Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133322e3235352e36382e302f32322d3232203d3e20323633373030.roa
File:                     3133322e3235352e36382e302f32322d3232203d3e20323633373030.roa (raw, json)
Hash identifier:          cQZ8UvPdwREeKQw30V4XzNsTPojJWnPWC3nXoNOkjeA=
Subject key identifier:   77:2A:71:5B:54:72:2F:58:C9:92:80:5D:51:61:89:97:03:66:60:31
Certificate issuer:       /CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
Certificate serial:       2D9C7132DDEB5CD532C3E6295E64C5C4D3A000AE
Authority key identifier: B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133322e3235352e36382e302f32322d3232203d3e20323633373030.roa
Signing time:             Tue 05 Mar 2024 18:21:31 +0000
ROA not before:           Tue 05 Mar 2024 18:16:31 +0000
ROA not after:            Tue 04 Mar 2025 18:21:31 +0000
asID:                     263700
IP address blocks:        132.255.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9c:71:32:dd:eb:5c:d5:32:c3:e6:29:5e:64:c5:c4:d3:a0:00:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
        Validity
            Not Before: Mar  5 18:16:31 2024 GMT
            Not After : Mar  4 18:21:31 2025 GMT
        Subject: CN=772A715B54722F58C992805D5161899703666031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:74:f6:4b:56:ce:4c:44:db:08:a5:ed:b8:84:
                    ee:45:32:8e:1b:7d:7a:1c:3a:21:95:f3:96:a3:21:
                    d1:92:94:89:8b:a4:b9:88:56:c1:8b:9b:9c:e7:b4:
                    cd:9b:f4:03:5f:5b:e5:81:b7:9a:1e:3a:a0:0f:49:
                    77:cd:02:47:ba:0e:e6:c4:3c:e3:6b:b1:77:f1:5d:
                    cc:0a:76:ac:4f:2c:f9:80:9f:f1:7d:22:bc:56:e0:
                    c0:18:3a:2b:80:24:9b:be:98:07:c3:0e:8e:25:98:
                    07:ac:25:fc:d0:2f:79:0c:6b:e0:89:29:ce:f3:d8:
                    c4:2f:77:6f:fd:7b:0e:02:4f:9d:bd:53:f1:18:26:
                    33:ab:40:c1:59:e2:ae:0c:d5:5d:2d:63:f8:3a:00:
                    63:45:6b:5b:35:2a:90:47:ae:4e:1d:9c:99:d4:61:
                    09:1e:fc:da:16:a7:ab:81:19:4a:5e:e5:e0:ca:3c:
                    1d:06:3b:54:ff:d5:4e:46:35:d9:a1:e7:d6:84:19:
                    ca:15:cf:b5:d8:27:af:cc:65:d5:c0:62:4f:c6:d4:
                    70:b7:50:1c:4f:b4:e3:38:12:31:f2:e9:cd:9c:81:
                    b3:6f:8a:22:6b:7a:f5:99:8a:0c:03:f2:38:ba:ee:
                    05:f6:75:8b:f8:ad:96:f3:42:89:4b:c5:d0:12:6b:
                    54:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2A:71:5B:54:72:2F:58:C9:92:80:5D:51:61:89:97:03:66:60:31
            X509v3 Authority Key Identifier:
                keyid:B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133322e3235352e36382e302f32322d3232203d3e20323633373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:af:12:d8:78:33:a4:44:d7:ee:3f:52:f2:ce:81:cd:d3:f9:
         07:8a:e9:cf:dc:1c:40:73:19:63:24:f3:29:d2:6f:0e:98:8b:
         3a:5a:4f:06:db:be:6c:0e:b3:4e:c2:42:87:d7:be:f7:3a:ae:
         8f:44:03:6d:e9:5b:95:7a:a5:4a:fa:9f:38:4a:d3:0a:e7:21:
         4a:05:35:6c:7b:8b:cc:91:8e:13:ce:16:42:6a:ee:73:ba:29:
         b0:39:f6:1d:70:cf:c9:91:df:6e:fa:27:80:af:35:df:86:94:
         a8:6d:3d:64:7e:97:c2:7d:f4:6e:f3:9d:13:7c:40:ee:42:d0:
         a4:44:a0:93:16:05:11:7d:68:d6:0a:41:55:67:1e:3e:c1:4c:
         48:b2:cd:35:09:ce:3d:ee:29:16:6a:7c:0c:17:19:c8:e8:2e:
         25:af:7e:5a:a3:98:19:e7:62:2b:d9:fc:56:78:c8:3c:fc:ea:
         a7:f6:e0:6e:28:f4:f0:60:0b:30:bb:08:c6:59:5a:52:ec:c9:
         2c:b3:fb:bc:1c:a3:78:74:e9:a4:7a:f9:f1:54:4f:fd:99:99:
         19:62:b8:c5:6d:cd:8a:d9:2d:e3:e3:2d:c6:5e:8f:00:5f:3e:
         7d:a4:a2:0f:7a:09:71:cf:a9:9a:d7:d6:b4:14:64:ce:e9:9a:
         1d:13:b6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:45 2024 by rpki-client on console-fra.rpki-client.org