Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3133312e37322e3230382e302f32322d3234203d3e203237383834.roa
File:                     3133312e37322e3230382e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier:          8ULHQKR2ZfCDrCCQ/SNm7E4m0OVl6d3uvNtspyxEEqQ=
Subject key identifier:   71:BA:03:21:6C:8B:4B:09:62:66:9A:18:C7:FF:79:3A:42:99:A2:33
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       33872B20EA621E07618B135C0F42DF8E0AB10888
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3133312e37322e3230382e302f32322d3234203d3e203237383834.roa
Signing time:             Tue 05 Mar 2024 18:12:35 +0000
ROA not before:           Tue 05 Mar 2024 18:07:35 +0000
ROA not after:            Tue 04 Mar 2025 18:12:35 +0000
asID:                     27884
IP address blocks:        131.72.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:87:2b:20:ea:62:1e:07:61:8b:13:5c:0f:42:df:8e:0a:b1:08:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Mar  5 18:07:35 2024 GMT
            Not After : Mar  4 18:12:35 2025 GMT
        Subject: CN=71BA03216C8B4B0962669A18C7FF793A4299A233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dd:86:5f:5a:eb:ae:d7:8d:04:d7:32:fe:01:
                    8a:75:ff:22:7f:99:7e:37:15:05:aa:88:ea:b1:be:
                    26:03:de:cf:17:74:99:20:22:af:25:c3:22:76:a8:
                    a3:ff:23:54:b8:a3:15:37:a5:ac:d7:18:98:82:b6:
                    9d:0d:3f:3f:31:1c:95:2e:64:37:41:15:44:bb:b7:
                    af:45:a3:3b:6f:39:1e:33:72:62:6a:cd:c6:42:48:
                    c9:f7:13:19:1a:08:49:57:2a:bb:6b:ae:05:2b:fe:
                    2c:3b:0b:52:c9:98:fc:fc:77:d8:e4:a2:b4:c7:6a:
                    a7:b3:84:5a:cd:c1:55:4b:9b:77:ec:fe:65:50:ef:
                    31:94:72:43:8f:0d:f0:ed:a3:85:ef:f2:71:1f:59:
                    63:47:b3:1d:11:ef:24:86:07:d5:5e:f2:0b:b9:d2:
                    4d:48:f3:17:a2:b0:46:25:65:89:5c:b0:55:07:60:
                    08:8f:13:6b:d8:13:b2:b7:f2:b5:05:b6:62:b5:a8:
                    4e:1d:ed:93:a0:5b:3f:97:4e:73:a4:80:c8:1f:95:
                    6e:6f:98:d9:26:fc:07:cb:69:f4:e6:9b:f8:75:a3:
                    cb:78:7f:2e:78:4a:22:b1:f3:8f:03:a1:23:a5:7e:
                    c5:99:6a:cf:cd:75:41:65:fc:ef:95:89:39:b8:46:
                    a8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BA:03:21:6C:8B:4B:09:62:66:9A:18:C7:FF:79:3A:42:99:A2:33
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3133312e37322e3230382e302f32322d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:1d:a9:1e:88:00:6d:bc:fd:d1:e6:d0:00:a0:d7:77:98:3c:
         a4:e0:ed:f0:4a:80:8a:f4:43:b4:ae:f1:49:00:4a:bc:ed:56:
