Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32392e302f32342d3234203d3e203532333339.roa
File:                     3133312e37322e32392e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier:          hIhuzglV6qZN9uotIDRH1Shnc8kXpj1MBNj5d3Zd2ls=
Subject key identifier:   1E:9D:28:CF:A2:7B:A9:95:8F:7F:8B:37:E7:CE:79:AE:41:60:9C:B4
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       6D521A475BD615ACB3F64B9BA99D0C0E3619EB4A
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32392e302f32342d3234203d3e203532333339.roa
Signing time:             Mon 08 Jul 2024 19:45:01 +0000
ROA not before:           Mon 08 Jul 2024 19:40:01 +0000
ROA not after:            Mon 07 Jul 2025 19:45:01 +0000
asID:                     52339
IP address blocks:        131.72.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
                          rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:52:1a:47:5b:d6:15:ac:b3:f6:4b:9b:a9:9d:0c:0e:36:19:eb:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 19:40:01 2024 GMT
            Not After : Jul  7 19:45:01 2025 GMT
        Subject: CN=1E9D28CFA27BA9958F7F8B37E7CE79AE41609CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:6d:17:1a:ad:fe:33:7c:da:b1:fa:80:3e:
                    5f:64:fa:ed:25:b3:51:96:6b:53:9d:dd:4a:0d:90:
                    66:b3:de:ef:42:b6:c5:5f:0a:91:ed:59:75:23:6a:
                    3f:d4:75:1c:3a:10:fd:6b:30:02:06:73:69:d1:92:
                    93:82:ae:e8:bc:10:72:ed:f6:55:88:1f:fc:15:60:
                    d2:76:a9:b4:9b:2f:12:3e:95:04:25:06:15:a3:17:
                    18:4e:6c:3f:a5:86:31:52:dd:64:04:b4:5c:3f:2b:
                    c8:eb:08:93:30:e1:30:c6:26:e0:f8:43:cd:b7:6d:
                    64:23:db:b8:7a:44:3b:f6:8f:9e:c6:40:fc:2b:ed:
                    28:ec:82:6e:f1:22:0a:fd:c5:59:47:ec:c7:90:60:
                    8f:b9:e4:00:c1:c2:30:9e:c0:6b:8c:97:9d:4c:8b:
                    2e:40:b0:ab:aa:be:f6:f0:32:0a:3a:a1:e1:fb:10:
                    60:6a:84:50:8e:c7:93:45:8c:b5:f2:30:98:72:ee:
                    2d:a8:b2:5b:71:18:a7:f9:d8:16:15:4a:0b:e4:39:
                    24:55:a7:aa:75:2d:51:16:0e:ec:98:09:83:49:72:
                    5f:36:f2:da:ba:a9:87:cb:f5:da:f2:be:5f:4e:e8:
                    0e:fe:a7:3d:cd:9b:f7:57:b2:da:f9:84:23:b7:43:
                    70:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9D:28:CF:A2:7B:A9:95:8F:7F:8B:37:E7:CE:79:AE:41:60:9C:B4
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32392e302f32342d3234203d3e203532333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:3c:a8:b6:84:e5:05:bd:d1:32:ea:d7:10:b4:e2:a8:90:
         f2:a9:25:15:f1:2b:5f:4f:9f:94:ce:2a:7a:da:e2:87:85:28:
         61:ab:a9:9b:08:1e:9f:32:4b:66:b8:d0:09:01:40:54:09:a7:
         ff:42:7e:0e:04:67:a9:f1:c7:42:35:c2:b2:35:74:af:7f:f8:
         17:50:ad:31:5f:42:50:45:7a:9f:d1:b3:7b:78:73:de:b0:7e:
         aa:44:7b:e3:bc:14:04:38:04:ae:83:2d:9b:22:62:a7:40:d1:
         ec:0c:30:39:ab:7e:ff:1f:fe:2c:3b:2a:f9:66:9a:09:45:40:
         48:6c:00:a9:06:8d:d7:40:df:de:9b:5d:b9:62:cd:b0:ae:73:
         6a:d3:02:6c:b6:85:1a:1e:a8:66:a1:9f:d3:9e:94:c7:36:1d:
         d4:cb:b0:b7:12:e0:fd:54:41:5a:48:fe:d9:04:10:41:1c:fa:
         de:ab:be:23:57:f3:53:fc:93:43:26:40:25:b5:39:63:90:90:
         93:e5:fa:36:9a:93:88:37:34:f4:1f:c1:e2:7c:61:19:ae:a8:
         d9:42:19:e2:02:aa:e4:be:af:52:27:20:67:f2:c9:66:fa:aa:
         50:38:71:be:26:fe:da:1e:b4:66:15:6d:e4:ba:c4:5a:60:16:
         4d:a7:53:c0
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUbVIaR1vWFayz9kubqZ0MDjYZ60owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDgxOTQwMDFaFw0yNTA3MDcxOTQ1MDFaMDMxMTAvBgNV
BAMTKDFFOUQyOENGQTI3QkE5OTU4RjdGOEIzN0U3Q0U3OUFFNDE2MDlDQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVM20XGq3+M3zasfqAPl9k+u0l
s1GWa1Od3UoNkGaz3u9CtsVfCpHtWXUjaj/UdRw6EP1rMAIGc2nRkpOCrui8EHLt
9lWIH/wVYNJ2qbSbLxI+lQQlBhWjFxhObD+lhjFS3WQEtFw/K8jrCJMw4TDGJuD4
Q823bWQj27h6RDv2j57GQPwr7Sjsgm7xIgr9xVlH7MeQYI+55ADBwjCewGuMl51M
iy5AsKuqvvbwMgo6oeH7EGBqhFCOx5NFjLXyMJhy7i2osltxGKf52BYVSgvkOSRV
p6p1LVEWDuyYCYNJcl828tq6qYfL9dryvl9O6A7+pz3Nm/dXstr5hCO3Q3BnAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUHp0oz6J7qZWPf4s35855rkFgnLQwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzMzMTJlMzczMjJlMzIzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzMzMzMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACDSB0wDQYJ
KoZIhvcNAQELBQADggEBAIL0PKi2hOUFvdEy6tcQtOKokPKpJRXxK19Pn5TOKnra
4oeFKGGrqZsIHp8yS2a40AkBQFQJp/9Cfg4EZ6nxx0I1wrI1dK9/+BdQrTFfQlBF
ep/Rs3t4c96wfqpEe+O8FAQ4BK6DLZsiYqdA0ewMMDmrfv8f/iw7KvlmmglFQEhs
AKkGjddA396bXblizbCuc2rTAmy2hRoeqGahn9OelMc2HdTLsLcS4P1UQVpI/tkE
EEEc+t6rviNX81P8k0MmQCW1OWOQkJPl+jaak4g3NPQfweJ8YRmuqNlCGeICquS+
r1InIGfyyWb6qlA4cb4m/toetGYVbeS6xFpgFk2nU8A=
-----END CERTIFICATE-----
Generated at Thu Oct 24 13:53:19 2024 by rpki-client on console-fra.rpki-client.org