Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/3133312e3235352e31362e302f32342d3234203d3e203532343638.roa
File:                     3133312e3235352e31362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          R3XJgvO9Qu+FrHjW4Arzef3dS/X+WENO611DtBnbjtQ=
Subject key identifier:   41:80:DF:28:78:78:C4:C8:4B:D1:82:E9:89:EE:E6:4C:19:ED:12:81
Certificate issuer:       /CN=7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE
Certificate serial:       47E5F2A2594B69E157C46F22D35515FD37724399
Authority key identifier: 7E:BE:7B:6F:DF:2C:92:F9:F4:A4:9E:B4:ED:8D:FA:C3:B5:A0:E4:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/3133312e3235352e31362e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:10:25 +0000
ROA not before:           Tue 05 Mar 2024 18:05:25 +0000
ROA not after:            Tue 04 Mar 2025 18:10:25 +0000
asID:                     52468
IP address blocks:        131.255.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e5:f2:a2:59:4b:69:e1:57:c4:6f:22:d3:55:15:fd:37:72:43:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE
        Validity
            Not Before: Mar  5 18:05:25 2024 GMT
            Not After : Mar  4 18:10:25 2025 GMT
        Subject: CN=4180DF287878C4C84BD182E989EEE64C19ED1281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:61:a9:80:e1:95:e6:88:59:d8:9e:99:04:
                    61:34:ef:eb:97:f0:09:b8:08:fc:e8:b2:f8:27:cd:
                    65:92:18:22:cf:81:75:c7:d5:54:4c:cd:3c:a9:e9:
                    fe:03:55:a4:40:6d:2d:68:05:db:f8:d6:dc:bf:49:
                    40:39:05:4e:de:34:16:fa:2d:55:6e:b9:2f:02:86:
                    2e:31:e0:d8:b1:2b:c6:1f:bf:64:c8:27:c5:8c:dd:
                    e8:03:ab:11:ed:d2:ff:3f:1e:b8:d8:17:19:74:7c:
                    1a:bb:2b:9a:42:e3:c2:66:14:ef:8d:c1:23:b0:07:
                    8d:5a:99:42:ac:c3:69:79:b2:e7:d1:61:90:2b:83:
                    9a:b1:37:bc:88:09:e3:db:75:c4:64:a8:4b:ab:34:
                    32:37:d1:c0:1e:63:18:47:0a:d8:cf:78:c4:23:62:
                    1e:10:ba:05:cc:2f:67:4a:d9:3c:20:a3:a5:86:0e:
                    34:81:14:51:98:da:88:85:e6:ce:7a:08:11:db:49:
                    7e:ba:78:51:0a:70:4a:20:96:c8:0f:ae:77:f5:f0:
                    30:fa:db:b3:2f:09:6d:6e:1f:7d:13:26:ed:33:14:
                    81:cb:ea:54:dd:7a:2f:99:70:f6:94:4d:65:27:d1:
                    60:69:05:3e:95:3b:4e:59:c9:5b:3c:4d:05:ef:8a:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:80:DF:28:78:78:C4:C8:4B:D1:82:E9:89:EE:E6:4C:19:ED:12:81
            X509v3 Authority Key Identifier:
                keyid:7E:BE:7B:6F:DF:2C:92:F9:F4:A4:9E:B4:ED:8D:FA:C3:B5:A0:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/3133312e3235352e31362e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:4f:69:9b:aa:4c:b9:3a:b3:b7:2a:81:2c:9b:57:8b:54:36:
