Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203131303134.roa
File:                     3133312e302e3233322e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier:          7c8mf61XU5CPXkMm0Ke4SfJTE438gHVwEOeEUVlA8ZY=
Subject key identifier:   A9:F6:73:32:1F:76:18:91:B8:68:33:00:5C:21:98:7E:16:79:9C:C4
Certificate issuer:       /CN=48C3545237B1DDEF78ABA1776BAB15B728086643
Certificate serial:       429EFF889268DAFC99829001281928E423DEC8E7
Authority key identifier: 48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:54:47 +0000
ROA not before:           Tue 05 Mar 2024 17:49:47 +0000
ROA not after:            Tue 04 Mar 2025 17:54:47 +0000
asID:                     11014
IP address blocks:        131.0.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9e:ff:88:92:68:da:fc:99:82:90:01:28:19:28:e4:23:de:c8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C3545237B1DDEF78ABA1776BAB15B728086643
        Validity
            Not Before: Mar  5 17:49:47 2024 GMT
            Not After : Mar  4 17:54:47 2025 GMT
        Subject: CN=A9F673321F761891B86833005C21987E16799CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:e8:2a:6b:b1:26:19:8f:b2:60:70:19:50:
                    74:6a:6d:07:24:90:20:9e:bb:c2:c1:16:87:fb:6c:
                    93:3b:b3:f1:3f:ed:05:1c:50:58:41:7b:88:c0:9c:
                    e6:36:7b:23:ee:b8:ef:14:d7:76:9f:e6:fd:e8:3b:
                    b6:6f:99:c6:b8:6d:e4:32:f7:19:2e:17:38:57:b0:
                    00:bd:3c:41:a6:36:87:13:5e:47:8a:2c:bf:70:d5:
                    ce:bb:e2:f1:bd:c5:23:22:dd:2d:5b:d1:bd:a5:59:
                    9d:43:1e:83:b9:bc:e8:5a:a1:42:56:1f:ca:fb:da:
                    68:8a:b1:08:33:35:81:3b:06:91:dd:7a:0e:74:fb:
                    88:2c:b4:eb:8b:14:28:28:df:e9:01:77:32:fa:f9:
                    dc:7b:11:43:29:9f:30:4d:4b:ec:5d:36:6b:a0:8c:
                    58:d6:56:3d:13:3d:88:de:71:b3:ba:b9:22:fc:f4:
                    93:68:d0:30:95:44:ce:e6:9c:98:9a:f0:8b:85:42:
                    9d:cc:0b:c8:62:ee:64:bd:e1:85:a8:60:fc:e7:25:
                    b8:fe:44:fd:d8:9c:c6:29:d0:a0:e9:c0:50:78:06:
                    ae:64:81:3c:43:d9:e3:e7:27:f6:ef:5c:ba:5a:17:
                    10:58:3c:46:9c:58:51:e7:4e:0d:cb:71:e6:7a:a0:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F6:73:32:1F:76:18:91:B8:68:33:00:5C:21:98:7E:16:79:9C:C4
            X509v3 Authority Key Identifier:
                keyid:48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:af:92:0e:89:19:1b:d6:ef:df:53:29:c9:77:87:3d:d3:ea:
         9c:40:04:44:25:77:5f:e8:22:93:fb:a8:49:6b:47:23:43:b6:
         5a:4d:1c:1e:25:8d:18:be:85:b1:2e:5c:ab:5d:2a:04:29:f1:
         67:ee:93:74:8d:79:f0:3b:4e:90:8e:23:9f:aa:48:70:6b:09:
         8c:e8:dc:a5:c9:b7:a0:c5:43:a7:29:d7:48:3e:a0:e5:70:98:
         51:45:d1:a2:7d:b7:3f:ff:86:e7:38:2f:f1:8e:f0:ad:84:d5:
         27:a8:f2:a8:7d:a7:44:e5:c0:61:2c:18:eb:98:21:9c:48:95:
         ee:ca:ce:d5:fd:fd:bc:74:bd:58:06:65:f2:00:5d:80:6a:88:
         86:b1:8a:99:65:86:13:bc:55:5e:c4:35:3d:8c:5d:51:27:52:
         07:51:d7:58:ef:d1:b4:eb:1b:72:c0:db:06:4c:8c:f1:e2:25:
         41:ec:4f:b6:d2:db:35:b6:d7:bc:47:99:bc:69:8c:15:6e:c6:
         3d:a7:b9:27:59:30:35:58:a3:e6:57:ec:c2:10:f7:f4:c1:1c:
         c9:5d:31:1b:00:29:ab:ff:af:52:ce:01:30:a5:df:0a:58:70:
         57:98:c6:5e:0c:72:e6:b1:b2:0e:8d:63:c4:33:af:21:25:2d:
         a2:18:43:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:16 2024 by rpki-client on console-fra.rpki-client.org