Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38302e302f32322d3232203d3e20323635373431.roa
File:                     3132382e3230312e38302e302f32322d3232203d3e20323635373431.roa (raw, json)
Hash identifier:          nVVUu0lE3g+nFRqm/PXXLcaQw6Z0KVW730ORL8KH/+A=
Subject key identifier:   A1:95:8E:7C:7F:F4:37:45:7D:7A:65:3E:73:9D:BA:00:C7:5E:F8:FB
Certificate issuer:       /CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
Certificate serial:       3E03445911A75745D01CCAF3A0E29B6557D95DEB
Authority key identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38302e302f32322d3232203d3e20323635373431.roa
Signing time:             Fri 15 Mar 2024 23:55:00 +0000
ROA not before:           Fri 15 Mar 2024 23:50:00 +0000
ROA not after:            Fri 14 Mar 2025 23:55:00 +0000
asID:                     265741
IP address blocks:        128.201.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:03:44:59:11:a7:57:45:d0:1c:ca:f3:a0:e2:9b:65:57:d9:5d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
        Validity
            Not Before: Mar 15 23:50:00 2024 GMT
            Not After : Mar 14 23:55:00 2025 GMT
        Subject: CN=A1958E7C7FF437457D7A653E739DBA00C75EF8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:45:3a:c9:36:71:f8:e8:f9:92:07:c7:e9:
                    22:7c:50:df:4f:bf:47:36:1c:25:3e:b0:d2:93:87:
                    c3:20:05:54:c3:0f:a5:a3:33:03:86:1d:b1:2c:d7:
                    86:bc:d0:9c:bf:10:59:cf:e3:d0:7b:81:5f:a8:29:
                    2e:3c:c5:c4:8d:f9:95:63:51:9c:a9:d3:a2:3c:75:
                    a7:ce:51:c6:9e:58:26:8a:a9:74:4b:67:c7:a6:cb:
                    6e:48:b4:9a:a5:b9:15:34:c9:7d:dc:38:f1:b0:0d:
                    db:8d:48:ce:6a:76:37:77:8a:d9:df:3b:e3:b2:2d:
                    38:d1:79:fa:1b:a4:f7:89:4f:7e:05:96:fa:33:44:
                    46:64:83:68:5b:5c:13:78:09:7a:d7:b3:54:c8:2f:
                    19:08:fa:7a:9d:fd:7e:93:5c:18:d8:09:68:8e:d2:
                    ca:ce:6b:f3:81:be:c8:24:43:63:e1:bc:b1:f5:e6:
                    e1:b3:54:67:87:25:55:67:4f:c5:41:b2:d2:c6:c3:
                    2a:70:da:dc:bd:da:38:76:1c:1a:ca:e6:ee:4b:f5:
                    4e:6b:b0:c9:4f:3f:14:5f:00:02:2c:56:8c:ef:ce:
                    cf:31:f0:e3:5d:81:83:33:96:f1:5a:05:dc:c6:30:
                    9f:25:7e:dc:29:d1:9d:24:06:c1:b4:76:76:1e:08:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:95:8E:7C:7F:F4:37:45:7D:7A:65:3E:73:9D:BA:00:C7:5E:F8:FB
            X509v3 Authority Key Identifier:
                keyid:71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38302e302f32322d3232203d3e20323635373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:ad:57:49:3f:48:87:09:4b:a7:64:c3:87:88:19:0b:98:ba:
         12:ee:fd:4c:58:2d:98:69:b3:95:be:35:68:91:2b:2d:54:ee:
         85:51:43:71:13:9e:79:a2:d1:2a:23:94:e6:f1:c0:40:7e:9a:
         9c:77:6d:40:72:44:4e:1e:c3:95:c8:15:7b:8b:87:ef:ed:48:
         b4:50:6c:25:8b:21:7b:cb:d4:f5:1d:1e:9e:9c:da:43:78:44:
         17:95:cc:9a:25:b2:ae:cb:fd:2f:a1:80:c9:96:86:81:ed:2a:
         fc:84:31:f4:03:8f:b4:71:5e:2b:69:ef:23:1e:b2:12:89:43:
         f8:d8:61:58:17:e0:5b:41:c1:f4:2a:8b:fb:6e:81:aa:64:a8:
         3f:cb:0d:54:34:19:35:00:a4:16:23:74:ba:7a:6c:a7:be:21:
         22:c7:61:2e:85:45:0c:89:c1:13:cc:ca:2e:d0:3f:91:8e:50:
         b1:95:ed:f8:2c:fa:8f:7c:cf:24:f3:e6:d0:2b:ee:cb:64:af:
         21:2b:a3:69:0f:c6:4c:1e:35:4d:3c:e3:18:6b:11:e3:20:15:
         c0:3d:d5:ed:ab:a3:6a:63:cd:ab:4f:47:62:62:e5:ce:97:52:
         fe:97:c2:0f:07:f1:0d:67:58:29:60:11:d1:fc:c1:28:ed:02:
         a6:60:f3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:03 2024 by rpki-client on console-ams.rpki-client.org