Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203631343730.roa
File:                     3133312e302e3233322e302f32322d3234203d3e203631343730.roa (raw, json)
Hash identifier:          p8z2BAM6tAdFu+QjwavgEaJCt48ZD0CUIF+wfxIoquY=
Subject key identifier:   79:04:00:5D:D6:EB:B0:B2:3D:33:80:A9:A1:65:1D:1D:55:C2:CF:33
Certificate issuer:       /CN=48C3545237B1DDEF78ABA1776BAB15B728086643
Certificate serial:       692FCDD23DB1989D38A68D55EB4420C14EF32209
Authority key identifier: 48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203631343730.roa
Signing time:             Tue 05 Mar 2024 17:54:47 +0000
ROA not before:           Tue 05 Mar 2024 17:49:47 +0000
ROA not after:            Tue 04 Mar 2025 17:54:47 +0000
asID:                     61470
IP address blocks:        131.0.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2f:cd:d2:3d:b1:98:9d:38:a6:8d:55:eb:44:20:c1:4e:f3:22:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C3545237B1DDEF78ABA1776BAB15B728086643
        Validity
            Not Before: Mar  5 17:49:47 2024 GMT
            Not After : Mar  4 17:54:47 2025 GMT
        Subject: CN=7904005DD6EBB0B23D3380A9A1651D1D55C2CF33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:eb:c8:7f:03:e7:6c:d9:d3:7e:fd:7b:f8:
                    e1:67:0c:e4:37:f5:e5:5b:fc:31:a9:45:b1:01:dd:
                    5f:13:ef:54:d4:06:e7:13:bb:19:0f:3c:7b:3b:57:
                    a8:bc:20:d8:a1:ef:10:49:34:61:6a:98:0e:6a:35:
                    b2:06:4c:cf:74:2b:ed:48:66:4a:19:05:ff:b3:5d:
                    e6:92:38:f6:b3:79:e7:69:e9:d0:a0:a7:e2:79:e0:
                    e3:4c:08:f9:0a:87:4a:db:c7:03:50:e1:92:75:ed:
                    10:aa:61:72:6f:92:2e:9d:0f:1a:e5:02:e2:c0:34:
                    23:d4:08:17:00:c0:58:b8:03:0a:4f:d3:b5:77:25:
                    fb:ff:7d:9a:e6:49:85:32:73:bb:f3:3c:da:c4:ef:
                    47:50:5b:ee:b0:94:c8:79:1a:6e:5c:7a:6f:26:c3:
                    a8:39:b5:12:fd:fa:3b:67:39:de:29:43:fc:0d:ee:
                    d9:c5:16:6d:ae:9d:0e:18:fe:46:93:dc:b9:95:7a:
                    f3:91:2b:03:a0:40:1d:64:f2:1d:89:c3:9d:d7:13:
                    86:16:4f:9e:de:4e:d2:21:19:43:c6:e3:ad:6d:5c:
                    e0:cd:29:fb:9a:69:f0:d1:3f:de:5d:cd:22:9c:0e:
                    07:7c:66:6a:50:03:c8:bf:8e:94:83:53:4d:2b:50:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:04:00:5D:D6:EB:B0:B2:3D:33:80:A9:A1:65:1D:1D:55:C2:CF:33
            X509v3 Authority Key Identifier:
                keyid:48:C3:54:52:37:B1:DD:EF:78:AB:A1:77:6B:AB:15:B7:28:08:66:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/48C3545237B1DDEF78ABA1776BAB15B728086643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48C3545237B1DDEF78ABA1776BAB15B728086643.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC13424E7414D8392C4350EFB18192A862114D27CB68D9BAEA4DF55DCDCBA6DC/0/3133312e302e3233322e302f32322d3234203d3e203631343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:70:b7:ba:85:1c:89:43:46:54:35:91:d8:e3:66:e3:4e:22:
