Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3133312e302f32342d3234203d3e203631343532.roa
File:                     3139302e3231302e3133312e302f32342d3234203d3e203631343532.roa (raw, json)
Hash identifier:          I0vDhhNyQaA4UKLM+3HiIOWRi0XPw4r4hE1MDCffpdE=
Subject key identifier:   34:8C:04:A6:C8:A8:51:F9:DE:C5:65:68:FF:38:E6:01:35:99:4E:64
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       5B6600A950B6734E7DA2C16DA971FEAE38D23AE0
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3133312e302f32342d3234203d3e203631343532.roa
Signing time:             Tue 05 Mar 2024 18:12:12 +0000
ROA not before:           Tue 05 Mar 2024 18:07:12 +0000
ROA not after:            Tue 04 Mar 2025 18:12:12 +0000
asID:                     61452
IP address blocks:        190.210.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:66:00:a9:50:b6:73:4e:7d:a2:c1:6d:a9:71:fe:ae:38:d2:3a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Mar  5 18:07:12 2024 GMT
            Not After : Mar  4 18:12:12 2025 GMT
        Subject: CN=348C04A6C8A851F9DEC56568FF38E60135994E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:b8:db:97:5f:a6:83:9d:35:28:70:b9:e0:
                    f9:64:02:12:9a:55:71:6d:d3:c2:23:23:02:c3:aa:
                    64:ac:ca:9c:af:03:15:b1:60:d4:74:ba:b3:1f:fd:
                    ee:67:67:e8:37:88:bf:75:d4:16:c5:56:af:81:7f:
                    58:b7:07:08:73:43:c9:17:e8:76:e0:d9:13:d7:40:
                    ba:40:25:52:1a:ab:d7:0e:12:f1:2e:8e:6c:05:b6:
                    26:1c:b0:57:d2:c1:12:8c:64:fd:40:60:b9:0d:03:
                    44:b4:d5:5f:df:f3:4a:a6:d4:26:99:68:7f:0a:81:
                    85:b2:d4:00:ba:ca:2c:87:2d:be:08:9a:bc:2f:d6:
                    ec:5c:7e:80:7b:84:b8:b5:e6:b6:15:b1:4d:f4:5d:
                    ff:54:74:1d:09:83:09:4e:44:94:7f:58:5e:9f:92:
                    fb:71:81:19:08:02:d2:5e:ee:89:1f:a0:04:22:19:
                    9b:d2:44:9f:a5:a7:1b:2d:de:b2:ae:af:6c:6c:b2:
                    43:32:42:46:da:1c:82:75:dd:0e:69:4e:e9:cd:0a:
                    a8:69:07:68:00:69:28:66:d5:7a:81:dc:2b:18:4d:
                    83:96:bd:20:61:af:0f:13:80:24:c5:47:1a:0f:05:
                    b0:60:af:99:c9:17:bd:6a:22:03:50:81:56:05:f5:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8C:04:A6:C8:A8:51:F9:DE:C5:65:68:FF:38:E6:01:35:99:4E:64
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3133312e302f32342d3234203d3e203631343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:d5:76:cc:4a:0d:74:d3:1f:ed:6c:c7:2f:52:37:94:fe:
         0d:3e:68:9a:b7:5e:6f:ab:c4:8b:21:80:49:fd:c9:b1:8e:e7:
         da:87:31:8c:d5:9e:b0:6e:2e:b3:0f:11:99:c5:67:4e:1b:4d:
         ec:83:77:2d:d0:18:b1:b5:1a:bf:18:df:40:99:38:1c:42:3a:
         ae:37:95:76:d7:a5:5e:3f:34:dc:71:db:03:41:70:bf:50:48:
         41:fd:22:af:26:bb:c4:3b:79:6b:8d:e3:67:b8:b6:7d:d3:e3:
         fd:00:1c:b0:1f:9d:ca:79:91:0e:7d:66:51:af:56:0a:cf:7e:
         9e:d2:fa:ab:ba:4c:30:0f:f9:7c:4e:3e:9e:ee:9d:1a:a5:e4:
         66:a0:f2:71:d2:7c:2e:1c:26:1c:77:32:e0:47:84:3c:f7:ab:
         b4:ae:cb:86:63:71:d1:a8:21:8c:04:31:fb:ad:59:04:0d:24:
         68:a2:1b:8d:1e:97:12:88:33:53:b0:6f:75:14:44:48:5a:7b:
         18:82:59:16:9a:3a:ef:eb:48:f6:dc:9e:33:69:d0:51:27:29:
         00:37:cb:fe:d0:38:c7:dd:e6:cc:bd:58:dd:18:c8:7f:29:a8:
         ab:44:e9:3f:16:63:93:c4:e9:d6:f6:21:85:07:f5:82:d8:b4:
         0c:5c:49:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org