Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/3133322e3235352e302e302f32322d3234203d3e20323633363932.roa
File:                     3133322e3235352e302e302f32322d3234203d3e20323633363932.roa (raw, json)
Hash identifier:          sEtt2WDbI818xqV9x3xbvo5KI0O+J5Tanlh46DZ4U4I=
Subject key identifier:   57:A6:3F:0A:DC:37:6E:30:8B:88:7A:13:89:72:77:06:DA:20:5C:58
Certificate issuer:       /CN=6D3556529CE5599E78565FB2F26BF5285D573D92
Certificate serial:       794426AE8E690AC04AD55B589A845097AC9B810C
Authority key identifier: 6D:35:56:52:9C:E5:59:9E:78:56:5F:B2:F2:6B:F5:28:5D:57:3D:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/3133322e3235352e302e302f32322d3234203d3e20323633363932.roa
Signing time:             Tue 05 Mar 2024 17:58:35 +0000
ROA not before:           Tue 05 Mar 2024 17:53:35 +0000
ROA not after:            Tue 04 Mar 2025 17:58:35 +0000
asID:                     263692
IP address blocks:        132.255.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:44:26:ae:8e:69:0a:c0:4a:d5:5b:58:9a:84:50:97:ac:9b:81:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3556529CE5599E78565FB2F26BF5285D573D92
        Validity
            Not Before: Mar  5 17:53:35 2024 GMT
            Not After : Mar  4 17:58:35 2025 GMT
        Subject: CN=57A63F0ADC376E308B887A1389727706DA205C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:20:a3:07:87:49:bc:36:e6:c3:8a:9e:d1:
                    a9:11:24:a6:ac:c3:87:5c:59:24:2f:d4:c7:72:4b:
                    ca:3b:b7:bf:0c:f3:8c:d3:b8:c0:35:d4:20:ae:02:
                    49:75:3c:a0:41:8c:df:64:29:1b:80:05:4e:28:9b:
                    13:53:dc:b4:e0:15:de:f2:34:7a:aa:07:38:05:8e:
                    b1:94:1f:40:7a:47:9f:17:2b:b1:07:8c:89:52:f7:
                    77:af:65:8d:28:8b:ca:e2:9f:af:f9:00:3a:56:16:
                    a5:46:da:22:5d:94:e9:d6:c3:7f:42:ee:c2:1a:50:
                    51:ef:c6:9c:1d:be:1e:20:0f:f4:71:78:b6:eb:04:
                    0e:50:67:ed:15:cc:0e:7f:96:11:ae:d7:fa:c3:80:
                    88:9f:89:1e:9b:b7:c0:bc:ef:4c:c9:e7:0e:a5:c1:
                    9f:10:92:63:1f:21:0b:19:21:22:73:c2:d8:3d:68:
                    5d:d3:96:fa:b0:06:2a:64:ea:25:91:38:7c:94:13:
                    47:26:21:ea:ed:83:4c:0a:ee:19:13:0d:61:7c:67:
                    e2:00:8f:f4:25:5e:7c:b2:d9:2b:21:6b:22:d4:95:
                    a3:61:7e:17:b0:9f:6b:3e:5f:26:89:83:e3:8f:0c:
                    ff:ab:24:0d:b5:ca:55:cb:c9:e3:89:7b:e2:64:9e:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:3F:0A:DC:37:6E:30:8B:88:7A:13:89:72:77:06:DA:20:5C:58
            X509v3 Authority Key Identifier:
                keyid:6D:35:56:52:9C:E5:59:9E:78:56:5F:B2:F2:6B:F5:28:5D:57:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/6D3556529CE5599E78565FB2F26BF5285D573D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3556529CE5599E78565FB2F26BF5285D573D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C5371F83A0F5B0E9A8BE2AC1F57956FEF9B8D60DD4EF5ADD920169442298490/0/3133322e3235352e302e302f32322d3234203d3e20323633363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e8:35:40:90:dc:7f:c7:92:a6:2a:96:d2:47:73:21:86:38:63:
         76:d6:2d:30:00:a2:18:62:bb:62:c9:52:dd:61:38:b7:1d:41:
         32:c5:4d:d4:c5:d0:cf:36:80:df:48:8e:38:97:2e:2e:d6:8d:
         60:28:d1:68:82:00:d0:77:59:71:b4:b8:6d:95:e1:61:68:9f:
         68:ee:34:36:b6:ee:06:1b:dc:63:68:97:20:11:e7:47:04:a1:
         96:f9:17:d6:13:58:0c:7e:bb:15:22:45:22:39:f9:77:f7:29:
         25:cd:82:74:2f:96:40:d1:20:c1:71:28:f7:bf:bc:8b:2c:9f:
         d8:f0:f9:8b:fc:9c:eb:52:59:6a:5b:ee:67:ab:57:57:c7:ef:
         30:0e:f7:5e:ec:07:62:72:b5:f3:da:ef:97:63:5a:89:e5:86:
         ca:d9:74:1e:e9:60:0a:b6:f3:e1:93:9e:da:b4:55:1f:91:af:
         6e:53:a0:c7:f2:b6:12:8c:27:cf:f6:2a:f1:ba:e3:af:40:21:
         d8:37:69:ae:8b:07:cd:40:3b:6d:7f:95:59:bd:e3:42:ab:ab:
         ff:d6:cc:98:29:99:a3:42:ef:92:4c:84:b6:a5:4b:b7:13:37:
         a7:3b:f4:66:f9:db:04:b6:33:9b:c1:a2:c0:aa:51:54:90:26:
         a3:f8:90:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org