Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3138342e302e302f31362d3234203d3e203231353735.roa
File:                     3133322e3138342e302e302f31362d3234203d3e203231353735.roa (raw, json)
Hash identifier:          z1AJDvvKTMntlOFNCU2/GdXHVIOqiW1Rk/IE7mjZwuo=
Subject key identifier:   EA:E1:83:CF:B7:4F:64:92:C9:AD:6F:7F:6E:BB:E9:02:7B:62:3B:05
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       6C886EAB49165BB7A7134188DC28715DEFBC3612
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3138342e302e302f31362d3234203d3e203231353735.roa
Signing time:             Tue 05 Mar 2024 17:56:49 +0000
ROA not before:           Tue 05 Mar 2024 17:51:49 +0000
ROA not after:            Tue 04 Mar 2025 17:56:49 +0000
asID:                     21575
IP address blocks:        132.184.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:88:6e:ab:49:16:5b:b7:a7:13:41:88:dc:28:71:5d:ef:bc:36:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:49 2024 GMT
            Not After : Mar  4 17:56:49 2025 GMT
        Subject: CN=EAE183CFB74F6492C9AD6F7F6EBBE9027B623B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a4:6e:80:46:9f:ee:9f:20:0c:3a:ae:7d:f5:
                    bf:ee:45:c0:72:c7:07:53:30:28:8f:dd:e9:a3:e0:
                    db:0c:e1:f7:ab:3c:4a:65:47:76:50:7a:c6:85:c2:
                    1f:19:37:e2:25:50:01:16:9f:34:a9:f7:2a:25:0b:
                    5d:93:0b:69:b7:64:c9:f2:39:a7:96:fb:fd:af:f6:
                    3b:a6:2c:73:df:68:2d:a7:ff:f0:0e:39:2b:31:27:
                    f0:65:a5:d0:08:4b:5b:30:b6:75:07:76:e4:bd:9d:
                    59:67:f5:06:50:2b:ae:28:d5:4b:39:87:54:c2:36:
                    b2:81:5b:88:e3:c3:f9:5e:a9:4e:f7:7d:c3:fb:56:
                    c3:90:82:10:f9:66:c3:31:47:28:c7:80:8d:dc:d6:
                    67:53:f3:c2:c1:a3:38:ac:2b:88:0a:10:f6:db:4d:
                    10:45:c1:70:60:cb:7a:9f:04:4d:71:c0:6d:c0:f5:
                    c4:e9:f7:0d:99:85:50:3f:18:ba:aa:3e:01:26:01:
                    cd:75:ec:c4:99:9a:e0:90:ac:49:c6:87:3a:c3:90:
                    86:92:57:44:7c:da:5d:1a:1f:96:50:67:1c:ca:fe:
                    5c:c0:d3:38:e5:3b:34:b0:f0:7d:d8:01:ae:33:30:
                    e7:6d:8c:0e:f1:3f:f8:53:f7:c2:07:80:5e:32:03:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E1:83:CF:B7:4F:64:92:C9:AD:6F:7F:6E:BB:E9:02:7B:62:3B:05
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3138342e302e302f31362d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:05:ad:f0:9f:e0:9b:f2:17:21:81:b7:c6:ca:cc:93:01:a4:
         87:4f:64:c0:61:5a:88:77:f1:cd:95:e7:b4:28:df:27:57:d2:
         56:f0:57:76:47:e1:9b:7f:e0:b2:55:a1:a6:08:aa:70:47:28:
         f6:e6:e9:bd:6f:35:f8:a5:6d:9c:95:9c:47:7e:ec:4d:d7:43:
         b5:52:a3:33:4a:5e:b0:de:02:df:6c:52:db:ee:bb:12:5c:c0:
         41:2d:1d:14:65:3f:e5:e9:28:93:85:97:b6:74:b7:b4:11:81:
         e5:62:7c:13:0e:1a:fa:03:a1:f7:3e:d9:a1:c4:0a:93:0a:b7:
         29:7e:9b:72:3f:62:67:ab:45:d0:8b:d3:e3:f8:05:02:66:22:
         c2:8e:c2:fa:f3:a1:67:30:97:6d:aa:cf:6b:d5:a2:9f:47:7f:
         c3:e6:53:39:a1:81:80:5d:95:99:c9:da:3f:8c:29:b3:0c:42:
         f6:dc:97:6c:16:c5:78:3b:7e:6c:b1:7c:e8:14:04:04:37:35:
         55:64:65:68:26:27:e4:64:0a:c3:13:39:53:91:a7:50:30:44:
         4f:62:61:f0:91:b2:64:e5:4c:2b:33:47:51:d4:78:a7:e8:93:
         30:e3:f5:ab:48:87:f3:17:e6:c3:a8:91:23:0d:c1:ab:f2:cb:
         f6:21:cf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org