Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/3133312e3139362e3138302e302f32322d3234203d3e20323635373538.roa
File:                     3133312e3139362e3138302e302f32322d3234203d3e20323635373538.roa (raw, json)
Hash identifier:          rivnknNoRqfXqy/keqQs0MDK5LRQq+eAw7zZU9eOaUM=
Subject key identifier:   DD:B9:C6:38:70:64:47:57:6E:74:F5:9A:84:6D:AB:DE:53:55:A6:FA
Certificate issuer:       /CN=596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F
Certificate serial:       5474FB7FED7016E36881055C269ACC49274E1F7D
Authority key identifier: 59:6D:2E:DA:6E:CC:42:DC:01:32:B3:F7:02:8F:4D:83:8C:A0:BF:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/3133312e3139362e3138302e302f32322d3234203d3e20323635373538.roa
Signing time:             Thu 31 Oct 2024 00:25:00 +0000
ROA not before:           Thu 31 Oct 2024 00:20:00 +0000
ROA not after:            Thu 30 Oct 2025 00:25:00 +0000
asID:                     265758
IP address blocks:        131.196.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:74:fb:7f:ed:70:16:e3:68:81:05:5c:26:9a:cc:49:27:4e:1f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F
        Validity
            Not Before: Oct 31 00:20:00 2024 GMT
            Not After : Oct 30 00:25:00 2025 GMT
        Subject: CN=DDB9C638706447576E74F59A846DABDE5355A6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:f5:57:ef:c4:15:67:7b:14:66:c8:87:38:
                    37:41:52:0c:fd:34:50:93:98:29:b3:c1:7e:08:d9:
                    85:20:aa:da:c1:02:53:29:15:e5:77:92:5b:4b:06:
                    d5:48:76:be:80:ff:e0:62:40:0d:94:49:49:6c:8f:
                    e8:8c:0d:3e:b1:a1:96:1e:e2:1b:a3:90:7f:06:57:
                    7b:46:e7:67:6f:d6:ac:eb:64:53:c7:eb:73:ce:87:
                    e3:f1:0a:55:3f:9d:dd:52:b1:63:91:a5:8e:6d:d5:
                    87:27:40:6c:03:7e:46:bb:d7:fa:64:b0:93:89:43:
                    57:c5:27:c4:39:4d:5a:cd:38:ea:3e:12:91:c7:05:
                    c7:d1:1d:fa:59:a9:d5:19:d6:ea:dd:3e:5a:1c:17:
                    4c:60:63:a3:c2:37:1a:1e:cf:6d:b1:63:db:70:13:
                    3c:9e:b9:98:4e:ee:2b:a4:82:0b:b5:cc:3f:75:06:
                    4d:36:b0:cb:c6:aa:d5:f5:80:bf:e2:3b:b4:67:b8:
                    2b:fa:45:73:3c:0c:cd:93:f9:d3:5e:3f:e1:d7:d7:
                    ef:89:18:6e:59:2a:d5:7e:49:66:ce:e8:f1:e7:ee:
                    ca:3d:08:d4:d2:7d:8a:f8:b1:d2:cc:9e:d8:1e:23:
                    30:cf:d7:fc:da:de:15:98:03:11:d3:ff:ed:5f:fe:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B9:C6:38:70:64:47:57:6E:74:F5:9A:84:6D:AB:DE:53:55:A6:FA
            X509v3 Authority Key Identifier:
                keyid:59:6D:2E:DA:6E:CC:42:DC:01:32:B3:F7:02:8F:4D:83:8C:A0:BF:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/596D2EDA6ECC42DC0132B3F7028F4D838CA0BF5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DF9937177B1EC160552C5AD2FA05E41CEA78C00D571BB4C755834E4C0DCD487/0/3133312e3139362e3138302e302f32322d3234203d3e20323635373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:0a:5d:f5:f2:0e:9a:b5:4b:d2:e0:62:98:94:6f:96:a3:73:
