Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/3133312e302e3133322e302f32322d3234203d3e20323730303732.roa
File:                     3133312e302e3133322e302f32322d3234203d3e20323730303732.roa (raw, json)
Hash identifier:          IBmwM0Ib8zRowVphBArYKEIwsAq+hNYTCG0vc43ioew=
Subject key identifier:   2B:02:17:6F:46:FE:8C:5D:0C:21:12:CE:CA:28:50:69:6D:62:41:82
Certificate issuer:       /CN=A46634976135DC79BB9C36E294FEF50F4ED507BD
Certificate serial:       3D3B5FCCE1473255A4E3CB5275FBEF59FD0606BD
Authority key identifier: A4:66:34:97:61:35:DC:79:BB:9C:36:E2:94:FE:F5:0F:4E:D5:07:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/3133312e302e3133322e302f32322d3234203d3e20323730303732.roa
Signing time:             Tue 05 Mar 2024 18:03:55 +0000
ROA not before:           Tue 05 Mar 2024 17:58:55 +0000
ROA not after:            Tue 04 Mar 2025 18:03:55 +0000
asID:                     270072
IP address blocks:        131.0.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3b:5f:cc:e1:47:32:55:a4:e3:cb:52:75:fb:ef:59:fd:06:06:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A46634976135DC79BB9C36E294FEF50F4ED507BD
        Validity
            Not Before: Mar  5 17:58:55 2024 GMT
            Not After : Mar  4 18:03:55 2025 GMT
        Subject: CN=2B02176F46FE8C5D0C2112CECA2850696D624182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:b5:42:ec:f6:44:af:78:8c:12:d7:f7:8c:
                    40:55:6a:08:d8:78:bc:2e:33:cf:0c:67:5a:0b:3f:
                    65:23:c7:24:c8:d1:c9:2e:b4:5f:78:ca:3b:69:34:
                    bb:d6:ec:c4:f8:e7:a2:0e:4d:57:9a:48:37:86:32:
                    e1:df:bb:e8:a0:63:8f:ff:31:c3:65:de:38:b5:5a:
                    7b:ce:b9:c3:71:6d:20:c4:79:bc:ea:ac:14:73:eb:
                    1d:da:3a:3b:4b:75:36:7f:f1:bd:2b:fd:62:91:6a:
                    74:87:cc:44:cc:50:88:09:79:e1:de:b8:75:b8:dc:
                    4d:6c:80:58:a7:8c:4b:21:c0:fe:43:6c:12:f4:22:
                    c4:1d:77:e4:8d:00:14:b3:5b:7d:d0:92:ce:79:11:
                    a7:5d:7c:6a:fb:bf:be:f1:73:65:7e:e1:b5:12:b0:
                    03:3d:d0:e0:92:c1:6b:5b:4f:f5:e8:15:85:93:95:
                    86:53:93:94:c4:19:0e:2b:9d:bf:44:b6:92:66:a2:
                    db:ec:45:5d:05:49:d1:a7:2a:ed:11:47:d0:4c:74:
                    3e:f1:70:f4:ca:54:30:27:1a:66:cf:8e:5b:74:01:
                    b7:ee:1a:15:00:b7:36:b4:52:68:8b:88:61:1f:69:
                    f4:b3:f1:2d:38:00:0a:7f:08:b4:1f:44:3d:68:0f:
                    5f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:02:17:6F:46:FE:8C:5D:0C:21:12:CE:CA:28:50:69:6D:62:41:82
            X509v3 Authority Key Identifier:
                keyid:A4:66:34:97:61:35:DC:79:BB:9C:36:E2:94:FE:F5:0F:4E:D5:07:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A46634976135DC79BB9C36E294FEF50F4ED507BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A522281EBDCC6109C15F3B1EE4832052A0B773733300063CF9FC0B9BD92CEC01/0/3133312e302e3133322e302f32322d3234203d3e20323730303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:4d:65:b4:83:37:27:62:ca:6b:91:15:d9:ac:03:ea:f7:98:
         64:13:90:11:62:eb:7f:2e:8e:d0:b2:6c:22:fa:72:4e:4f:53:
         62:8f:2b:2d:98:43:bc:16:9d:f6:71:d1:7f:46:b2:1d:93:e4:
         cf:2e:18:8a:8f:ef:ec:6a:cf:3b:02:21:cd:c5:85:01:01:5b:
         5d:55:b1:54:92:91:ba:8c:5a:15:98:ee:27:a1:c6:6f:23:45:
         81:94:d9:99:0f:cc:e3:d3:92:a8:97:d9:29:86:75:7b:5d:77:
         08:22:6b:7a:3b:c8:ef:09:0b:8b:b9:e5:37:80:28:38:f9:1c:
         af:a0:67:78:85:3c:b3:3c:91:af:3a:18:0b:be:65:71:f5:4b:
         a9:2d:36:4f:52:82:d8:4f:3e:43:2c:78:5c:8b:d4:d7:63:20:
         26:27:4c:11:96:b7:5c:d9:e6:2c:56:41:5e:3e:c1:32:f4:bc:
         53:43:93:a2:e4:e7:56:15:2f:bc:cd:81:31:20:e0:7b:1a:dc:
         3f:5a:18:5a:84:1a:0f:49:0b:fe:ef:58:ff:23:c2:47:bd:99:
         2b:15:dd:77:79:e7:4e:a9:64:ea:86:36:05:14:20:d9:e3:ec:
         93:31:b2:af:ec:f2:0f:e9:e1:1d:b2:ab:1e:ee:a9:94:a3:47:
         56:5a:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 03:29:46 2024 by rpki-client on console-fra.rpki-client.org