Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3135372e302e302f31362d3234203d3e203139393035.roa
File:                     3133322e3135372e302e302f31362d3234203d3e203139393035.roa (raw, json)
Hash identifier:          sUyN3XQbhWQqVplmqJSP9WhCZ5cPB3nEA9uLNS84vTk=
Subject key identifier:   CE:82:D2:37:A7:80:91:1F:CB:3A:43:00:0F:BA:ED:A8:DF:F3:3E:87
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       0549EA1AC6A2312990CB53C21FE334A73D5137F6
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3135372e302e302f31362d3234203d3e203139393035.roa
Signing time:             Tue 05 Mar 2024 17:56:42 +0000
ROA not before:           Tue 05 Mar 2024 17:51:42 +0000
ROA not after:            Tue 04 Mar 2025 17:56:42 +0000
asID:                     19905
IP address blocks:        132.157.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:49:ea:1a:c6:a2:31:29:90:cb:53:c2:1f:e3:34:a7:3d:51:37:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:42 2024 GMT
            Not After : Mar  4 17:56:42 2025 GMT
        Subject: CN=CE82D237A780911FCB3A43000FBAEDA8DFF33E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:09:a2:ac:4e:20:51:ba:66:26:39:71:68:
                    09:f0:c5:5a:f6:9e:e8:8d:32:d3:13:94:61:17:fe:
                    51:6d:b7:d4:cd:27:51:61:ab:fe:a2:77:8b:00:8b:
                    21:46:2e:11:80:2f:14:9f:6b:e0:da:3e:14:7d:9c:
                    ce:1b:b5:4a:c9:1f:18:90:f8:b2:65:9f:13:d1:ff:
                    1a:3d:23:bd:67:7c:b4:72:47:86:3e:60:7a:33:51:
                    ce:a2:19:32:c2:fa:df:ff:92:a7:6a:80:0c:a8:2b:
                    3b:e4:63:b4:27:8c:78:e7:db:83:db:19:45:f6:f0:
                    31:35:4a:78:96:0f:0f:0e:6b:e1:9e:41:91:d7:c4:
                    45:2a:85:23:bd:ce:7d:e1:8e:36:98:dc:d3:78:3a:
                    1f:a3:14:8b:30:ed:5c:53:77:43:fd:f2:e6:f6:37:
                    67:a5:04:cc:a7:c8:9c:43:98:46:74:91:f4:e3:28:
                    c8:e3:88:62:80:35:eb:32:d3:81:7b:bf:dd:26:6f:
                    8a:db:aa:90:59:b2:93:d5:10:27:60:36:89:93:66:
                    0d:b3:03:ee:c4:9e:01:d1:95:8e:ff:ec:c5:34:8f:
                    e8:3c:b6:25:54:50:09:12:8d:ec:eb:40:b5:a8:3f:
                    0b:ab:78:e7:e9:a8:cc:95:56:42:ba:32:e3:10:d3:
                    91:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:82:D2:37:A7:80:91:1F:CB:3A:43:00:0F:BA:ED:A8:DF:F3:3E:87
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3135372e302e302f31362d3234203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:46:a9:90:34:f7:03:1c:6d:0e:1d:c2:2a:a1:bb:23:20:ff:
         2e:21:99:e3:85:2e:6a:38:62:83:63:4a:64:96:2d:1c:7d:d4:
         1b:1f:b3:a7:35:67:2f:ac:28:17:a8:c0:f2:a6:77:a3:7a:e6:
         bc:49:02:a5:ab:07:3b:03:f3:8f:aa:40:c7:42:44:3a:ef:68:
         28:2b:a4:88:0d:76:4d:76:55:b0:46:1c:9a:71:ed:72:54:a6:
         b6:51:be:08:04:ab:85:e6:87:e0:43:41:11:1e:78:a3:89:6c:
         f2:80:cd:37:59:ae:8e:6c:5c:ba:74:28:37:a5:60:09:0d:6a:
         c4:2f:f2:44:31:16:16:77:e6:0e:91:05:6b:c5:08:18:5f:a7:
         89:0c:47:f9:51:37:01:af:68:5b:5c:10:ff:2a:09:10:67:0d:
         f2:04:6b:0d:ee:0e:84:a0:7d:b0:b9:40:4f:be:02:ce:70:cd:
         81:2c:11:4d:0f:0a:f0:ff:eb:ee:21:2b:dd:75:f8:1a:43:9d:
         09:2c:c1:ab:01:e9:f4:64:14:30:fc:d0:90:af:c0:1e:03:94:
         c2:59:41:3c:4a:25:d8:db:1e:e3:58:27:c6:34:7e:15:b9:82:
         c5:2c:c0:e9:b9:a3:c1:67:c5:ff:4e:81:b7:e1:40:d6:05:bc:
         78:11:91:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:16:35 2024 by rpki-client on console-ams.rpki-client.org