         79:7c:a4:d6:18:dc:0b:79:a2:9f:35:1a:3e:e5:b6:d1:a7:86:
         ab:28:f1:05:de:b3:91:29:21:e3:b2:85:da:15:bb:4f:bc:da:
         8b:10:4c:78:79:02:4c:5f:5a:ad:6f:c1:51:0e:ad:56:92:fd:
         3e:c4:79:dc:d7:b3:e0:7c:47:9c:24:22:b9:d6:8f:f4:42:c8:
         45:ab:9c:13:f7:e3:2f:66:59:3c:e7:2b:35:b6:fb:72:34:25:
         70:e8:c5:fc:f6:62:78:ef:cc:18:2b:ac:f3:34:4d:28:d2:57:
         f9:34:1c:e5:6b:a9:50:3f:51:cd:c8:52:7b:c7:9e:e7:f6:4f:
         98:b8:48:f3:7b:3b:5a:5d:e8:58:63:c5:6d:ff:ca:14:5f:90:
         67:0d:8c:ee:a9:aa:c7:c4:e4:2e:d3:7e:ec:e1:4a:1d:2a:5d:
         05:56:00:42:74:b7:2a:1d:e9:00:ae:14:65:8f:76:53:25:61:
         45:20:d4:fe:c3:af:0f:98:79:92:df:99:48:d4:79:8c:ef:6f:
         9c:43:40:e5:05:45:9e:7a:4d:89:6c:a8:6d:e4:ce:e6:c4:b8:
         e4:4e:b7:43
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUM4crIOpiHgdhixNcD0LfjgqxCIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI3NUExRjFCQzY5MjgyQ0QwRjRCRDMzRjEyMDE1NTZD
NjZDRkQ1ODAeFw0yNDAzMDUxODA3MzVaFw0yNTAzMDQxODEyMzVaMDMxMTAvBgNV
BAMTKDcxQkEwMzIxNkM4QjRCMDk2MjY2OUExOEM3RkY3OTNBNDI5OUEyMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl3YZfWuuu140E1zL+AYp1/yJ/
mX43FQWqiOqxviYD3s8XdJkgIq8lwyJ2qKP/I1S4oxU3pazXGJiCtp0NPz8xHJUu
ZDdBFUS7t69FoztvOR4zcmJqzcZCSMn3ExkaCElXKrtrrgUr/iw7C1LJmPz8d9jk
orTHaqezhFrNwVVLm3fs/mVQ7zGUckOPDfDto4Xv8nEfWWNHsx0R7ySGB9Ve8gu5
0k1I8xeisEYlZYlcsFUHYAiPE2vYE7K38rUFtmK1qE4d7ZOgWz+XTnOkgMgflW5v
mNkm/AfLafTmm/h1o8t4fy54SiKx848DoSOlfsWZas/NdUFl/O+ViTm4RqhXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcboDIWyLSwliZpoYx/95OkKZojMwHwYDVR0j
BBgwFoAUQnWh8bxpKCzQ9L0z8SAVVsZs/VgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDI1RTNEMEQzOUQzQjc5MUJCQUI0NkY3QTFDQTEyMjE2
QjJCMzE1MzgxOEI3RjVBQzExOTg4M0ExNUMzNjA3LzAvNDI3NUExRjFCQzY5Mjgy
Q0QwRjRCRDMzRjEyMDE1NTZDNjZDRkQ1OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Mjc1QTFGMUJDNjkyODJDRDBG
NEJEMzNGMTIwMTU1NkM2NkNGRDU4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQyNUUzRDBEMzlEM0I3OTFCQkFCNDZGN0ExQ0ExMjIxNkIyQjMxNTM4
MThCN0Y1QUMxMTk4ODNBMTVDMzYwNy8wLzMxMzMzMTJlMzczMjJlMzIzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM4MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNI0DAN
BgkqhkiG9w0BAQsFAAOCAQEAzh2pHogAbbz90ebQAKDXd5g8pODt8EqAivRDtK7x
SQBKvO1WeXyk1hjcC3minzUaPuW20aeGqyjxBd6zkSkh47KF2hW7T7zaixBMeHkC
TF9arW/BUQ6tVpL9PsR53Nez4HxHnCQiudaP9ELIRaucE/fjL2ZZPOcrNbb7cjQl
cOjF/PZieO/MGCus8zRNKNJX+TQc5WupUD9RzchSe8ee5/ZPmLhI83s7Wl3oWGPF
bf/KFF+QZw2M7qmqx8TkLtN+7OFKHSpdBVYAQnS3Kh3pAK4UZY92UyVhRSDU/sOv
D5h5kt+ZSNR5jO9vnENA5QVFnnpNiWyobeTO5sS45E63Qw==
-----END CERTIFICATE-----
Generated at Sun May 5 08:37:16 2024 by rpki-client on console-fra.rpki-client.org