         02:3f:ba:83:95:12:6d:7f:76:34:55:9a:36:2e:b0:29:28:34:
         27:40:84:1b:60:d2:9c:2a:d4:9b:90:1e:50:b3:3f:7b:b7:98:
         33:a2:c5:96:86:d9:61:a7:78:c9:d7:aa:d2:9d:d7:31:8c:0e:
         ee:5e:22:5a:62:7d:43:2c:44:59:82:6c:88:65:2a:f3:23:89:
         5d:e8:0c:24:00:fd:e7:7f:4a:45:c9:bf:74:d5:89:71:6c:60:
         66:14:31:ce:96:d0:e3:88:e7:a9:26:57:55:d6:89:e0:41:79:
         eb:2b:1c:c2:aa:b6:9a:3b:47:57:83:22:85:53:b7:11:e7:82:
         a0:79:8b:70:c9:ea:8c:70:27:9d:41:10:87:5b:36:78:c9:dc:
         92:02:7a:45:cf:38:7c:2a:69:ae:30:d3:33:ad:a4:4d:8f:82:
         58:7a:59:1a:0e:36:2d:6a:72:02:df:c9:10:dd:00:89:f2:2f:
         ea:4d:6a:19:02:2a:a1:69:f6:fb:41:d0:5b:82:54:b4:90:1f:
         56:36:78:6a:3a:a1:fd:e1:bd:59:25:85:84:c4:8d:b2:e2:2d:
         c6:15:ab:69:d1:1e:64:a3:8d:95:df:87:3f:ea:00:da:37:83:
         67:fc:6e:6e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUR+XyollLaeFXxG8i01UV/TdyQ5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VCRTdCNkZERjJDOTJGOUY0QTQ5RUI0RUQ4REZBQzNC
NUEwRTRCRTAeFw0yNDAzMDUxODA1MjVaFw0yNTAzMDQxODEwMjVaMDMxMTAvBgNV
BAMTKDQxODBERjI4Nzg3OEM0Qzg0QkQxODJFOTg5RUVFNjRDMTlFRDEyODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUWGpgOGV5ohZ2J6ZBGE07+uX
8Am4CPzosvgnzWWSGCLPgXXH1VRMzTyp6f4DVaRAbS1oBdv41ty/SUA5BU7eNBb6
LVVuuS8Chi4x4NixK8Yfv2TIJ8WM3egDqxHt0v8/HrjYFxl0fBq7K5pC48JmFO+N
wSOwB41amUKsw2l5sufRYZArg5qxN7yICePbdcRkqEurNDI30cAeYxhHCtjPeMQj
Yh4QugXML2dK2Twgo6WGDjSBFFGY2oiF5s56CBHbSX66eFEKcEoglsgPrnf18DD6
27MvCW1uH30TJu0zFIHL6lTdei+ZcPaUTWUn0WBpBT6VO05ZyVs8TQXviibhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQYDfKHh4xMhL0YLpie7mTBntEoEwHwYDVR0j
BBgwFoAUfr57b98skvn0pJ607Y36w7Wg5L4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OEYzMDFDMjZEQUY1NzBFRjNDNzk3MUQ4N0MxQjNBMDM4
RUVENzQ4RTFGRjQ2ODhGMUYxMjRGRDA5NUU0RDQxLzAvN0VCRTdCNkZERjJDOTJG
OUY0QTQ5RUI0RUQ4REZBQzNCNUEwRTRCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RUJFN0I2RkRGMkM5MkY5RjRB
NDlFQjRFRDhERkFDM0I1QTBFNEJFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOThGMzAxQzI2REFGNTcwRUYzQzc5NzFEODdDMUIzQTAzOEVFRDc0OEUx
RkY0Njg4RjFGMTI0RkQwOTVFNEQ0MS8wLzMxMzMzMTJlMzIzNTM1MmUzMTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIP/EDAN
BgkqhkiG9w0BAQsFAAOCAQEAl09pm6pMuTqztyqBLJtXi1Q2Aj+6g5USbX92NFWa
Ni6wKSg0J0CEG2DSnCrUm5AeULM/e7eYM6LFlobZYad4ydeq0p3XMYwO7l4iWmJ9
QyxEWYJsiGUq8yOJXegMJAD9539KRcm/dNWJcWxgZhQxzpbQ44jnqSZXVdaJ4EF5
6yscwqq2mjtHV4MihVO3EeeCoHmLcMnqjHAnnUEQh1s2eMnckgJ6Rc84fCpprjDT
M62kTY+CWHpZGg42LWpyAt/JEN0AifIv6k1qGQIqoWn2+0HQW4JUtJAfVjZ4ajqh
/eG9WSWFhMSNsuItxhWradEeZKONld+HP+oA2jeDZ/xubg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org