Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/3133312e3139362e3235322e302f32322d3232203d3e20313339323335.roa
File:                     3133312e3139362e3235322e302f32322d3232203d3e20313339323335.roa (raw, json)
Hash identifier:          fJGQwngQmB5pDMui7lRxitwxbxGHkPOmOlIuzXEqfDg=
Subject key identifier:   73:84:FE:70:B2:D2:AF:0C:EA:0E:EA:40:81:32:7B:60:EE:E9:E6:45
Certificate issuer:       /CN=A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41
Certificate serial:       51708F7C54E3F8CC40575E1AF76D70949F8B003B
Authority key identifier: A8:DE:9D:1A:4E:99:DC:F1:91:4B:91:6B:9F:E6:68:2E:D4:71:EC:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/3133312e3139362e3235322e302f32322d3232203d3e20313339323335.roa
Signing time:             Tue 05 Mar 2024 17:48:32 +0000
ROA not before:           Tue 05 Mar 2024 17:43:32 +0000
ROA not after:            Tue 04 Mar 2025 17:48:32 +0000
asID:                     139235
IP address blocks:        131.196.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:70:8f:7c:54:e3:f8:cc:40:57:5e:1a:f7:6d:70:94:9f:8b:00:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41
        Validity
            Not Before: Mar  5 17:43:32 2024 GMT
            Not After : Mar  4 17:48:32 2025 GMT
        Subject: CN=7384FE70B2D2AF0CEA0EEA4081327B60EEE9E645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:91:50:b7:68:91:f5:93:38:a3:e2:91:7e:
                    2d:92:a4:97:b5:10:61:6a:48:e3:a7:e2:e8:cb:53:
                    da:8f:0c:56:e7:f8:3e:79:a4:13:08:24:4c:49:0d:
                    94:ce:be:5e:30:3e:66:7b:28:a3:d3:cc:4f:32:82:
                    17:a9:b7:cb:68:07:5f:6a:a8:88:7f:a0:f9:07:c8:
                    96:3d:db:7c:0a:2d:49:b0:65:2f:9b:37:06:46:5c:
                    e6:77:19:58:68:af:e0:05:ea:93:52:11:4f:80:62:
                    d5:ff:5d:91:1f:71:47:80:ad:14:ae:58:01:54:89:
                    70:4a:b4:a0:df:ac:93:d3:9a:4f:04:a0:39:31:f8:
                    01:15:71:34:99:f3:8e:1a:1f:2f:17:ce:62:4c:03:
                    ef:b1:2c:df:40:a8:29:0c:b0:03:d8:ec:7f:56:be:
                    b1:d2:08:b3:6b:ac:15:06:74:79:59:99:77:e3:9a:
                    35:c7:45:04:a4:6a:43:b3:c7:9e:f4:2f:a0:8a:33:
                    40:87:49:64:21:3a:f2:e4:f9:17:bb:b7:a0:c0:9f:
                    fb:ae:69:84:f0:aa:69:a6:be:d9:77:f4:7c:04:18:
                    d8:b5:37:a3:9f:99:1d:b1:d1:e6:d5:c3:da:53:a2:
                    a3:6f:ca:d0:3d:a6:75:13:c5:cc:9a:20:ed:41:31:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:84:FE:70:B2:D2:AF:0C:EA:0E:EA:40:81:32:7B:60:EE:E9:E6:45
            X509v3 Authority Key Identifier:
                keyid:A8:DE:9D:1A:4E:99:DC:F1:91:4B:91:6B:9F:E6:68:2E:D4:71:EC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8DE9D1A4E99DCF1914B916B9FE6682ED471EC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E698B1766D7DBBC446025F68168128B04036DC1941F1F04E7581C25CA1660F1A/0/3133312e3139362e3235322e302f32322d3232203d3e20313339323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:26:2a:a3:47:c4:ab:05:23:52:55:b4:6b:9e:17:3e:5c:48:
         c1:2e:c1:9b:be:14:5a:38:63:83:fb:aa:23:dc:b1:a0:c7:7b:
         8c:24:cf:25:b9:2f:db:1d:d8:32:ee:78:cc:97:a3:97:61:70:
         46:51:68:8d:66:0b:ef:b3:e6:53:54:c8:d0:1d:03:50:fd:62:
         9b:5d:ad:5b:4b:c0:c1:70:5c:e9:44:25:dc:21:c6:4b:db:b7:
         c7:91:c6:8b:57:4e:b2:26:ac:ba:24:bc:4f:c2:f0:af:f1:2f:
         72:c7:e0:8a:25:4b:a5:96:2c:c1:cf:2c:a9:da:00:f8:1b:df:
         f0:34:93:35:6d:3e:78:89:cc:6a:37:25:d6:4d:2c:73:15:0c:
         91:4f:14:7d:d8:65:0a:2c:d8:90:83:67:85:2c:9f:9b:9c:a8:
         6c:dd:0d:17:1d:24:5b:2b:c4:88:40:0e:aa:82:c0:3c:3b:ac:
         7a:93:7f:66:45:c4:e8:b1:4d:aa:9a:f1:14:4b:43:f7:aa:bd:
         8d:c8:61:7d:72:01:09:52:87:f0:ba:cf:55:3d:47:fa:ef:17:
         a1:28:76:95:ae:58:d5:f9:ed:8e:0c:16:0e:86:a3:90:2d:d5:
         1f:b8:f0:b4:88:98:13:98:f1:f2:68:9e:45:6e:07:30:ae:a7:
         44:93:8d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:48 2024 by rpki-client on console-fra.rpki-client.org