Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/3133312e3130302e3130302e302f32322d3234203d3e203237393430.roa
File:                     3133312e3130302e3130302e302f32322d3234203d3e203237393430.roa (raw, json)
Hash identifier:          GI6211ZDryHq81ibMipcD1qPX2MmyNehfpXdAFKqyqQ=
Subject key identifier:   99:61:1B:16:08:4A:21:00:7C:11:7C:D0:A3:1A:0D:84:5C:3D:B0:B8
Certificate issuer:       /CN=949C12357BC4AD5FFBEC5FBB36FE61882639A5B0
Certificate serial:       79A410CE7562556C6784B9D0FDA191B805D5F6A3
Authority key identifier: 94:9C:12:35:7B:C4:AD:5F:FB:EC:5F:BB:36:FE:61:88:26:39:A5:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/3133312e3130302e3130302e302f32322d3234203d3e203237393430.roa
Signing time:             Tue 05 Mar 2024 17:53:31 +0000
ROA not before:           Tue 05 Mar 2024 17:48:31 +0000
ROA not after:            Tue 04 Mar 2025 17:53:31 +0000
asID:                     27940
IP address blocks:        131.100.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a4:10:ce:75:62:55:6c:67:84:b9:d0:fd:a1:91:b8:05:d5:f6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949C12357BC4AD5FFBEC5FBB36FE61882639A5B0
        Validity
            Not Before: Mar  5 17:48:31 2024 GMT
            Not After : Mar  4 17:53:31 2025 GMT
        Subject: CN=99611B16084A21007C117CD0A31A0D845C3DB0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:dc:00:e6:a6:0f:c7:ff:32:91:6a:bf:0b:
                    48:c8:82:72:79:ca:7f:22:68:32:54:9a:af:2c:4d:
                    08:1d:9c:2b:a0:be:1c:3f:73:dc:61:c9:42:65:ca:
                    01:da:59:96:62:ea:f7:6b:ac:1c:b7:19:74:ea:60:
                    61:5d:15:4f:1a:65:af:43:aa:22:0b:fa:64:6d:f8:
                    67:80:d0:fc:f5:33:27:81:f6:c3:a4:05:a8:f5:59:
                    ae:58:d7:0a:1f:de:30:ce:2f:85:d3:f0:50:1f:6b:
                    10:50:7b:98:7b:5c:12:c2:b1:c5:51:5c:48:d3:57:
                    79:a7:ab:2a:e7:f8:17:9f:bf:17:82:af:26:41:15:
                    69:1e:c9:f4:89:2c:c0:45:10:d9:d6:bb:c0:cb:5a:
                    11:08:98:4f:74:d2:03:41:c5:c1:45:f5:32:64:83:
                    67:4b:06:81:5b:fa:8f:01:2f:69:6e:17:90:ce:a8:
                    49:cc:d2:e7:70:9d:ea:8c:72:62:7b:35:55:1f:7e:
                    eb:75:79:64:e4:c3:84:db:7b:96:97:cd:5d:9d:69:
                    ce:b6:5f:da:e9:38:11:bb:ee:2f:50:e7:39:25:38:
                    8b:e5:b8:f0:f0:2d:08:bb:2a:9a:51:dd:76:a3:92:
                    6e:12:a6:26:65:37:16:08:e5:d8:ab:89:3c:74:93:
                    17:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:61:1B:16:08:4A:21:00:7C:11:7C:D0:A3:1A:0D:84:5C:3D:B0:B8
            X509v3 Authority Key Identifier:
                keyid:94:9C:12:35:7B:C4:AD:5F:FB:EC:5F:BB:36:FE:61:88:26:39:A5:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/949C12357BC4AD5FFBEC5FBB36FE61882639A5B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7A6C5F49DA78C1E4B3DC1AB2D7DD45E7436AA7F3AC76A83E49F3AB33917598F/0/3133312e3130302e3130302e302f32322d3234203d3e203237393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:a5:b2:4f:d8:80:6b:6a:d0:de:0c:f0:d2:f5:ac:64:b2:e7:
         89:13:86:c3:33:2d:fb:ad:bb:5f:4c:0b:a8:46:8a:ef:53:f1:
         53:e2:07:6e:fb:41:ba:3d:8f:8f:2f:be:cf:63:e6:19:e9:be:
         d5:4c:9c:8a:ac:e9:d4:25:4d:94:d4:58:60:61:01:bf:1f:f6:
         ed:e5:74:25:cb:75:84:29:bd:71:1d:05:8e:7b:d3:bb:f8:9f:
         40:d1:6e:4b:c5:9e:1b:ee:d9:b5:d5:e3:dc:7e:f9:45:8e:66:
         1b:18:3d:df:a1:1e:df:61:77:6d:6f:85:d6:1e:5a:b0:80:47:
         db:fe:88:13:3e:0c:24:31:3c:de:1c:d7:e5:6c:10:d2:d8:0f:
         13:77:ae:d3:24:ca:39:b1:6e:0c:b6:a7:7d:9b:c2:70:b1:49:
         2c:fa:a4:a5:39:2c:5d:bb:aa:b5:52:47:fa:78:f2:14:80:f3:
         47:11:ba:65:4b:0f:14:ad:f7:eb:03:2c:dd:95:81:e8:f1:bc:
         40:d0:3b:f1:6c:e4:25:ee:48:83:27:fc:00:1b:46:91:6a:f7:
         50:77:06:4b:82:73:ce:5c:88:ab:bd:eb:7c:30:8e:d8:9f:49:
         5b:fa:03:81:70:a6:d4:b2:90:cd:ff:3b:97:48:f2:c5:74:db:
         25:af:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:04 2024 by rpki-client on console-ams.rpki-client.org