Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234332e302f32342d3234203d3e203532333239.roa
File:                     3133312e37322e3234332e302f32342d3234203d3e203532333239.roa (raw, json)
Hash identifier:          wTqVf5h1IfFfYsC+k2RSdc3vdck2DCUcrmzMvhVBgwo=
Subject key identifier:   51:DD:B9:54:40:60:B3:18:3A:97:85:2D:F8:09:54:C3:DC:6D:A6:82
Certificate issuer:       /CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7
Certificate serial:       19293037ABC73C656390FDDCF14716EDB2FE8F64
Authority key identifier: EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234332e302f32342d3234203d3e203532333239.roa
Signing time:             Tue 05 Mar 2024 17:56:55 +0000
ROA not before:           Tue 05 Mar 2024 17:51:55 +0000
ROA not after:            Tue 04 Mar 2025 17:56:55 +0000
asID:                     52329
IP address blocks:        131.72.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:29:30:37:ab:c7:3c:65:63:90:fd:dc:f1:47:16:ed:b2:fe:8f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7
        Validity
            Not Before: Mar  5 17:51:55 2024 GMT
            Not After : Mar  4 17:56:55 2025 GMT
        Subject: CN=51DDB9544060B3183A97852DF80954C3DC6DA682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:e7:17:27:6c:65:03:e9:ef:48:16:65:0a:
                    18:ca:b5:e7:12:8b:7a:4c:4f:7f:4e:d2:55:27:6f:
                    d0:f7:c1:a1:93:50:f5:f9:1c:af:dd:cd:2d:da:10:
                    e4:97:8e:40:78:0e:25:de:f0:53:d3:d6:02:c2:6f:
                    e5:2a:de:49:0b:80:f7:9e:85:17:c8:ed:be:eb:fb:
                    e4:d4:24:1d:3d:e1:71:32:b5:eb:1d:4d:f4:11:db:
                    ab:b7:e7:47:08:ec:f0:d8:13:da:d3:84:34:9f:96:
                    a3:37:20:de:7e:88:d1:40:4c:ee:8f:9d:f2:7a:54:
                    04:0d:7b:52:87:4c:d0:a4:48:26:b2:86:e1:56:e1:
                    6b:69:4d:51:4f:54:81:88:1e:7f:f0:ef:79:42:90:
                    f7:cd:f1:95:ac:45:fc:3b:b2:ee:5c:1a:ab:98:e5:
                    1d:07:1a:62:86:a7:bb:08:b1:b5:fd:b5:24:e7:26:
                    d0:84:2a:3b:0a:90:80:0f:16:6c:b0:24:ef:9f:d1:
                    ee:ab:fa:ca:3f:a4:8a:ff:19:43:1e:8e:83:a1:87:
                    29:85:3c:fa:62:6b:89:84:f7:66:2c:fc:b5:d1:46:
                    38:db:88:b1:da:99:a9:f7:aa:ac:58:05:3f:e6:6c:
                    d6:20:c7:a4:ac:df:73:64:cd:e1:46:17:66:29:45:
                    c7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DD:B9:54:40:60:B3:18:3A:97:85:2D:F8:09:54:C3:DC:6D:A6:82
            X509v3 Authority Key Identifier:
                keyid:EC:86:9B:AF:B5:A3:88:2F:B7:CB:6D:7F:22:FD:36:68:59:61:C5:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC869BAFB5A3882FB7CB6D7F22FD36685961C5B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C52E2D250F5BAABEF264E9E0A52FF71E8C9ACBDC87835A5BFBC5AFEE689C71EA/0/3133312e37322e3234332e302f32342d3234203d3e203532333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c6:c1:bf:33:e1:20:11:4a:b5:f8:27:18:84:51:28:a5:22:
         81:36:79:ca:36:a3:96:ab:3e:10:8d:0e:54:00:15:48:ef:fe:
         f5:01:ed:79:86:80:40:52:98:5a:13:b2:a2:c6:c2:b6:4a:3d:
         42:de:37:67:80:cd:f1:5d:11:37:6c:73:be:f2:a8:e9:41:2e:
         88:e6:76:bc:80:34:89:a5:b0:39:22:67:a5:55:7f:80:38:44:
         fd:20:ab:61:59:cf:df:67:d9:cd:a9:27:8e:aa:bc:e6:69:9a:
         71:a0:d9:53:14:8d:87:ad:d2:e0:61:03:42:f8:4b:24:96:41:
         9d:15:7e:b0:80:70:a2:40:40:3f:ed:8f:ac:a7:5d:a9:3e:7f:
         7a:45:0a:49:7a:64:50:23:db:88:80:4c:90:dd:a2:e8:7b:ff:
         60:2e:b4:f7:7f:5b:02:83:ae:0d:f8:9f:eb:dc:b9:20:d4:25:
         2a:bd:f2:23:0b:e0:7a:69:ea:e5:f5:39:7a:4a:f9:fc:73:69:
         9d:30:ec:99:a5:6b:63:cf:df:bb:f8:76:5e:cf:dc:02:5b:e4:
         f0:2d:ea:e6:92:84:d3:5a:83:d7:2f:b0:ac:e2:63:a7:dc:69:
         b5:7a:15:7e:c5:f9:57:57:76:09:32:6e:b9:95:ac:0f:64:6e:
         a3:11:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:28:47 2024 by rpki-client on console-ams.rpki-client.org