Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa
File:                     3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa (raw, json)
Hash identifier:          Q+rCEeZ8aDTeyTbp2bAoDcffAo1UOrVwWbDaiTJ3VdY=
Subject key identifier:   EF:A0:32:16:67:B3:3A:42:15:51:B8:DB:01:1F:8A:07:59:22:B6:B8
Certificate issuer:       /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
Certificate serial:       60CA8D9659DC7D5BE8935F22AEC7960150E852DC
Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa
Signing time:             Tue 05 Mar 2024 18:05:14 +0000
ROA not before:           Tue 05 Mar 2024 18:00:14 +0000
ROA not after:            Tue 04 Mar 2025 18:05:14 +0000
asID:                     265773
IP address blocks:        131.196.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ca:8d:96:59:dc:7d:5b:e8:93:5f:22:ae:c7:96:01:50:e8:52:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
        Validity
            Not Before: Mar  5 18:00:14 2024 GMT
            Not After : Mar  4 18:05:14 2025 GMT
        Subject: CN=EFA0321667B33A421551B8DB011F8A075922B6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:86:71:b9:90:c8:23:11:1e:8f:f2:50:0d:
                    6d:76:80:44:04:55:51:de:12:fd:eb:f6:48:f4:cf:
                    96:3c:af:b7:87:ff:04:9a:e6:64:36:8f:79:71:f4:
                    7e:5e:5c:90:0a:e4:f0:30:2d:25:e5:71:9c:1b:a7:
                    92:6d:12:b2:00:a5:2f:24:ef:22:b4:cb:60:10:a8:
                    b1:66:9e:f2:9d:c5:74:e0:e8:f7:4c:83:f1:e0:be:
                    6f:8d:20:88:40:4f:ff:75:c3:f0:75:2e:8c:b7:8c:
                    4f:ac:24:49:9f:4e:51:bb:35:75:cc:b5:04:d5:c4:
                    fb:e3:dd:1e:9f:da:89:67:fe:1a:99:cd:81:b5:4d:
                    cb:10:25:99:cf:4d:0e:3a:da:96:b7:1c:8b:70:71:
                    9e:ce:cc:42:5f:23:cc:34:51:5d:96:97:3e:60:7f:
                    78:0b:d3:16:a2:a6:4a:fe:93:ac:a7:4b:c8:ab:3f:
                    ad:af:12:1d:c9:bf:8c:24:56:d4:f0:1f:57:06:93:
                    33:d2:af:29:b8:d4:47:1a:ed:cb:1f:58:f0:ae:4d:
                    b8:13:7c:8e:7f:5c:96:ee:60:85:0c:b3:0b:23:f3:
                    9b:99:3a:0a:7e:c6:e8:3c:71:9b:a2:ea:7b:45:b5:
                    d5:0e:53:56:27:f2:6c:4d:b0:1e:1b:5a:5f:40:6a:
                    48:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A0:32:16:67:B3:3A:42:15:51:B8:DB:01:1F:8A:07:59:22:B6:B8
            X509v3 Authority Key Identifier:
                keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323635373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:b5:87:dc:d6:d4:ab:73:9f:e0:d4:f1:34:9c:ad:26:9e:ba:
         d5:1f:5b:69:78:a9:0b:9d:e5:18:ca:98:ab:96:cc:f0:f8:67:
         f4:f0:a7:86:fc:b1:8a:16:e1:1f:72:87:ee:23:e3:cd:c1:ed:
         85:82:39:93:90:6d:23:4c:82:3a:8e:01:23:a0:d2:d5:e7:d8:
         7a:53:1e:69:77:ab:4c:ed:15:8c:74:b4:16:0a:70:85:25:60:
         f5:ef:67:8c:83:63:54:fb:26:3b:cc:fb:b8:d2:6c:a0:bc:12:
         cf:a9:c2:72:55:bf:77:73:e6:df:1e:87:de:7b:1a:b8:f3:8b:
         39:db:76:18:25:de:54:b6:05:4b:cf:dd:0e:55:85:a0:e2:ba:
         c3:bf:49:9c:ee:cd:5b:7b:7d:49:16:1b:3e:68:c6:55:2f:42:
         85:ba:a0:83:f1:79:26:8f:7d:40:e6:70:6a:f9:99:52:6a:ac:
         cb:1f:7f:cb:63:3f:2a:c2:d5:25:04:2d:b7:75:c4:be:8e:5a:
         73:32:aa:1d:03:4b:b8:fb:9b:47:7d:51:60:f0:fd:c7:e9:fb:
         91:2c:74:da:2e:02:c0:7f:da:f0:9b:b0:62:28:53:1b:cd:0b:
         a8:91:55:9b:10:66:25:4b:2b:1c:a0:6f:61:2c:67:94:23:33:
         2a:a8:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 14:38:09 2024 by rpki-client on console-fra.rpki-client.org