Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133312e3136312e35322e302f32322d3234203d3e20323633363836.roa
File:                     3133312e3136312e35322e302f32322d3234203d3e20323633363836.roa (raw, json)
Hash identifier:          p/EvRrebGPBLYy6EUAU4RHztAJ2hsks7LCKNvVCpet4=
Subject key identifier:   89:D2:08:96:10:F7:59:2B:AA:45:23:6D:52:87:DB:1C:02:DB:80:38
Certificate issuer:       /CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
Certificate serial:       319804109244ACAD5EAFC52897C24E7939CF1A5D
Authority key identifier: 15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133312e3136312e35322e302f32322d3234203d3e20323633363836.roa
Signing time:             Tue 05 Mar 2024 18:02:16 +0000
ROA not before:           Tue 05 Mar 2024 17:57:16 +0000
ROA not after:            Tue 04 Mar 2025 18:02:16 +0000
asID:                     263686
IP address blocks:        131.161.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:98:04:10:92:44:ac:ad:5e:af:c5:28:97:c2:4e:79:39:cf:1a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
        Validity
            Not Before: Mar  5 17:57:16 2024 GMT
            Not After : Mar  4 18:02:16 2025 GMT
        Subject: CN=89D2089610F7592BAA45236D5287DB1C02DB8038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:0c:5e:7b:7d:04:e4:7c:05:26:ee:df:2d:
                    b7:17:7a:eb:f6:19:f2:17:0b:86:42:c7:3f:63:3f:
                    23:f8:1e:33:71:e6:33:ed:a6:e1:6a:6d:33:48:e4:
                    e2:fa:f5:09:6a:b4:aa:dc:f7:1e:47:91:fc:33:f1:
                    18:b0:87:62:f6:17:89:4c:9f:74:00:4f:fc:f7:37:
                    19:88:7b:0d:40:cb:39:af:11:45:a0:60:03:9a:8d:
                    22:f1:42:ce:de:50:a7:6f:92:7a:80:e5:0b:13:99:
                    09:86:d1:c2:65:1d:5c:94:22:41:c3:12:e9:b7:90:
                    42:21:c7:ed:c7:fb:50:a8:41:0a:51:74:05:a5:a1:
                    26:6b:c5:9f:b4:80:23:84:c8:59:c3:83:16:f2:80:
                    ae:b7:b9:61:92:a2:ef:ec:71:be:23:06:d4:2f:c2:
                    b3:79:b5:fd:2a:8f:64:bf:55:b1:b7:83:10:ae:2f:
                    34:5a:e8:01:cc:ae:42:3d:ec:b3:ca:23:9e:f0:1f:
                    67:7e:cd:11:f7:b3:80:cd:f0:20:84:6b:ca:28:1f:
                    d5:08:90:ae:e6:eb:21:6f:0e:75:a0:61:6c:2f:c5:
                    39:f0:02:5e:9d:ec:be:7f:0b:36:30:eb:24:d8:05:
                    4e:3e:9b:fe:0c:36:c8:27:a3:22:c9:7d:69:35:10:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D2:08:96:10:F7:59:2B:AA:45:23:6D:52:87:DB:1C:02:DB:80:38
            X509v3 Authority Key Identifier:
                keyid:15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133312e3136312e35322e302f32322d3234203d3e20323633363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:5a:c6:5c:fb:63:e4:c8:73:fe:7f:79:19:78:3f:fa:84:6e:
         3a:30:fc:11:b0:ed:60:f5:05:b6:14:89:ab:2f:ac:2a:3d:c3:
         17:71:f2:8f:72:70:27:ea:64:2d:ed:5d:b0:5f:74:4d:22:f8:
         4b:2a:e7:70:2d:d4:fb:ab:d8:40:91:c1:a2:75:f4:d7:c3:45:
         26:ac:fd:28:45:20:77:1e:44:26:01:65:9b:05:ea:b2:bf:a0:
         1e:27:21:2a:24:68:af:52:02:b3:89:45:9a:d8:fb:04:b2:8e:
         f4:05:ef:95:57:d2:50:73:f6:7d:e4:dd:13:f3:d0:2d:a0:e3:
         30:86:98:d5:1f:00:4b:57:26:f1:a9:8d:21:19:6e:33:ce:3a:
         17:a6:50:4e:7c:cb:80:2e:c7:85:2e:5f:55:d9:ba:cc:36:6a:
         27:03:12:63:21:1a:43:68:02:80:e5:ea:d7:da:9d:ae:69:e6:
         35:91:fe:8b:38:f4:62:2d:5e:1a:58:de:5b:e9:14:7e:74:03:
         63:6c:89:81:e7:7a:6f:57:91:b8:f2:64:37:e2:a4:82:99:a4:
         b3:7c:e0:54:e3:e9:c2:9f:b0:68:05:0e:ad:54:5f:f6:a6:fb:
         ad:f9:3f:1f:f0:02:c7:a2:9b:67:22:d5:87:b0:0a:23:a8:99:
         fc:fb:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:17 2024 by rpki-client on console-ams.rpki-client.org