Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa
File:                     3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa (raw, json)
Hash identifier:          DqRYAOSaxV2p6gMQB578PawbF4Bler+gOzakmDafFK4=
Subject key identifier:   38:1D:86:8F:28:53:6D:E4:A3:D4:A4:0D:5D:FC:0C:18:CB:A5:C3:4B
Certificate issuer:       /CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
Certificate serial:       1B3A2A61BAE912CE5BA210965A2D1BCBFAA57058
Authority key identifier: 98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa
Signing time:             Tue 05 Mar 2024 18:05:14 +0000
ROA not before:           Tue 05 Mar 2024 18:00:14 +0000
ROA not after:            Tue 04 Mar 2025 18:05:14 +0000
asID:                     271970
IP address blocks:        131.196.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3a:2a:61:ba:e9:12:ce:5b:a2:10:96:5a:2d:1b:cb:fa:a5:70:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5
        Validity
            Not Before: Mar  5 18:00:14 2024 GMT
            Not After : Mar  4 18:05:14 2025 GMT
        Subject: CN=381D868F28536DE4A3D4A40D5DFC0C18CBA5C34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:0f:55:b5:4d:18:53:9b:55:00:15:c0:9c:
                    23:fd:bf:d2:32:02:65:21:07:f3:5f:89:67:f5:c1:
                    27:1f:0f:48:25:83:16:79:72:c9:e5:54:84:5a:78:
                    b1:60:ea:70:5c:a6:64:6b:98:85:c3:2e:ed:95:29:
                    1e:d9:33:f1:e9:50:47:13:90:30:5a:79:b8:0b:c2:
                    44:07:9d:ce:20:c8:0a:61:07:0e:18:5b:f9:75:09:
                    50:b9:c7:5d:27:77:37:69:c0:cd:30:a5:fd:2a:56:
                    6a:0d:89:01:52:3a:79:e2:52:7e:e4:ec:71:b8:11:
                    4c:2e:1c:9e:fe:0a:90:04:68:d5:67:ca:c4:77:68:
                    c8:e4:7f:82:2b:d1:73:eb:e6:e9:26:af:08:62:77:
                    2f:d5:e7:f8:25:31:c9:cb:46:55:e2:85:e4:e4:ab:
                    a7:0c:01:09:92:f5:f4:3c:91:49:00:05:c7:70:cb:
                    e3:c1:44:5f:fc:44:25:a2:16:02:0b:37:c8:0d:71:
                    26:c0:d8:d4:b1:71:45:0a:d9:9b:66:f1:67:8f:48:
                    81:1f:dd:60:d7:4d:d6:f0:2c:fb:1c:46:1d:c6:17:
                    6e:1d:a9:b4:4a:bd:0f:5a:a5:a1:eb:10:19:f1:46:
                    c2:40:10:ff:e4:90:41:ff:62:00:2f:50:e9:7b:1c:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1D:86:8F:28:53:6D:E4:A3:D4:A4:0D:5D:FC:0C:18:CB:A5:C3:4B
            X509v3 Authority Key Identifier:
                keyid:98:9A:FD:3A:91:25:DD:C8:8A:DC:E2:B6:DF:BC:63:7E:38:A7:11:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/989AFD3A9125DDC88ADCE2B6DFBC637E38A711F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB056300F70344FEF06FCE9406450282937001EA1C73BFC43B0A0465790A5DE4/0/3133312e3139362e33362e302f32322d3234203d3e20323731393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:04:db:07:1c:a1:98:7d:f2:26:78:3f:f8:4e:65:eb:2a:8f:
         f9:fb:e0:86:e9:4e:bf:6d:05:cd:7d:d1:2b:be:9a:89:ec:a8:
         01:61:37:72:af:c4:3e:f2:18:6e:4b:4f:51:dc:08:3b:67:e9:
         cf:94:39:f2:24:bb:0a:ce:76:48:0e:94:da:4e:ff:31:b7:15:
         dd:a8:18:05:b3:c5:c6:53:bf:a6:a9:9b:87:48:80:c1:2a:57:
         22:5b:fc:58:4b:6e:f1:d5:a7:d3:8a:55:d3:f0:b1:32:03:76:
         95:f7:c8:2f:61:9a:78:78:03:e0:2e:71:ff:65:d4:c8:9c:f4:
         b4:84:96:c8:93:60:b8:1a:aa:35:10:bc:c6:5e:fa:cc:86:d3:
         7e:24:d3:42:1a:62:e6:9e:60:a4:37:40:47:fa:29:fc:c4:e1:
         05:f8:6e:16:cb:cb:15:a4:cd:19:99:88:05:f7:4c:f4:aa:58:
         02:9e:0f:e1:62:ed:5f:9e:f0:e9:8e:18:14:6b:04:b0:d5:1b:
         f2:32:04:7d:7e:e5:86:4a:60:a0:6a:a1:a1:0c:d4:c9:d9:2a:
         f2:83:8e:a8:d2:94:36:72:4c:7e:e2:02:e3:a1:9d:f8:88:e9:
         5e:80:b3:7d:95:f4:02:3c:26:d8:eb:4c:80:47:91:41:bb:2c:
         c6:99:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 00:50:38 2024 by rpki-client on console-fra.rpki-client.org