Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/3133312e302e3139362e302f32322d3234203d3e203237383832.roa
File:                     3133312e302e3139362e302f32322d3234203d3e203237383832.roa (raw, json)
Hash identifier:          7LJEdqrZurfr63RFIfZAapaHiZLpX0kg/mo4BxKtmpM=
Subject key identifier:   0D:F1:28:9F:8D:A9:3C:FD:E4:2E:99:FF:A2:2D:B1:A0:B4:BF:55:34
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       605968B0EDE40AA2CCC96A5BB480BEAC596B1488
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/3133312e302e3139362e302f32322d3234203d3e203237383832.roa
Signing time:             Tue 05 Mar 2024 18:09:40 +0000
ROA not before:           Tue 05 Mar 2024 18:04:40 +0000
ROA not after:            Tue 04 Mar 2025 18:09:40 +0000
asID:                     27882
IP address blocks:        131.0.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:59:68:b0:ed:e4:0a:a2:cc:c9:6a:5b:b4:80:be:ac:59:6b:14:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Mar  5 18:04:40 2024 GMT
            Not After : Mar  4 18:09:40 2025 GMT
        Subject: CN=0DF1289F8DA93CFDE42E99FFA22DB1A0B4BF5534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:56:80:81:00:60:45:4e:4c:18:d1:12:e4:da:
                    8a:f5:bf:70:db:c5:bc:5d:e0:53:ce:16:f6:65:09:
                    90:16:a8:3e:a9:8b:e1:6f:11:58:1c:ea:56:69:27:
                    3f:36:68:5e:10:c1:cd:62:33:95:32:62:57:7e:ca:
                    36:cf:2d:76:03:c0:59:90:24:6b:31:a6:a1:f6:d3:
                    ef:2d:e5:22:db:b2:e2:19:f4:c3:4b:7d:43:b7:21:
                    13:94:f3:1d:a1:bb:30:b6:f2:14:fb:7d:7d:3e:78:
                    25:70:6e:4d:d7:67:c0:b4:1c:41:14:90:cf:5f:23:
                    fe:da:07:af:e1:2d:6a:15:00:6c:7f:e4:e1:38:c7:
                    cb:ab:2c:9a:e6:09:c7:2e:e5:d4:3d:76:e9:c1:c2:
                    52:89:b4:90:4b:e0:ae:c7:db:ea:f0:b3:f3:80:ee:
                    88:40:29:66:6e:0a:a9:ce:f6:92:1e:f2:01:a9:24:
                    23:bf:80:c7:00:15:49:c0:34:c6:9f:a0:c5:1e:18:
                    43:73:54:4b:0b:58:2a:56:fd:3e:6f:a1:d8:db:8e:
                    4e:47:42:7d:de:ba:c5:e7:28:b8:df:b1:37:21:c1:
                    24:00:d6:7f:f5:2b:2b:6c:26:eb:d3:4a:19:74:e9:
                    0a:ba:86:85:ca:c0:81:9b:fc:63:56:90:83:07:44:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F1:28:9F:8D:A9:3C:FD:E4:2E:99:FF:A2:2D:B1:A0:B4:BF:55:34
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/3133312e302e3139362e302f32322d3234203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:28:ab:b7:6f:0d:12:ff:58:74:1e:fa:34:5e:e4:12:5a:fc:
         ac:20:af:80:9c:79:93:8f:6b:84:30:61:97:7a:cd:1a:af:2e:
         fb:4a:ff:49:bf:c3:24:35:89:1a:3d:54:27:e5:ff:31:c4:ea:
         41:79:9d:0b:90:25:02:d8:99:d8:0f:cb:22:00:61:c7:f9:82:
         50:64:79:dd:c4:4d:ed:8c:44:3f:3b:67:1c:fa:cf:29:79:6b:
         8b:27:5b:97:93:bd:86:22:17:25:5d:45:3d:de:d6:3c:0a:2f:
         18:09:92:72:c9:75:7e:81:72:e0:e3:5d:32:1d:88:83:b1:d5:
         d8:7b:f9:cc:6d:d2:74:1f:c3:6d:0c:3c:7e:e6:f2:6a:9a:a3:
         48:2f:ee:55:c9:62:96:a8:df:03:52:aa:29:0b:a1:6b:09:16:
         88:eb:ba:4e:27:83:10:e3:0a:1b:1d:68:ac:f5:34:ee:40:f0:
         c0:54:ec:6a:52:3c:9e:2c:04:d1:84:3f:fe:b0:ea:1b:a9:7d:
         da:fd:50:c7:7e:b0:37:fc:af:31:69:b4:40:52:13:1e:a5:f1:
         5b:13:aa:86:60:b4:5b:e9:65:3b:52:94:20:20:9b:e7:fa:8c:
         60:ca:37:f1:9d:5e:29:27:1c:48:94:62:b2:12:ed:ef:bc:ac:
         04:5f:0e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:09 2024 by rpki-client on console-fra.rpki-client.org