Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3133312e302e3233362e302f32322d3234203d3e203136353331.roa
File:                     3133312e302e3233362e302f32322d3234203d3e203136353331.roa (raw, json)
Hash identifier:          Zh6W+0BTVNGvQI5WO1bAPCcAxjToiEQW63k6LeKQcyM=
Subject key identifier:   91:18:CD:54:E4:3B:B9:08:51:56:EB:04:E7:D1:5E:DA:3E:6C:57:C5
Certificate issuer:       /CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A
Certificate serial:       433F622EB7AD8ECBA02CDAD399532AF73D0886F9
Authority key identifier: 2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3133312e302e3233362e302f32322d3234203d3e203136353331.roa
Signing time:             Tue 05 Mar 2024 17:59:33 +0000
ROA not before:           Tue 05 Mar 2024 17:54:33 +0000
ROA not after:            Tue 04 Mar 2025 17:59:33 +0000
asID:                     16531
IP address blocks:        131.0.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3f:62:2e:b7:ad:8e:cb:a0:2c:da:d3:99:53:2a:f7:3d:08:86:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A
        Validity
            Not Before: Mar  5 17:54:33 2024 GMT
            Not After : Mar  4 17:59:33 2025 GMT
        Subject: CN=9118CD54E43BB9085156EB04E7D15EDA3E6C57C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:37:9d:73:d2:82:a3:69:aa:98:fd:0c:9f:
                    2d:05:6b:82:86:21:e0:f4:70:27:8c:1e:fc:7c:9b:
                    7f:52:65:27:42:f6:6f:07:dd:1a:b2:2a:4d:f8:2b:
                    b2:d0:50:80:52:ef:4c:63:e4:73:5a:27:71:43:e6:
                    df:0a:97:f6:48:b0:a5:b4:de:8b:15:cc:37:7f:e7:
                    71:4f:2d:4c:94:2a:fb:fe:97:29:e6:96:34:06:f4:
                    76:2e:56:dc:00:27:6f:74:52:6d:d5:56:81:e4:49:
                    27:1f:10:19:16:02:ce:44:af:01:42:af:10:8b:5e:
                    66:e6:37:c5:06:c6:66:1a:a5:62:25:fa:61:52:32:
                    5e:1b:ee:80:30:dc:7c:7c:dd:52:87:9a:d8:20:88:
                    ad:c0:67:33:d6:fc:77:24:7c:5a:42:42:08:9f:28:
                    ea:2d:c3:bb:84:da:33:d7:af:f2:ab:f7:4b:f2:2c:
                    94:f0:86:3f:c4:80:8c:9c:d0:28:d4:e9:ea:ab:fb:
                    41:80:d8:a1:69:5d:73:95:2b:7d:39:bc:ec:dc:a3:
                    08:eb:d5:85:7c:d2:91:5c:d5:71:34:45:75:4e:6b:
                    a9:e3:07:67:df:63:b9:bf:6e:90:25:23:22:be:0e:
                    0e:01:16:09:da:b0:99:1a:36:c0:eb:7b:65:3e:4c:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:18:CD:54:E4:3B:B9:08:51:56:EB:04:E7:D1:5E:DA:3E:6C:57:C5
            X509v3 Authority Key Identifier:
                keyid:2F:B0:6E:BD:28:FE:83:A5:64:FA:3D:FC:83:F4:F9:8A:C6:20:C9:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB06EBD28FE83A564FA3DFC83F4F98AC620C98A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C954A8464236F1BA8E61C7B6D67286A0093FFD409344653FF0D9A78691F4740F/0/3133312e302e3233362e302f32322d3234203d3e203136353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:26:fb:00:db:3a:c9:3a:94:2e:2e:4e:35:3c:ee:69:b7:86:
         17:12:62:2b:f7:31:89:6f:74:30:05:9d:fa:03:39:ab:b4:bf:
         ed:74:e7:bd:51:2a:d1:a4:09:90:76:ed:f2:0d:44:da:0b:f5:
         84:7f:47:bf:e7:5a:bd:b6:38:7e:49:32:82:00:cd:dd:8d:ef:
         eb:37:6c:55:e0:2b:24:1c:89:7d:8a:d2:29:b5:cf:7a:a5:ea:
         f4:fa:88:d1:00:cc:53:d0:30:d8:5c:8c:9f:b9:79:14:57:ed:
         e1:ac:37:b4:23:2d:2b:84:b7:b6:95:3a:d8:09:b8:f3:62:c1:
         5e:ff:7a:58:7a:3a:fa:5e:16:c8:9b:1e:a2:03:4b:2f:06:02:
         66:38:33:3a:7b:21:1d:fc:55:24:7d:bc:eb:7b:12:f4:2a:3b:
         15:21:e4:b4:7d:99:0d:d9:1c:62:bb:ca:76:bd:80:84:ea:19:
         11:22:f5:cc:ed:2c:5a:07:fa:43:be:68:dd:6e:6b:bd:ed:68:
         cf:be:44:03:8d:07:60:17:ce:69:6c:82:66:53:df:a2:c7:14:
         86:92:09:bf:7d:e0:49:81:47:d8:e3:7f:44:b9:a1:cb:57:5b:
         18:da:16:67:b6:d9:5d:4f:03:18:0e:75:89:e3:c5:d5:26:ca:
         7e:b3:30:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:01 2024 by rpki-client on console-ams.rpki-client.org