Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3139312e302e302f31362d3234203d3e203231353735.roa
File:                     3133322e3139312e302e302f31362d3234203d3e203231353735.roa (raw, json)
Hash identifier:          QJ2KhHHrOKbC8AEVnavMP+Q2EotEKXU7WwiMCd8EIVA=
Subject key identifier:   1A:BE:61:24:99:B3:8B:B9:49:73:42:1A:85:20:A7:43:C0:99:E9:D4
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       607EFB958E34911ED2558B8875C3F7D1A884CC1C
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3139312e302e302f31362d3234203d3e203231353735.roa
Signing time:             Tue 05 Mar 2024 17:56:40 +0000
ROA not before:           Tue 05 Mar 2024 17:51:40 +0000
ROA not after:            Tue 04 Mar 2025 17:56:40 +0000
asID:                     21575
IP address blocks:        132.191.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7e:fb:95:8e:34:91:1e:d2:55:8b:88:75:c3:f7:d1:a8:84:cc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:40 2024 GMT
            Not After : Mar  4 17:56:40 2025 GMT
        Subject: CN=1ABE612499B38BB94973421A8520A743C099E9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:12:c0:bf:e0:a5:32:0e:f2:f2:ac:7f:ac:
                    43:da:f6:b1:b8:f0:35:4f:94:df:06:29:02:d3:96:
                    6d:cc:2a:83:30:e0:7b:92:39:a0:4f:7c:b8:59:5e:
                    ec:66:c8:ef:de:5e:b5:57:05:a2:1b:85:64:1b:50:
                    70:ef:61:69:51:7e:b0:b2:94:e2:41:56:70:55:40:
                    36:89:8c:0a:95:12:c7:e0:79:33:82:45:5e:df:fa:
                    d6:bb:32:ea:b7:2a:0e:bd:42:37:fa:cc:f3:28:34:
                    6a:0f:c3:33:34:c3:71:7e:a5:3d:ea:cc:5f:80:17:
                    5a:76:8a:76:a4:a6:b2:7a:74:9e:26:5e:96:47:0b:
                    98:a9:76:82:7c:82:28:25:35:4a:fb:3f:fb:d4:40:
                    6a:49:d4:01:8c:ab:49:18:e2:77:bc:ed:43:ff:27:
                    88:fd:33:46:f7:83:d7:3b:f1:95:8b:c3:a9:cc:88:
                    79:8a:8d:00:20:10:ca:c7:ca:cd:57:2d:9c:32:12:
                    7c:80:8b:86:a9:03:aa:92:a6:d9:e3:58:a8:41:65:
                    8a:d5:7f:fe:2e:69:b2:14:b6:d4:aa:79:a2:1a:8d:
                    8b:b8:d8:33:a8:4e:1f:7a:e2:93:7d:f2:41:82:f9:
                    54:b7:52:23:fa:01:54:2a:cb:75:34:0f:8f:dc:5f:
                    4f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BE:61:24:99:B3:8B:B9:49:73:42:1A:85:20:A7:43:C0:99:E9:D4
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3139312e302e302f31362d3234203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:7d:4c:f0:b6:67:42:14:19:e0:90:ed:9c:a8:a1:64:f6:1c:
         7d:7e:80:29:8c:2f:35:cc:c3:0a:b7:5c:90:b9:5b:b5:98:ca:
         a7:16:65:21:e8:60:46:92:8b:e3:f6:d8:8a:0a:9c:48:e9:17:
         82:ba:bc:7f:5d:c1:58:75:78:55:61:eb:31:d0:5f:80:67:2a:
         81:90:0d:30:2b:88:dc:5e:a1:f4:b7:fb:3b:59:4c:27:d2:a7:
         01:3f:0a:1f:00:48:9e:1f:df:2f:74:a5:a1:ac:7f:c7:95:b4:
         33:51:28:eb:51:6c:34:73:37:55:fe:14:7d:c1:d6:e9:03:c6:
         9f:60:aa:8e:3c:a4:d8:67:b1:3a:52:27:0e:e7:d9:0f:4d:b6:
         f1:f6:95:3c:a6:9f:42:0b:c6:65:91:2e:41:d2:40:e0:4d:d8:
         40:eb:9f:8e:9e:14:2c:15:2f:ae:9d:9e:88:ad:0d:f7:71:d5:
         ee:c8:68:43:2a:45:62:db:09:e7:e6:50:a7:67:f8:b8:7e:c0:
         44:69:66:e5:3a:54:92:52:92:9d:5d:8e:c3:28:93:c4:92:09:
         28:3d:e1:ac:29:78:7c:b7:c7:b2:80:8c:95:b4:58:43:83:1e:
         22:8e:df:ba:3b:07:14:61:ac:72:6e:a8:5c:7d:30:8d:94:a8:
         c2:72:7f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org