Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/3133312e3232312e33322e302f32322d3234203d3e20323633373032.roa
File:                     3133312e3232312e33322e302f32322d3234203d3e20323633373032.roa (raw, json)
Hash identifier:          JbFUtHeqYUSjSsa0Kdai2SzGIvZeXFiTQ81jVIP5lJI=
Subject key identifier:   D3:0F:12:B2:B8:D0:60:6E:AB:42:99:6C:B7:12:71:25:7B:29:17:C1
Certificate issuer:       /CN=6E90D630525F8D2B3768945D2D18476B244030E8
Certificate serial:       7689EADD345430016784B6A99D18D208DD931F3B
Authority key identifier: 6E:90:D6:30:52:5F:8D:2B:37:68:94:5D:2D:18:47:6B:24:40:30:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/3133312e3232312e33322e302f32322d3234203d3e20323633373032.roa
Signing time:             Tue 05 Mar 2024 17:57:12 +0000
ROA not before:           Tue 05 Mar 2024 17:52:12 +0000
ROA not after:            Tue 04 Mar 2025 17:57:12 +0000
asID:                     263702
IP address blocks:        131.221.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:89:ea:dd:34:54:30:01:67:84:b6:a9:9d:18:d2:08:dd:93:1f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E90D630525F8D2B3768945D2D18476B244030E8
        Validity
            Not Before: Mar  5 17:52:12 2024 GMT
            Not After : Mar  4 17:57:12 2025 GMT
        Subject: CN=D30F12B2B8D0606EAB42996CB71271257B2917C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:f3:6e:6d:4c:c3:20:59:2e:57:c0:db:53:
                    9a:f0:00:73:0c:0a:10:e2:7b:76:60:e9:89:b3:cc:
                    64:d7:3e:8c:69:66:83:47:ea:5f:c6:fd:03:2c:8a:
                    f7:41:77:db:78:a5:e1:aa:21:bb:37:66:3c:03:0a:
                    d6:4c:48:8e:a1:27:4e:4c:c9:99:88:b0:f4:ae:0c:
                    1f:ba:dd:51:7b:90:5a:fe:26:ff:c9:f7:5f:b0:d3:
                    d5:10:d6:dc:6d:1f:70:f6:95:75:f8:79:ef:a3:39:
                    eb:8b:fa:45:5b:fb:8b:ba:59:5c:12:12:c5:1f:a4:
                    9f:7f:c1:16:3c:71:5b:c9:8f:67:30:ec:18:29:14:
                    b9:29:38:e8:61:d3:7a:c5:22:5a:86:2b:34:4b:6e:
                    ea:11:54:1c:0b:3a:cb:46:79:56:98:1f:66:2a:33:
                    6a:01:79:3d:3e:bc:cb:6c:ee:e5:c8:e4:2b:8a:d4:
                    5b:75:0f:cd:0a:78:1c:15:6f:e4:bd:ef:04:f7:9e:
                    4d:11:3c:6b:83:ad:a9:9b:fe:fe:c6:51:ba:5b:b5:
                    8f:3d:be:d4:e4:dc:d0:fd:bd:57:94:9c:65:30:85:
                    ae:12:ff:7e:c6:75:6d:6a:54:f3:67:73:22:20:d8:
                    e2:32:14:92:5c:74:00:3e:8b:da:85:04:16:65:7f:
                    b2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0F:12:B2:B8:D0:60:6E:AB:42:99:6C:B7:12:71:25:7B:29:17:C1
            X509v3 Authority Key Identifier:
                keyid:6E:90:D6:30:52:5F:8D:2B:37:68:94:5D:2D:18:47:6B:24:40:30:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/3133312e3232312e33322e302f32322d3234203d3e20323633373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:aa:be:c1:da:1b:45:26:82:f7:1e:85:34:21:9d:e3:f9:79:
         f6:b5:df:ad:02:4a:fa:0d:35:7f:86:a0:fc:fa:d6:44:d7:9c:
         ba:94:a6:c8:90:2a:e4:76:08:6d:e8:c9:29:6e:65:80:87:1b:
         69:de:23:ac:cc:bd:60:ca:ed:80:80:f2:5d:d0:03:94:0c:ec:
         66:82:90:0e:22:49:59:c3:2e:4a:5f:ec:5f:e9:46:80:a5:65:
         b3:e4:e8:17:56:1e:6e:63:48:dd:58:30:74:e6:22:db:4f:dc:
         34:7b:07:c1:6c:68:ed:14:37:a1:ac:d8:09:7c:a8:d9:86:6d:
         c1:4a:ef:6a:d4:8c:5f:59:0d:37:d9:6d:32:0a:75:c7:8d:09:
         49:26:11:03:71:8a:db:4a:17:58:ff:a1:56:6d:1e:10:0a:ef:
         e3:18:a2:67:9c:57:93:c6:db:cb:31:bc:b1:f2:fc:f3:e2:86:
         58:d6:ab:30:f6:3b:95:72:67:7d:26:7d:57:5c:17:e6:b9:5e:
         78:f5:2e:4e:d7:b2:20:a8:d5:76:33:7d:97:cd:8a:f2:39:18:
         7c:f5:96:a9:a4:91:57:7b:3b:b5:47:1c:b8:4f:16:c9:8f:65:
         10:0e:30:5f:7e:13:f0:2f:2e:6e:fa:dc:c7:f8:d0:be:3a:97:
         be:0b:f3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:33:26 2024 by rpki-client on console-fra.rpki-client.org