Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3133312e3139362e3234382e302f32322d3234203d3e20323635353234.roa
File:                     3133312e3139362e3234382e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          flbsE07+OKn1phtyLBx4+u9u1MuMUsqlWP/DJN7CzNQ=
Subject key identifier:   72:FB:44:EF:20:1C:BE:9E:2F:08:F2:21:F3:FE:E1:DB:B0:A7:2E:3B
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       0F01B682AD45B77B3FB8D136F09F944784537BE3
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3133312e3139362e3234382e302f32322d3234203d3e20323635353234.roa
Signing time:             Mon 11 Mar 2024 18:55:00 +0000
ROA not before:           Mon 11 Mar 2024 18:50:00 +0000
ROA not after:            Mon 10 Mar 2025 18:55:00 +0000
asID:                     265524
IP address blocks:        131.196.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:01:b6:82:ad:45:b7:7b:3f:b8:d1:36:f0:9f:94:47:84:53:7b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Mar 11 18:50:00 2024 GMT
            Not After : Mar 10 18:55:00 2025 GMT
        Subject: CN=72FB44EF201CBE9E2F08F221F3FEE1DBB0A72E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:5b:eb:f2:c6:9d:64:26:1c:63:26:8e:a3:
                    d9:3a:17:73:2f:7b:2c:47:b7:7f:6d:0d:cb:38:32:
                    64:61:d2:82:3e:99:54:98:e6:8b:0d:59:92:da:68:
                    87:be:8b:ac:1a:19:f5:36:1a:b2:37:10:ee:8c:4b:
                    42:ef:c9:6b:93:45:27:2a:de:78:c4:8e:8c:e8:b6:
                    6f:9c:59:e3:ed:cc:fb:e8:49:69:04:52:f0:24:bd:
                    24:f1:78:62:81:7a:78:2b:56:e2:13:d7:fc:bb:44:
                    68:78:5f:a6:f4:ce:dd:c2:3a:e9:f3:73:89:3f:87:
                    e0:48:35:ea:43:a7:82:1a:ea:8c:ea:cf:86:38:87:
                    89:7f:e8:05:b5:88:dc:b8:1c:80:63:02:35:b7:f6:
                    df:ff:a1:86:ed:de:4d:8a:c1:06:cd:4f:4f:da:56:
                    a2:26:2b:41:cc:45:91:38:54:a3:5b:a9:9f:7b:18:
                    12:71:46:80:7b:05:1e:d2:ff:be:91:e2:4c:8a:fc:
                    61:1b:35:f0:c4:d4:75:ed:db:d4:1f:6c:27:e3:08:
                    00:9e:5c:96:59:f1:e2:b5:38:4e:45:d5:25:43:49:
                    6e:5f:2d:f0:2b:79:a5:fe:23:2a:13:e5:8c:16:e9:
                    c3:aa:5c:ae:97:07:ad:61:25:6d:0c:88:3c:35:a9:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FB:44:EF:20:1C:BE:9E:2F:08:F2:21:F3:FE:E1:DB:B0:A7:2E:3B
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3133312e3139362e3234382e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:92:9c:b0:32:e3:95:2b:12:fb:69:2a:26:b1:0a:81:68:d7:
         07:b8:fd:be:eb:6c:41:25:fc:29:5b:8b:e0:bf:71:d9:2e:ac:
         5a:34:3b:a1:81:5b:e3:18:47:0e:45:b4:ee:35:10:af:9f:01:
         d1:92:c4:2d:8a:e6:32:c6:74:44:f9:37:a8:5f:d1:5d:63:34:
         1b:6a:be:ee:a1:48:5d:f2:52:2f:e4:ff:ce:66:b9:79:79:9b:
         bd:f8:1a:31:8a:74:1b:f2:4a:d0:bf:37:6e:47:04:19:71:ba:
         1b:9b:6f:63:8c:14:23:c4:16:79:5f:83:a9:20:91:83:90:35:
         b2:5c:2b:81:e6:71:eb:5b:01:66:91:de:18:67:19:40:f7:2e:
         73:d0:00:58:96:a3:46:ba:ae:97:0b:76:01:d4:c1:f9:6e:08:
         64:b7:60:0b:5b:9e:32:74:56:06:15:2f:23:f3:1e:81:ec:25:
         9e:7f:64:ab:fd:0e:14:48:5a:27:f0:43:f4:ed:8d:2f:ad:54:
         7a:fb:6e:90:3c:a4:87:c8:49:54:1b:44:a7:b6:2e:42:b0:97:
         24:38:1d:14:fa:76:a8:6b:8a:22:d4:91:c6:22:b3:fc:4e:25:
         98:4d:fc:28:68:a2:04:99:24:e0:ad:8a:b3:93:3d:28:49:85:
         bc:e8:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 05:30:15 2024 by rpki-client on console-ams.rpki-client.org