Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/3133322e3235352e372e302f32342d3234203d3e20323633373236.roa
File:                     3133322e3235352e372e302f32342d3234203d3e20323633373236.roa (raw, json)
Hash identifier:          RvlR2rKVViqIBnFqn/UHOSJKl1wDHmWUOzOK5WgTWJo=
Subject key identifier:   13:86:AC:F9:A6:D4:A3:E3:89:63:3A:BF:E8:18:E3:FA:F4:E4:F5:F0
Certificate issuer:       /CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
Certificate serial:       1178943FC4C7E1DBC8E1BD403121478D4B441939
Authority key identifier: 0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/3133322e3235352e372e302f32342d3234203d3e20323633373236.roa
Signing time:             Tue 05 Mar 2024 17:54:39 +0000
ROA not before:           Tue 05 Mar 2024 17:49:39 +0000
ROA not after:            Tue 04 Mar 2025 17:54:39 +0000
asID:                     263726
IP address blocks:        132.255.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:78:94:3f:c4:c7:e1:db:c8:e1:bd:40:31:21:47:8d:4b:44:19:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D123AE8C9FDED46E5F7D3B48878851E1E8B7498
        Validity
            Not Before: Mar  5 17:49:39 2024 GMT
            Not After : Mar  4 17:54:39 2025 GMT
        Subject: CN=1386ACF9A6D4A3E389633ABFE818E3FAF4E4F5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6d:dc:3d:a0:93:62:82:3c:d6:73:4a:56:dc:
                    bb:6d:8d:e9:a4:18:f3:2c:92:1b:ac:f5:f9:c9:c1:
                    51:38:a8:44:36:cd:ba:29:80:3d:ee:b8:31:36:99:
                    c3:bd:ff:09:37:8a:7d:55:e6:e7:3a:8b:f7:84:ba:
                    1b:e6:e0:da:6f:21:95:19:f0:2e:07:46:80:28:f6:
                    bf:cc:13:f0:f6:eb:cc:0c:a4:50:58:7f:09:8e:df:
                    3f:e5:a9:3c:f5:40:42:be:32:f9:9c:d1:8e:fc:d2:
                    d3:21:5c:b2:dd:62:5a:7f:51:37:9e:6e:6a:78:92:
                    85:26:85:59:02:62:be:34:4d:93:ac:e2:e0:e2:97:
                    04:34:77:79:5f:fd:8d:8e:20:b5:d3:4f:7d:d9:71:
                    b8:04:2c:bb:49:17:6f:09:5f:73:00:8b:d1:c8:77:
                    b4:14:94:de:12:9b:85:09:c7:07:3e:24:28:e3:ee:
                    fc:f5:20:ec:64:7c:f2:4e:49:40:72:54:b3:a8:c1:
                    91:8d:00:93:0b:d9:56:13:f0:cb:ba:db:0a:76:0d:
                    d8:1e:54:fd:39:e2:fb:cc:d7:dc:b5:bc:5e:26:7f:
                    85:51:00:93:67:a5:06:28:b3:29:79:20:ab:7d:10:
                    34:fb:46:8e:e0:5f:a2:cc:ea:20:1c:f1:93:27:f8:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:86:AC:F9:A6:D4:A3:E3:89:63:3A:BF:E8:18:E3:FA:F4:E4:F5:F0
            X509v3 Authority Key Identifier:
                keyid:0D:12:3A:E8:C9:FD:ED:46:E5:F7:D3:B4:88:78:85:1E:1E:8B:74:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D123AE8C9FDED46E5F7D3B48878851E1E8B7498.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D399C3B7762240D33C6D4F3F213A66E061ACAE278B44150DC24C978C00E0F8/0/3133322e3235352e372e302f32342d3234203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:d4:91:3d:fb:17:a7:d1:d7:6a:2f:98:8d:58:f3:6e:0e:94:
         cd:a3:d0:7f:8c:8a:96:31:cb:15:12:cc:ea:f0:dd:07:4d:3b:
         0d:25:d7:0f:22:b4:81:76:eb:a8:70:f9:57:b8:29:cb:c2:1b:
         53:e0:9f:cb:4c:e2:4b:ec:dd:8a:2a:98:c6:43:05:43:0d:f3:
         ef:07:a6:36:96:52:cb:44:88:df:53:50:50:25:86:95:9c:dd:
         ae:d5:07:99:60:23:8b:f1:ac:cf:fe:91:8e:76:29:0f:61:fc:
         8a:cc:f2:75:02:4b:31:13:da:05:ba:9b:fe:a1:bd:0a:82:12:
         4a:c8:e7:b6:19:07:57:2c:9d:ef:2c:92:9b:54:6f:46:df:76:
         db:55:9d:62:b4:e2:7b:1d:4b:f7:30:e9:3e:71:96:71:7a:21:
         66:1c:6d:df:00:77:0d:10:42:d6:9d:0d:bb:0f:52:ab:1a:95:
         bc:f0:4a:32:8d:df:6c:07:e2:14:d8:d0:b1:e5:e3:78:ee:c4:
         2c:38:71:05:1e:81:37:f6:82:dd:84:59:19:32:57:9a:fe:ee:
         e8:2c:7a:20:0f:cd:40:e0:f2:73:5a:17:68:b4:bd:47:b5:75:
         34:62:55:57:c5:e7:a2:8b:3a:08:b6:9a:6b:8a:40:1c:04:44:
         0a:f9:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:52:35 2024 by rpki-client on console-fra.rpki-client.org