         bc:29:f9:e0:39:b6:a4:87:32:f6:61:a1:38:26:f8:93:bb:93:
         af:f7:8f:22:38:42:a4:10:0c:d7:45:9f:7c:7f:29:9a:5c:2a:
         55:82:bc:e7:39:02:87:c8:65:53:c9:ec:7e:75:2f:d3:49:b4:
         71:73:6d:24:98:56:90:a3:9c:0f:16:6a:2b:d0:5a:0f:a7:b0:
         0b:d3:c4:7f:e8:70:09:e0:a3:77:08:7b:40:8e:79:18:c8:96:
         51:cb:b7:0b:5b:ee:f7:43:f4:b1:b1:04:e9:19:35:b7:09:01:
         19:8a:a2:65:b0:4b:5e:9c:ec:aa:16:e2:1a:a5:dd:4c:17:33:
         2f:e0:e6:2a:8a:52:d7:d6:5a:f0:7a:a8:6b:b2:58:28:c5:a9:
         51:fe:37:6c:24:b3:b0:4b:5a:c9:53:af:d0:9d:50:19:e7:b4:
         f9:cc:d3:3c:ac:f1:ce:19:37:ad:29:db:59:9f:cb:09:61:ee:
         39:b8:70:8b:a8:16:2c:d4:e5:4c:9e:c2:6d:d6:72:c6:f2:ae:
         a1:65:c5:95:a1:ea:11:f3:b5:fc:81:e1:65:ab:b0:54:37:98:
         d5:95:bc:73:b5:4a:70:45:16:16:c6:ea:e7:89:8a:bd:35:8e:
         47:23:87:eb
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUVHT7f+1wFuNogQVcJprMSSdOH30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk2RDJFREE2RUNDNDJEQzAxMzJCM0Y3MDI4RjREODM4
Q0EwQkY1RjAeFw0yNDEwMzEwMDIwMDBaFw0yNTEwMzAwMDI1MDBaMDMxMTAvBgNV
BAMTKEREQjlDNjM4NzA2NDQ3NTc2RTc0RjU5QTg0NkRBQkRFNTM1NUE2RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0PVX78QVZ3sUZsiHODdBUgz9
NFCTmCmzwX4I2YUgqtrBAlMpFeV3kltLBtVIdr6A/+BiQA2USUlsj+iMDT6xoZYe
4hujkH8GV3tG52dv1qzrZFPH63POh+PxClU/nd1SsWORpY5t1YcnQGwDfka71/pk
sJOJQ1fFJ8Q5TVrNOOo+EpHHBcfRHfpZqdUZ1urdPlocF0xgY6PCNxoez22xY9tw
EzyeuZhO7iukggu1zD91Bk02sMvGqtX1gL/iO7RnuCv6RXM8DM2T+dNeP+HX1++J
GG5ZKtV+SWbO6PHn7so9CNTSfYr4sdLMntgeIzDP1/za3hWYAxHT/+1f/luZAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU3bnGOHBkR1dudPWahG2r3lNVpvowHwYDVR0j
BBgwFoAUWW0u2m7MQtwBMrP3Ao9Ng4ygv18wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REY5OTM3MTc3QjFFQzE2MDU1MkM1QUQyRkEwNUU0MUNF
QTc4QzAwRDU3MUJCNEM3NTU4MzRFNEMwRENENDg3LzAvNTk2RDJFREE2RUNDNDJE
QzAxMzJCM0Y3MDI4RjREODM4Q0EwQkY1Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OTZEMkVEQTZFQ0M0MkRDMDEz
MkIzRjcwMjhGNEQ4MzhDQTBCRjVGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOURGOTkzNzE3N0IxRUMxNjA1NTJDNUFEMkZBMDVFNDFDRUE3OEMwMEQ1
NzFCQjRDNzU1ODM0RTRDMERDRDQ4Ny8wLzMxMzMzMTJlMzEzOTM2MmUzMTM4MzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNzM1Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKD
xLQwDQYJKoZIhvcNAQELBQADggEBAMYKXfXyDpq1S9LgYpiUb5ajc7wp+eA5tqSH
MvZhoTgm+JO7k6/3jyI4QqQQDNdFn3x/KZpcKlWCvOc5AofIZVPJ7H51L9NJtHFz
bSSYVpCjnA8WaivQWg+nsAvTxH/ocAngo3cIe0COeRjIllHLtwtb7vdD9LGxBOkZ
NbcJARmKomWwS16c7KoW4hql3UwXMy/g5iqKUtfWWvB6qGuyWCjFqVH+N2wks7BL
WslTr9CdUBnntPnM0zys8c4ZN60p21mfywlh7jm4cIuoFizU5Uyewm3WcsbyrqFl
xZWh6hHztfyB4WWrsFQ3mNWVvHO1SnBFFhbG6ueJir01jkcjh+s=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:05 2024 by rpki-client on console-ams.rpki-client.org