         ef:ff:9a:48:a0:81:f0:eb:68:4f:88:df:97:6e:9e:bb:ce:9d:
         f2:93:7e:3f:0b:1b:44:1a:40:20:68:7b:22:42:ec:ef:33:3e:
         77:98:8e:13:bb:78:fd:bb:c0:1f:e5:f7:b4:3c:50:b2:55:3e:
         fe:e5:c3:3b:2d:a1:a3:8f:33:98:aa:06:d9:43:4c:f2:d0:2e:
         9c:62:2d:29:37:ea:c0:26:7c:cf:51:88:e8:2c:4f:97:0b:9d:
         ee:99:9b:19:96:e0:fc:3b:e7:ab:8a:8c:f0:46:b8:4a:b3:d7:
         d2:b4:f2:59:08:db:2a:39:f5:37:d7:f6:fd:be:67:49:bd:71:
         9d:0f:b4:ce:c9:48:26:22:f7:40:e0:fe:49:f6:1a:08:fd:ea:
         97:01:39:2f:18:9e:18:e2:7f:00:dd:43:c6:8f:7f:ca:21:e0:
         9e:bb:3a:2a:ae:67:ef:60:d2:09:eb:34:ed:aa:cc:a1:92:2b:
         bd:c4:62:c7:ce:7e:88:0b:5b:dc:6e:9b:31:7d:e7:f4:14:91:
         99:9a:95:e8:3f:9a:de:11:82:c3:93:f3:2b:c8:80:33:72:ad:
         bf:54:13:e5:81:4d:24:30:35:1e:c1:b7:1b:d4:71:7d:61:89:
         b9:c6:ef:c6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUaS/N0j2xmJ04po1V60QgwU7zIgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhDMzU0NTIzN0IxRERFRjc4QUJBMTc3NkJBQjE1Qjcy
ODA4NjY0MzAeFw0yNDAzMDUxNzQ5NDdaFw0yNTAzMDQxNzU0NDdaMDMxMTAvBgNV
BAMTKDc5MDQwMDVERDZFQkIwQjIzRDMzODBBOUExNjUxRDFENTVDMkNGMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcA+vIfwPnbNnTfv17+OFnDOQ3
9eVb/DGpRbEB3V8T71TUBucTuxkPPHs7V6i8INih7xBJNGFqmA5qNbIGTM90K+1I
ZkoZBf+zXeaSOPazeedp6dCgp+J54ONMCPkKh0rbxwNQ4ZJ17RCqYXJvki6dDxrl
AuLANCPUCBcAwFi4AwpP07V3Jfv/fZrmSYUyc7vzPNrE70dQW+6wlMh5Gm5cem8m
w6g5tRL9+jtnOd4pQ/wN7tnFFm2unQ4Y/kaT3LmVevORKwOgQB1k8h2Jw53XE4YW
T57eTtIhGUPG461tXODNKfuaafDRP95dzSKcDgd8ZmpQA8i/jpSDU00rUMlLAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUeQQAXdbrsLI9M4CpoWUdHVXCzzMwHwYDVR0j
BBgwFoAUSMNUUjex3e94q6F3a6sVtygIZkMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzEzNDI0RTc0MTREODM5MkM0MzUwRUZCMTgxOTJBODYy
MTE0RDI3Q0I2OEQ5QkFFQTRERjU1RENEQ0JBNkRDLzAvNDhDMzU0NTIzN0IxRERF
Rjc4QUJBMTc3NkJBQjE1QjcyODA4NjY0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OEMzNTQ1MjM3QjFEREVGNzhB
QkExNzc2QkFCMTVCNzI4MDg2NjQzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMxMzQyNEU3NDE0RDgzOTJDNDM1MEVGQjE4MTkyQTg2MjExNEQyN0NC
NjhEOUJBRUE0REY1NURDRENCQTZEQy8wLzMxMzMzMTJlMzAyZTMyMzMzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM2MzEzNDM3MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKDAOgwDQYJ
KoZIhvcNAQELBQADggEBAJ5wt7qFHIlDRlQ1kdjjZuNOIu//mkiggfDraE+I35du
nrvOnfKTfj8LG0QaQCBoeyJC7O8zPneYjhO7eP27wB/l97Q8ULJVPv7lwzstoaOP
M5iqBtlDTPLQLpxiLSk36sAmfM9RiOgsT5cLne6ZmxmW4Pw756uKjPBGuEqz19K0
8lkI2yo59TfX9v2+Z0m9cZ0PtM7JSCYi90Dg/kn2Ggj96pcBOS8YnhjifwDdQ8aP
f8oh4J67OiquZ+9g0gnrNO2qzKGSK73EYsfOfogLW9xumzF95/QUkZmaleg/mt4R
gsOT8yvIgDNyrb9UE+WBTSQwNR7BtxvUcX1hibnG78Y=
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org