Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3133312e3130302e3136302e302f32322d3234203d3e203237363635.roa
File:                     3133312e3130302e3136302e302f32322d3234203d3e203237363635.roa (raw, json)
Hash identifier:          FH44AlmdpMh76zAD3Y84sp5Q0PJEGuNcS7og+KtprVc=
Subject key identifier:   51:D5:68:79:BB:68:01:BB:AE:2C:FB:9B:C4:8A:31:48:A9:A2:EA:80
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       7C2201360178A7AD3188093D36F23878AA2385FF
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3133312e3130302e3136302e302f32322d3234203d3e203237363635.roa
Signing time:             Tue 05 Mar 2024 18:15:10 +0000
ROA not before:           Tue 05 Mar 2024 18:10:10 +0000
ROA not after:            Tue 04 Mar 2025 18:15:10 +0000
asID:                     27665
IP address blocks:        131.100.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 01 May 2024 23:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:22:01:36:01:78:a7:ad:31:88:09:3d:36:f2:38:78:aa:23:85:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Mar  5 18:10:10 2024 GMT
            Not After : Mar  4 18:15:10 2025 GMT
        Subject: CN=51D56879BB6801BBAE2CFB9BC48A3148A9A2EA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:39:6c:5b:70:b9:da:17:5f:d1:ae:d3:3e:
                    5b:87:32:12:8a:8b:b6:fc:e9:b6:f8:48:a6:3f:e9:
                    3b:25:fa:18:ef:7b:60:ee:ec:81:00:6f:25:63:2c:
                    4c:04:b1:96:ba:37:14:01:81:b3:13:92:eb:a7:b0:
                    de:a5:6a:7a:03:17:d1:43:40:e9:04:7e:c8:86:79:
                    ff:cb:2f:a3:c0:b3:2d:87:0b:b7:60:e6:96:c6:57:
                    e8:05:f9:c4:da:6a:fc:6f:0b:ed:c0:2c:7c:f3:a7:
                    7c:2f:e6:30:2f:f1:51:f7:69:1b:d3:85:72:d1:14:
                    e3:58:d0:70:3d:80:2b:4e:9c:a7:9e:2f:46:db:53:
                    96:2d:bc:31:1e:32:a0:29:55:bf:68:0c:9d:52:da:
                    6a:6f:06:3c:66:46:00:91:b3:df:05:8e:e5:a7:40:
                    63:b7:cc:fe:19:87:64:b0:5b:3a:df:0d:da:0c:9a:
                    19:27:cc:d2:e8:7c:9e:8f:7a:8d:77:f3:ad:83:8c:
                    8a:99:75:82:b9:02:23:f4:4d:3d:01:2f:53:24:3f:
                    f3:30:fb:a5:7f:24:4d:3b:9f:39:8b:c3:f0:12:fd:
                    8f:59:44:51:12:1d:e3:aa:56:65:61:85:46:12:dc:
                    88:23:87:f9:bd:14:e9:ce:e7:29:70:e0:89:a4:a6:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D5:68:79:BB:68:01:BB:AE:2C:FB:9B:C4:8A:31:48:A9:A2:EA:80
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3133312e3130302e3136302e302f32322d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:4b:39:00:b8:07:78:9c:d3:f1:fc:da:09:9b:d2:08:dd:01:
         d2:d4:69:ee:7b:fa:bd:fd:19:a8:b7:29:0c:f4:a3:84:5f:81:
         d6:7a:a9:cc:e3:e5:bd:50:62:4c:9b:f9:e8:ac:6b:87:39:6b:
         0b:f5:54:51:9f:79:ea:96:ec:bc:66:b0:71:ca:36:2e:a0:2c:
         20:df:b3:22:5b:1d:74:3a:80:a3:a4:37:41:00:99:de:fb:81:
         f1:f8:5a:66:95:08:b5:ee:c1:fb:3e:8e:0d:2b:5b:2f:bc:e3:
         bf:f8:f0:aa:2d:05:4f:8a:37:39:fc:8d:f4:b8:6c:16:16:b9:
         42:04:ba:66:86:93:14:63:50:3f:86:ef:a9:27:7d:16:84:0d:
         8a:76:3c:fa:3d:b2:eb:c6:47:ef:3a:01:c8:dd:fb:94:e4:91:
         6d:2a:4a:b0:94:f6:a5:96:cc:fc:4c:b5:f5:8e:e5:ed:ae:d3:
         25:80:e8:09:2c:02:3e:73:b4:a6:24:a3:c8:67:d3:b9:4a:2b:
         b7:91:dc:a5:f3:9b:e0:aa:23:68:ed:41:c2:59:15:1d:29:20:
         38:20:2f:5a:e6:b8:8a:d6:90:90:9f:39:83:01:17:2a:4c:0c:
         d5:66:5a:17:97:99:56:7b:08:2a:5f:6e:ab:30:a5:13:91:de:
         c6:17:7c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 20:43:25 2024 by rpki-client on console-fra.rpki-client.org