:e8:
                    51:b7:62:71:c0:d6:c1:df:82:b5:06:1d:82:cb:b0:
                    3e:82:d0:53:7f:23:85:f8:95:56:67:7e:c8:bc:0b:
                    b5:3a:f2:b1:a6:0a:be:9e:54:e4:44:f1:54:98:f0:
                    52:4e:43:0d:e0:b4:3b:fa:9f:5d:f0:c7:34:78:eb:
                    47:f1:f4:ed:07:a5:62:15:71:b4:26:cd:02:31:1c:
                    e9:20:46:67:4f:5b:a6:7d:dd:27:4b:98:50:4b:e8:
                    e6:22:92:64:74:b2:6d:69:2c:c9:18:c2:38:4f:1d:
                    53:a7:58:f1:43:d0:50:fc:4c:25:a0:ed:ff:12:e1:
                    46:9f:e3:63:f1:a2:ca:a3:b5:dd:07:af:65:c9:3c:
                    a9:8f:35:27:6c:0e:50:46:3b:0d:9c:7c:48:89:7b:
                    d9:a8:70:05:b2:e2:39:c9:72:85:38:16:8e:bb:e0:
                    b4:56:4c:5c:34:1d:57:b2:6e:ce:d8:7e:29:c3:eb:
                    0d:ed:45:38:ac:03:0e:57:cc:ce:0d:3f:9d:bb:a6:
                    ce:ef:c0:05:3a:75:67:f7:dd:b2:fa:1e:99:80:5c:
                    a0:d2:89:0e:7a:a5:06:a2:a2:75:dd:d4:24:a7:ba:
                    1a:b8:f0:de:7e:da:68:92:dd:37:04:d8:21:18:7f:
                    ac:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:57:17:3A:8C:47:7C:03:16:56:88:22:37:91:0E:29:46:DF:16:44
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133312e3139362e33322e302f32322d3234203d3e203238313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:a9:0f:ed:28:bb:d1:7f:df:31:1d:4b:da:89:63:29:ed:3d:
         41:5b:d3:e1:15:0b:dd:c5:ad:07:c3:53:62:be:3d:54:83:26:
         75:b7:e9:ce:52:c7:01:3e:bc:ac:04:f5:49:c3:7b:ab:b5:71:
         04:e6:9f:ea:6c:e4:7e:86:16:2e:ae:4a:11:47:c1:60:74:22:
         b4:1c:6f:c8:53:54:e9:e7:e3:d5:07:f1:73:aa:f1:c8:01:97:
         5d:2b:96:14:11:89:7e:4a:cf:ba:73:e4:34:74:ba:7c:75:dd:
         cd:20:34:a4:dd:06:c6:2c:ab:b9:58:9d:79:ee:9e:0a:3c:23:
         4a:ab:a9:6e:36:5f:4f:e3:51:ce:78:0b:c0:4d:4f:be:14:49:
         02:e1:67:b1:ef:79:3f:2d:67:76:5b:b4:3a:6c:5f:48:ba:f8:
         87:62:37:05:33:4f:9a:46:a1:6f:15:bb:9c:cf:53:ac:e9:8a:
         08:04:e7:93:22:54:d4:c0:7f:96:d8:36:c8:55:24:cc:6b:df:
         b7:4e:1d:c4:a2:f8:aa:ff:f3:a2:d5:41:94:8b:ae:b8:cb:e6:
         77:26:a2:4e:72:78:7f:95:15:76:61:c2:1a:e1:89:85:cf:d2:
         e7:67:02:80:00:5f:52:e0:a3:e4:0d:3b:ec:48:d6:6d:8d:02:
         45:f7:e9:9f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUcAD6ObKk9DiZrcphsi6V1ViA5ikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU4ODg5MzcyNDQ2RUY2NzhFMzVFOUQzNDlDMDc4NUE4
MUI4RkJCNzAeFw0yNDAzMDUxODEwMDVaFw0yNTAzMDQxODE1MDVaMDMxMTAvBgNV
BAMTKDRCNTcxNzNBOEM0NzdDMDMxNjU2ODgyMjM3OTEwRTI5NDZERjE2NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyn/P+42Frp7wxByA66FG3YnHA
1sHfgrUGHYLLsD6C0FN/I4X4lVZnfsi8C7U68rGmCr6eVORE8VSY8FJOQw3gtDv6
n13wxzR460fx9O0HpWIVcbQmzQIxHOkgRmdPW6Z93SdLmFBL6OYikmR0sm1pLMkY
wjhPHVOnWPFD0FD8TCWg7f8S4Uaf42Pxosqjtd0Hr2XJPKmPNSdsDlBGOw2cfEiJ
e9mocAWy4jnJcoU4Fo674LRWTFw0HVeybs7YfinD6w3tRTisAw5XzM4NP527ps7v
wAU6dWf33bL6HpmAXKDSiQ56pQaionXd1CSnuhq48N5+2miS3TcE2CEYf6xHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUS1cXOoxHfAMWVogiN5EOKUbfFkQwHwYDVR0j
BBgwFoAUhYiJNyRG72eONenTScB4WoG4+7cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTgzNUM1ODE4MEIyNDQ4MkI0OEVDMkM3OTY3NTQ2MDBD
RUU2RjNCMThCNjlCQzRCQkRGRkRDMjI4NUVDNDhBLzAvODU4ODg5MzcyNDQ2RUY2
NzhFMzVFOUQzNDlDMDc4NUE4MUI4RkJCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTg4ODkzNzI0NDZFRjY3OEUz
NUU5RDM0OUMwNzg1QTgxQjhGQkI3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4MzVDNTgxODBCMjQ0ODJCNDhFQzJDNzk2NzU0NjAwQ0VFNkYzQjE4
QjY5QkM0QkJERkZEQzIyODVFQzQ4QS8wLzMxMzMzMTJlMzEzOTM2MmUzMzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMxMzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPEIDAN
BgkqhkiG9w0BAQsFAAOCAQEAoKkP7Si70X/fMR1L2oljKe09QVvT4RUL3cWtB8NT
Yr49VIMmdbfpzlLHAT68rAT1ScN7q7VxBOaf6mzkfoYWLq5KEUfBYHQitBxvyFNU
6efj1Qfxc6rxyAGXXSuWFBGJfkrPunPkNHS6fHXdzSA0pN0GxiyruVidee6eCjwj
SqupbjZfT+NRzngLwE1PvhRJAuFnse95Py1ndlu0OmxfSLr4h2I3BTNPmkahbxW7
nM9TrOmKCATnkyJU1MB/ltg2yFUkzGvft04dxKL4qv/zotVBlIuuuMvmdyaiTnJ4
f5UVdmHCGuGJhc/S52cCgABfUuCj5A077EjWbY0CRffpnw==
-----END CERTIFICATE-----
Generated at Sat Jun 1 01:40:19 2024 by rpki-client on console-fra.rpki-client.org