Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32322d3232203d3e20323635363332.roa
File:                     3133312e3139362e382e302f32322d3232203d3e20323635363332.roa (raw, json)
Hash identifier:          wsvEazLMZLu7ffnLU/e+8vHATtU+ag6+fsckLUCEdfo=
Subject key identifier:   65:28:8E:45:CA:FE:88:8C:B8:D6:50:7E:6F:BC:FA:70:95:81:B8:29
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       5E67636D1A6FFF52AF88A2C655BEEDA424A37871
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32322d3232203d3e20323635363332.roa
Signing time:             Tue 05 Mar 2024 17:56:24 +0000
ROA not before:           Tue 05 Mar 2024 17:51:24 +0000
ROA not after:            Tue 04 Mar 2025 17:56:24 +0000
asID:                     265632
IP address blocks:        131.196.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:67:63:6d:1a:6f:ff:52:af:88:a2:c6:55:be:ed:a4:24:a3:78:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Mar  5 17:51:24 2024 GMT
            Not After : Mar  4 17:56:24 2025 GMT
        Subject: CN=65288E45CAFE888CB8D6507E6FBCFA709581B829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:7b:9e:09:d6:00:4b:f4:c4:75:49:cd:04:
                    88:63:f3:8b:44:4e:ba:e5:83:78:94:f6:bf:84:d2:
                    7a:a7:c4:52:aa:e3:91:bb:7e:f8:87:1b:9e:53:f9:
                    f2:e2:03:b9:01:40:a7:1d:58:ac:98:b5:62:6d:23:
                    e6:de:22:ee:3b:1f:bc:90:ad:a4:f6:64:52:86:13:
                    17:7f:d0:a7:a7:3c:4f:f1:30:f1:84:f3:29:fd:ce:
                    94:13:21:d0:e1:d8:ff:4f:f7:79:a0:c8:e9:07:2a:
                    b5:fb:05:d6:a7:4c:38:2a:f4:e3:dd:70:0e:c7:9c:
                    91:5a:dc:9a:61:77:92:40:22:da:ca:0e:16:b2:43:
                    2f:c9:8e:45:8a:11:0b:7e:6b:2a:9b:39:2f:a7:32:
                    93:80:aa:cc:55:31:2a:bb:ce:d9:07:58:03:91:a7:
                    27:1d:ad:d6:d1:47:35:93:b7:39:a5:0a:0a:c0:59:
                    ea:43:1f:42:cf:71:32:a5:22:32:2b:68:e9:93:a2:
                    64:38:8c:e4:ae:68:84:95:92:f4:1e:6e:50:8a:e9:
                    ae:06:69:93:3d:27:40:25:d9:69:8a:65:91:2b:b4:
                    8e:69:d0:4e:ff:76:93:6e:15:38:6f:99:04:d4:bb:
                    b3:da:9a:22:88:71:61:16:52:6c:99:33:00:be:8b:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:28:8E:45:CA:FE:88:8C:B8:D6:50:7E:6F:BC:FA:70:95:81:B8:29
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/3133312e3139362e382e302f32322d3232203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:0f:07:ec:9a:5a:1f:5a:cb:1f:f6:2e:f3:0e:e2:fb:a3:7f:
         6a:ce:32:1d:34:93:7e:a4:f1:5e:55:2c:a0:16:2d:13:e6:12:
         01:af:fb:41:6f:e9:27:bf:35:96:e7:67:69:2e:40:9c:d7:21:
         c4:6e:94:05:c6:a5:f9:04:5a:16:e8:f9:e6:87:1f:ce:7c:83:
         25:c1:aa:ac:1e:20:9b:4f:2b:a3:e1:ca:36:00:81:3c:86:27:
         e0:4c:50:86:42:7d:ac:6f:f0:67:58:f1:e9:89:8d:80:67:d1:
         f4:ba:f5:7b:2c:15:1e:13:6a:0b:c5:72:9a:ae:de:12:47:d5:
         f2:2b:1f:d1:37:1f:ae:d3:f8:d0:6c:a7:2e:9b:76:f9:be:f1:
         c2:78:76:d1:c0:67:4f:b3:1a:d8:f4:b8:ad:d6:b6:91:25:66:
         79:ea:a5:8f:c1:c3:3c:a6:0a:56:a1:cc:1d:18:33:52:9a:a8:
         e9:2d:45:dd:a5:35:8b:ad:ef:26:78:4b:67:ae:3a:58:4b:58:
         47:b7:5b:bf:4c:89:d0:4c:72:3a:0d:ce:f4:63:aa:36:a0:54:
         2a:51:e6:51:ae:37:08:60:f1:c3:8c:f2:36:e8:da:4e:49:ca:
         93:d4:8b:22:21:ec:b1:fd:58:dd:cd:de:a5:e4:2b:45:1a:ae:
         ea:22:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:25 2024 by rpki-client on console-ams.rpki-client.org