Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3133312e302e3132382e302f32322d3234203d3e203532323332.roa
File:                     3133312e302e3132382e302f32322d3234203d3e203532323332.roa (raw, json)
Hash identifier:          uaB0BB9bCJdfCJwPvL5j+gEhj0UFTr7dRJSrO/BapEg=
Subject key identifier:   2A:CC:C2:13:57:45:2A:4F:59:BE:71:09:82:76:B7:33:1F:DD:42:BF
Certificate issuer:       /CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
Certificate serial:       7BD901C70BF023DAB862C28C74851BD63009832B
Authority key identifier: 51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3133312e302e3132382e302f32322d3234203d3e203532323332.roa
Signing time:             Tue 05 Mar 2024 17:53:40 +0000
ROA not before:           Tue 05 Mar 2024 17:48:40 +0000
ROA not after:            Tue 04 Mar 2025 17:53:40 +0000
asID:                     52232
IP address blocks:        131.0.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d9:01:c7:0b:f0:23:da:b8:62:c2:8c:74:85:1b:d6:30:09:83:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
        Validity
            Not Before: Mar  5 17:48:40 2024 GMT
            Not After : Mar  4 17:53:40 2025 GMT
        Subject: CN=2ACCC21357452A4F59BE71098276B7331FDD42BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:34:2d:e4:a2:7a:e3:bc:fc:a6:34:cc:f3:4d:
                    85:f7:b1:b3:fb:54:18:57:4b:f7:b0:4b:f8:9a:c3:
                    05:20:34:db:47:d0:4b:c0:97:26:7c:b4:94:74:86:
                    c7:f2:d0:76:47:36:16:47:52:51:12:35:f3:70:44:
                    c8:74:6d:a5:3f:48:2a:88:ff:1a:fd:53:b1:c1:a3:
                    27:0f:2d:94:29:de:27:ca:9e:a5:1e:44:b9:25:68:
                    a8:52:76:a3:d0:70:76:75:58:d7:d5:25:e8:d6:46:
                    d1:fe:bc:fd:6a:2b:fa:0e:23:77:7b:57:8e:e9:d8:
                    a2:e5:ce:94:43:27:1e:77:14:c1:b1:0f:80:ab:78:
                    c3:33:9d:1b:55:0c:33:8a:b0:c8:fc:70:17:78:62:
                    91:8b:03:e5:63:dc:42:c7:a8:3f:77:17:06:fb:79:
                    ce:16:c8:0a:19:b5:af:14:88:79:76:46:5b:6c:a3:
                    6d:4d:55:6a:1a:2b:ef:98:68:e1:56:03:1e:76:6c:
                    39:bb:3f:16:32:3e:3b:76:ef:f6:5c:3a:cd:9f:d0:
                    b1:78:9d:6e:de:70:7e:6b:9b:94:b7:fb:15:32:7c:
                    cc:4c:10:8c:df:0f:cd:c1:5b:8b:18:87:9e:a0:08:
                    eb:14:db:e1:29:25:1b:25:c1:5b:1a:2f:f0:68:88:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CC:C2:13:57:45:2A:4F:59:BE:71:09:82:76:B7:33:1F:DD:42:BF
            X509v3 Authority Key Identifier:
                keyid:51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3133312e302e3132382e302f32322d3234203d3e203532323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:24:f1:f2:3c:8e:06:e2:a3:2e:b8:52:a4:4d:b5:45:48:ce:
         eb:2c:e6:5c:4d:e1:5d:4e:ce:33:94:fa:52:9c:b1:95:33:6b:
         26:1f:1b:f3:67:50:4f:96:3a:be:a7:d7:b5:3a:49:4c:24:31:
         d5:28:37:e9:5a:4f:e3:0f:00:90:db:82:00:d1:6f:3c:dd:6d:
         53:e2:a8:5d:be:46:6f:48:85:18:63:5f:5e:d4:dd:0d:dd:ac:
         88:a2:09:2b:0d:1a:47:85:04:4c:1d:5e:25:52:55:f8:7c:58:
         c6:ad:f5:f2:6a:15:c2:16:89:07:41:a3:89:70:f7:2c:44:fd:
         fc:10:6e:97:c1:f1:50:45:f7:8e:65:b2:10:97:1b:ae:4a:09:
         86:6f:5d:23:85:93:49:14:38:b9:a7:32:7c:9e:84:d6:59:a2:
         d6:f7:d9:55:db:9c:cb:10:76:87:ac:ad:3f:d3:53:59:db:47:
         73:1c:52:1f:a2:c8:49:ca:30:dd:70:9c:a3:1a:ef:05:21:eb:
         6b:1b:3b:ff:d5:0f:92:98:a2:3e:80:f0:2e:bc:46:c0:ca:cd:
         f4:ca:2b:e8:0f:36:39:e7:f9:97:bc:b3:4b:75:d5:54:df:bd:
         e3:81:8e:e9:60:c0:28:10:a8:15:26:5a:a7:55:e4:81:68:76:
         1e:ae:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org