Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/3133312e3235352e31382e302f32332d3233203d3e20323731393038.roa
File:                     3133312e3235352e31382e302f32332d3233203d3e20323731393038.roa (raw, json)
Hash identifier:          magl1w4xspuWU31VqXMA1957vTjrU8cFiY8qFPC95ZA=
Subject key identifier:   F7:6E:DC:DC:58:03:0A:C8:AC:37:D4:9B:8B:F6:CF:FC:57:60:4D:56
Certificate issuer:       /CN=C63FB072C318744286AE683521DFED7AF1E0B944
Certificate serial:       4D699CAD116084DBED587C279EE36F8171CEAFE2
Authority key identifier: C6:3F:B0:72:C3:18:74:42:86:AE:68:35:21:DF:ED:7A:F1:E0:B9:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C63FB072C318744286AE683521DFED7AF1E0B944.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/3133312e3235352e31382e302f32332d3233203d3e20323731393038.roa
Signing time:             Tue 05 Mar 2024 18:22:54 +0000
ROA not before:           Tue 05 Mar 2024 18:17:54 +0000
ROA not after:            Tue 04 Mar 2025 18:22:54 +0000
asID:                     271908
IP address blocks:        131.255.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/C63FB072C318744286AE683521DFED7AF1E0B944.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/C63FB072C318744286AE683521DFED7AF1E0B944.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C63FB072C318744286AE683521DFED7AF1E0B944.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:69:9c:ad:11:60:84:db:ed:58:7c:27:9e:e3:6f:81:71:ce:af:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C63FB072C318744286AE683521DFED7AF1E0B944
        Validity
            Not Before: Mar  5 18:17:54 2024 GMT
            Not After : Mar  4 18:22:54 2025 GMT
        Subject: CN=F76EDCDC58030AC8AC37D49B8BF6CFFC57604D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:f7:9b:99:d6:f3:3f:93:b8:27:57:c3:99:
                    be:e8:8a:d9:59:db:8c:1c:88:f2:ad:57:cf:d0:92:
                    98:32:f6:c3:5d:59:a7:c8:b5:12:cf:c6:63:98:94:
                    26:5f:11:3e:b9:88:09:f4:a1:89:3c:54:d4:70:17:
                    69:63:35:4f:ed:ea:f0:69:42:74:d1:bd:e0:b3:12:
                    05:52:a7:91:03:51:8c:1a:23:02:ed:5f:ad:94:c2:
                    14:5b:a1:a1:ab:f3:2f:9a:64:fa:d5:cd:d7:d9:47:
                    52:6d:eb:9a:5e:e8:cd:68:ea:47:76:a7:d1:6f:40:
                    55:b9:23:be:7e:26:0c:3e:f1:99:27:1b:2d:e5:57:
                    19:39:bf:71:08:0a:35:5d:b1:7e:ba:b4:7c:d9:94:
                    9b:9c:04:f3:19:c3:62:01:b2:9c:e6:9f:3a:b4:f5:
                    8a:93:e9:0c:06:9c:6a:1a:ae:ac:7b:1f:bd:c8:82:
                    c8:7b:cc:2d:69:fd:ab:20:56:1b:40:41:cf:c0:c0:
                    78:dd:bb:92:4d:67:04:9f:31:37:55:9a:5d:2f:02:
                    63:1f:81:70:79:45:fb:52:cc:1f:d8:78:be:42:75:
                    71:0d:88:be:26:95:70:2e:31:13:89:56:78:7d:73:
                    ee:4c:5b:6e:3c:5d:10:b3:64:95:31:13:ad:38:8a:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6E:DC:DC:58:03:0A:C8:AC:37:D4:9B:8B:F6:CF:FC:57:60:4D:56
            X509v3 Authority Key Identifier:
                keyid:C6:3F:B0:72:C3:18:74:42:86:AE:68:35:21:DF:ED:7A:F1:E0:B9:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/C63FB072C318744286AE683521DFED7AF1E0B944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C63FB072C318744286AE683521DFED7AF1E0B944.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF0BB2FE3AF34DF6F12C1A30AFC354508771CE61DC8C6132A2BAA313A2228037/0/3133312e3235352e31382e302f32332d3233203d3e20323731393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:70:2e:48:e4:49:99:bb:11:50:b9:43:5e:55:af:71:9c:
         a9:31:a7:bb:c7:83:42:5b:15:ba:ac:ba:a5:a7:be:62:e1:48:
         5e:bd:55:cf:1c:02:e8:60:01:a2:72:45:e0:fe:59:4f:61:3e:
         c4:05:49:ca:29:05:aa:e3:2f:b6:75:62:06:b2:0a:75:0f:85:
         64:41:e2:13:d2:fa:fd:73:9c:98:45:cf:71:c4:77:01:a0:37:
         30:40:39:d8:60:dc:35:be:00:58:a9:85:48:80:33:c7:9c:11:
         15:22:89:91:7c:7d:40:a2:32:ce:a1:d6:18:de:74:21:08:fa:
         b3:40:ae:aa:97:49:c2:a2:f0:5f:d1:d2:45:1a:ca:7a:2d:92:
         27:11:7c:6c:d0:26:4a:b6:52:ca:2c:cd:27:ad:b7:f8:fb:c5:
         f3:f1:f9:a6:40:f4:c8:00:b0:38:90:fb:4d:19:19:ea:51:1e:
         00:9a:10:d8:4d:e1:fe:29:31:f2:09:97:ec:86:88:22:a7:97:
         a3:66:c7:d4:a6:a5:f1:d2:ec:96:e0:6e:31:f0:6a:5f:24:31:
         e6:11:02:e2:4d:a5:95:fe:6a:da:57:8f:2a:73:48:60:bf:e3:
         58:5e:5b:5f:c0:e2:e1:86:2b:33:17:13:8a:b5:60:c8:39:c8:
         15:0c:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:40:23 2024 by rpki-client on console-ams.rpki-client.org