Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/3133312e3139362e36302e302f32322d3234203d3e20323730303136.roa
File:                     3133312e3139362e36302e302f32322d3234203d3e20323730303136.roa (raw, json)
Hash identifier:          dmgbPuSKxj6VpLgJh32sUiWUXtKWUF1eTPUjl2q8LRE=
Subject key identifier:   D1:64:45:2E:FE:2F:A3:C1:C1:E7:05:C7:9D:E9:05:06:3A:E3:18:9A
Certificate issuer:       /CN=F4BCD849C61EEEDA3F9A792A027FD58727547CCD
Certificate serial:       3F7D4FFF4A2CD05CA4D5A3DE96E52AA5A41C9A16
Authority key identifier: F4:BC:D8:49:C6:1E:EE:DA:3F:9A:79:2A:02:7F:D5:87:27:54:7C:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/3133312e3139362e36302e302f32322d3234203d3e20323730303136.roa
Signing time:             Tue 05 Mar 2024 17:58:35 +0000
ROA not before:           Tue 05 Mar 2024 17:53:35 +0000
ROA not after:            Tue 04 Mar 2025 17:58:35 +0000
asID:                     270016
IP address blocks:        131.196.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7d:4f:ff:4a:2c:d0:5c:a4:d5:a3:de:96:e5:2a:a5:a4:1c:9a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4BCD849C61EEEDA3F9A792A027FD58727547CCD
        Validity
            Not Before: Mar  5 17:53:35 2024 GMT
            Not After : Mar  4 17:58:35 2025 GMT
        Subject: CN=D164452EFE2FA3C1C1E705C79DE905063AE3189A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f7:89:d9:53:40:53:a7:00:10:0d:c4:dd:14:
                    d2:5a:d6:40:99:0e:ab:36:86:4a:ba:a6:27:83:dc:
                    c8:4f:7d:f6:06:5b:87:f1:28:6b:05:fe:9f:c2:e7:
                    e3:63:61:d8:0f:8b:9e:ea:88:9f:50:5c:f5:62:ed:
                    84:16:c3:45:3e:84:5a:9b:ed:74:c5:63:34:72:26:
                    b4:ca:b4:49:ad:dc:ca:2a:c5:ce:08:e2:b7:ec:7d:
                    6a:c8:45:83:bd:c4:27:49:2f:dc:87:6d:a0:1c:fe:
                    22:ab:bc:d8:4e:c9:40:aa:43:87:d8:c5:be:e5:cf:
                    f0:72:90:cc:2f:29:72:66:41:6f:54:b4:dc:66:53:
                    65:70:a8:29:b8:eb:1e:d7:e6:d9:37:a0:6d:0e:7e:
                    42:d6:8e:f3:ca:77:6a:8e:42:16:0a:a4:16:8f:87:
                    40:63:19:5f:ac:1e:be:38:91:12:24:0e:4a:0f:f8:
                    a9:7e:47:54:1c:8f:d7:9e:53:88:e4:91:7a:2f:b8:
                    a0:b4:4e:7f:15:8c:78:3e:d3:bd:3f:8b:a6:f0:4f:
                    02:86:c2:61:ff:0a:bf:5c:f8:ab:25:61:63:1e:1e:
                    e4:d7:fc:45:27:9d:1c:69:39:cc:82:2d:e1:87:c0:
                    1f:7b:c9:78:d5:e7:91:eb:68:41:8c:1c:dc:38:dd:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:64:45:2E:FE:2F:A3:C1:C1:E7:05:C7:9D:E9:05:06:3A:E3:18:9A
            X509v3 Authority Key Identifier:
                keyid:F4:BC:D8:49:C6:1E:EE:DA:3F:9A:79:2A:02:7F:D5:87:27:54:7C:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/3133312e3139362e36302e302f32322d3234203d3e20323730303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:d9:91:54:2b:8d:d1:a4:37:5f:f8:6c:4c:bd:58:b8:68:8f:
         3e:86:6c:89:0b:31:55:4e:80:f1:af:90:90:92:57:11:12:26:
         07:50:a4:20:0f:75:56:64:89:6b:81:c7:ff:72:8b:a0:3d:10:
         1e:ab:ce:6d:ef:7e:2d:83:53:87:af:4b:e2:a3:43:b0:8e:68:
         46:7d:91:c0:61:bd:8a:0f:8d:13:d1:73:98:93:54:33:7b:2f:
         3b:06:dd:c3:0d:a1:5a:f1:23:90:51:e5:17:95:c5:62:d0:de:
         bd:be:d1:b5:19:88:80:2c:34:5c:45:80:0a:fc:ea:ee:fc:2b:
         a2:99:fd:6c:db:30:60:e9:08:3d:3d:ff:5d:83:8d:05:3a:6b:
         70:4a:12:1b:7a:a1:41:a7:2e:72:68:0d:aa:dc:5d:77:1e:48:
         47:80:11:fc:fb:24:8b:b4:88:9d:d5:7d:3c:e1:f7:06:fd:1a:
         5c:76:30:64:e6:53:73:d9:f4:d6:a5:fe:7e:ad:d1:04:cb:a1:
         68:af:6a:a0:9c:60:95:7c:68:da:3b:b6:be:67:0c:6a:47:4e:
         2d:bd:65:3f:57:17:e3:27:47:07:10:5d:3a:5b:f5:28:3e:e0:
         dd:6c:6b:cb:81:cc:8a:0a:f1:d8:ea:aa:74:4e:34:e3:cc:06:
         8f:a1:67:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org