Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa
File:                     3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa (raw, json)
Hash identifier:          lVHMpu3awJFlinFu1g7zkjjW5Ap3DkvxEBHBqjOmMGU=
Subject key identifier:   35:08:BE:E7:1F:87:9D:05:0C:ED:FB:FA:76:7D:6A:04:D2:E2:31:0E
Certificate issuer:       /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
Certificate serial:       3E8E53F3F61E6054B912F0D9B29AF48C80EE2339
Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa
Signing time:             Tue 05 Mar 2024 18:05:14 +0000
ROA not before:           Tue 05 Mar 2024 18:00:14 +0000
ROA not after:            Tue 04 Mar 2025 18:05:14 +0000
asID:                     263766
IP address blocks:        131.196.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8e:53:f3:f6:1e:60:54:b9:12:f0:d9:b2:9a:f4:8c:80:ee:23:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
        Validity
            Not Before: Mar  5 18:00:14 2024 GMT
            Not After : Mar  4 18:05:14 2025 GMT
        Subject: CN=3508BEE71F879D050CEDFBFA767D6A04D2E2310E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:66:e7:80:bf:cb:f3:3f:5c:20:04:cd:37:8d:
                    72:a5:19:64:8c:d3:81:10:ca:61:0b:d5:76:82:7b:
                    10:ad:59:ce:96:ce:07:c2:97:b1:bb:e7:79:c1:8f:
                    a0:58:59:7c:ef:c1:90:fc:92:67:72:6f:c2:30:1d:
                    82:fc:39:7e:5a:32:da:5b:04:54:bc:b2:d5:54:bd:
                    fa:46:03:44:08:e1:26:fa:95:56:8a:1b:b0:22:91:
                    9c:81:8a:14:5e:29:4e:1c:09:9f:49:81:53:64:ec:
                    1a:23:6b:fa:93:84:f9:4e:9e:66:eb:bc:3b:82:5b:
                    49:04:80:71:d7:85:a8:d3:a5:04:50:18:4d:f3:6d:
                    8e:42:d2:aa:34:1f:ee:46:6a:0b:8a:f6:53:e5:c2:
                    59:49:37:63:29:7b:68:fd:3b:0f:7f:9d:18:d2:eb:
                    5f:96:9e:7d:0c:e7:b5:c1:70:47:04:b2:73:df:e2:
                    72:9b:b5:53:98:40:17:71:1d:78:4c:66:07:4a:ca:
                    02:6b:56:3e:55:20:41:df:d3:1f:f4:29:63:40:d0:
                    1b:e6:15:51:2d:3e:34:40:a0:be:25:af:7e:0f:cd:
                    4d:04:f2:e6:71:72:72:62:1b:64:13:5a:d6:ee:4f:
                    46:98:61:92:db:fd:1e:ef:00:4a:c7:7d:4f:38:22:
                    93:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:08:BE:E7:1F:87:9D:05:0C:ED:FB:FA:76:7D:6A:04:D2:E2:31:0E
            X509v3 Authority Key Identifier:
                keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323633373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:13:3d:43:6f:c5:7a:cc:3d:e2:ea:d0:7a:d6:cb:ef:9a:
         83:b3:a5:05:54:6b:d1:a7:79:85:73:cf:e1:46:84:fd:09:98:
         e9:c1:ee:e2:fc:32:b0:38:5c:ac:d3:ef:fe:08:62:16:ab:48:
         69:cf:11:59:ab:8e:4d:fd:53:72:c8:14:79:ce:71:95:0d:d3:
         b1:3a:d2:d0:62:1d:8f:06:ad:b0:4d:3d:4e:1b:1c:be:83:fc:
         12:b5:20:bd:02:3a:8a:95:24:34:56:6e:6c:cb:16:65:41:04:
         84:dd:6f:19:5e:c3:0d:2c:d7:09:9f:9a:d4:7e:c6:c0:cd:f6:
         f3:65:79:c6:ed:f2:57:d7:56:d7:1d:53:31:44:f7:c6:3b:68:
         c2:52:3e:fd:41:26:99:47:be:c7:6c:3e:78:79:1d:85:b0:31:
         b6:df:1f:a0:9d:05:34:03:0e:8e:49:40:37:82:db:bb:64:da:
         86:2f:40:92:30:c7:bd:7d:4b:2d:19:e2:11:ff:ed:92:6a:79:
         4c:89:ef:0e:6a:a1:64:25:a9:54:90:02:87:38:a4:c5:47:0b:
         0c:c7:56:9b:8c:b2:70:bc:0c:12:77:79:62:66:fe:db:ee:fa:
         51:86:e8:9a:64:fd:04:3a:d7:98:cd:71:97:00:04:c2:be:9c:
         ab:07:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org