Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/3133312e3139362e38322e302f32342d3234203d3e20323635383137.roa
File:                     3133312e3139362e38322e302f32342d3234203d3e20323635383137.roa (raw, json)
Hash identifier:          30CJU+/i0lXspLTUQyuKjR7m57aC0VFP2T53d2SEX3o=
Subject key identifier:   CE:E7:63:99:97:37:09:6B:7F:18:D2:E8:A3:56:27:20:92:44:C3:55
Certificate issuer:       /CN=D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F
Certificate serial:       3DE129372AC289D684836E1C54CDFAF6FA4DACDB
Authority key identifier: D8:4B:72:D9:DA:12:C7:2C:CE:6A:15:DD:F8:50:F1:CC:5D:63:12:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/3133312e3139362e38322e302f32342d3234203d3e20323635383137.roa
Signing time:             Tue 05 Mar 2024 17:56:00 +0000
ROA not before:           Tue 05 Mar 2024 17:51:00 +0000
ROA not after:            Tue 04 Mar 2025 17:56:00 +0000
asID:                     265817
IP address blocks:        131.196.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e1:29:37:2a:c2:89:d6:84:83:6e:1c:54:cd:fa:f6:fa:4d:ac:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F
        Validity
            Not Before: Mar  5 17:51:00 2024 GMT
            Not After : Mar  4 17:56:00 2025 GMT
        Subject: CN=CEE763999737096B7F18D2E8A35627209244C355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:41:2d:a7:42:05:99:13:12:ba:d9:e5:b2:
                    a0:46:f3:11:2c:64:ef:73:8d:96:5c:ba:3a:69:46:
                    8f:31:e3:a6:2b:f9:86:ad:e0:60:b9:1e:13:5e:fa:
                    4f:8e:3d:20:eb:ae:a7:db:d8:7f:85:25:1e:3c:c7:
                    e4:fc:db:35:52:12:e5:99:02:c8:db:e1:0c:2f:94:
                    72:4e:10:b6:5e:ea:cb:f9:0a:ab:0a:2f:92:fa:f0:
                    1b:76:f9:6a:fe:b2:0f:b8:1f:49:b6:5d:36:4b:9c:
                    5c:f2:a8:e1:c9:35:79:96:85:c2:0b:73:4d:91:cd:
                    78:ce:26:93:09:91:a0:9c:74:59:92:0f:9f:9a:b2:
                    a1:45:27:38:58:de:8a:8a:48:85:47:3e:fc:72:13:
                    53:1c:5a:c9:8d:38:95:2d:cb:bc:1f:d3:f7:b5:f2:
                    01:18:f9:63:69:92:0d:ab:65:2f:17:46:32:57:54:
                    e8:c1:dd:e1:22:66:54:f2:2c:d2:eb:05:41:62:2d:
                    e3:8e:06:3e:9f:e1:4d:b8:a6:15:f5:9a:cb:a3:aa:
                    fd:40:9b:35:8c:7c:9a:c7:75:4d:95:6a:10:7a:c6:
                    95:f6:1b:4f:6b:d4:dc:72:c5:2a:65:4f:98:ac:38:
                    69:c2:cc:8d:9c:6d:e8:73:93:23:97:46:fc:b4:20:
                    67:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E7:63:99:97:37:09:6B:7F:18:D2:E8:A3:56:27:20:92:44:C3:55
            X509v3 Authority Key Identifier:
                keyid:D8:4B:72:D9:DA:12:C7:2C:CE:6A:15:DD:F8:50:F1:CC:5D:63:12:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/3133312e3139362e38322e302f32342d3234203d3e20323635383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:e4:6a:68:b4:82:7c:d9:f0:59:97:d6:45:98:2b:47:eb:4e:
         66:c2:4c:36:f3:70:67:44:f1:3b:00:c0:95:fe:9a:c1:26:a6:
         6f:4a:6a:15:a7:f6:b9:15:11:5c:6b:07:25:a2:10:3a:60:e1:
         c1:10:8d:3d:8f:4f:cf:bf:fd:5f:62:7a:e0:fa:61:6a:cf:ca:
         5e:2b:3b:7f:59:64:25:78:0f:34:e0:db:bd:ef:76:16:17:f4:
         fc:92:b4:8e:87:d4:a1:16:25:57:eb:ab:d9:b9:21:94:91:41:
         f9:89:dd:d8:c8:7b:bc:42:74:f5:00:d8:52:c8:79:c6:6f:dd:
         26:06:94:a9:ef:2f:0d:5d:ae:8c:a4:aa:b2:9a:2d:0e:9b:d4:
         12:dc:bc:90:6b:e1:ef:67:98:c5:c0:1d:3e:5f:7a:1d:e7:57:
         80:8f:6c:c4:2c:e4:eb:50:1f:4e:ba:14:ed:47:9e:17:1c:ed:
         73:27:71:c7:7f:14:8e:60:5d:3e:fd:74:ba:b8:6e:4e:c6:54:
         5e:08:e0:bb:e9:fa:ec:05:73:8c:f8:91:43:1c:7b:1e:d1:3f:
         4c:9c:50:01:b2:28:ab:8f:a9:0c:00:46:1d:1d:51:bd:cb:5d:
         cb:cf:e2:ee:6b:b1:64:ca:7f:24:b4:3e:23:dc:d4:ce:8e:10:
         ca:38:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:55 2024 by rpki-client on console-fra.rpki-client.org