Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/3133312e3136312e3233362e302f32322d3232203d3e20323633363837.roa
File:                     3133312e3136312e3233362e302f32322d3232203d3e20323633363837.roa (raw, json)
Hash identifier:          icgMnfWhnMtz1P3MJbEOwwEsVaRFYnw6jER75DuRTSs=
Subject key identifier:   8E:56:81:EE:66:DD:D3:0A:77:9B:13:BF:87:86:8E:BD:DD:FD:35:62
Certificate issuer:       /CN=2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343
Certificate serial:       7F8753521D0F8B736687F27830895D0AB0C23D35
Authority key identifier: 2A:CB:03:DB:51:DD:B7:21:3E:9A:E4:4C:07:C6:BB:7B:82:8B:13:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/3133312e3136312e3233362e302f32322d3232203d3e20323633363837.roa
Signing time:             Tue 05 Mar 2024 17:49:22 +0000
ROA not before:           Tue 05 Mar 2024 17:44:22 +0000
ROA not after:            Tue 04 Mar 2025 17:49:22 +0000
asID:                     263687
IP address blocks:        131.161.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:87:53:52:1d:0f:8b:73:66:87:f2:78:30:89:5d:0a:b0:c2:3d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343
        Validity
            Not Before: Mar  5 17:44:22 2024 GMT
            Not After : Mar  4 17:49:22 2025 GMT
        Subject: CN=8E5681EE66DDD30A779B13BF87868EBDDDFD3562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:63:5b:03:32:26:34:26:23:c3:12:bb:2e:
                    80:ca:1b:4a:0a:90:ac:d6:89:a8:be:c9:1c:f0:b1:
                    08:81:70:64:1b:2e:67:53:4c:10:61:5f:7b:79:8a:
                    0d:ff:ff:4f:94:b1:b2:c1:5f:d4:6b:31:d8:3c:fb:
                    b7:3f:b2:de:70:ba:83:d1:42:66:d3:3a:de:50:78:
                    59:b7:6b:65:a4:82:d0:9d:4e:a9:1e:4a:08:e8:a0:
                    3f:6d:97:f2:38:26:cb:89:8c:c9:19:84:25:0e:66:
                    a9:67:7f:df:c7:18:ba:71:b4:2d:ce:a1:4e:fe:c5:
                    2b:21:b8:e9:70:c2:d4:af:16:da:d3:78:2e:6b:89:
                    44:70:1d:5d:0b:82:a3:b6:c1:cb:31:b1:82:03:40:
                    10:ee:8c:ef:97:fb:ec:51:10:64:4b:7a:3b:bc:67:
                    ed:ed:c8:98:80:96:ec:6d:2e:ee:7b:23:29:63:cc:
                    a4:5c:09:34:22:75:69:27:b3:c8:94:a1:ad:0c:51:
                    4a:b6:48:46:39:be:aa:12:e9:10:af:22:27:b9:4f:
                    73:27:88:da:14:42:b3:b8:fe:50:57:91:94:44:be:
                    2f:d4:a7:8c:36:ae:f1:00:b5:4d:dc:3d:1c:a6:d1:
                    1c:be:4e:b5:ff:e3:df:a5:8b:0e:34:2e:b0:fa:c6:
                    c2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:56:81:EE:66:DD:D3:0A:77:9B:13:BF:87:86:8E:BD:DD:FD:35:62
            X509v3 Authority Key Identifier:
                keyid:2A:CB:03:DB:51:DD:B7:21:3E:9A:E4:4C:07:C6:BB:7B:82:8B:13:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/3133312e3136312e3233362e302f32322d3232203d3e20323633363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:c5:ad:d7:de:30:10:09:9d:6a:26:f7:ab:9d:d8:35:b4:45:
         f8:6a:26:a5:0f:2a:a2:a5:4c:f8:01:6e:ac:55:17:e4:21:09:
         26:ed:b0:e6:0a:cd:16:20:17:ad:1c:47:90:28:9d:6e:5b:65:
         f4:5e:ea:0c:23:27:1d:bd:22:72:16:42:c5:51:db:ed:9d:39:
         97:75:96:91:86:9d:53:c3:c8:bf:6c:7e:67:c9:55:63:3a:59:
         70:08:33:13:34:c8:e0:de:e2:c0:2f:a7:dc:17:c0:56:47:41:
         d1:50:26:d2:1b:b0:6a:51:cf:68:d3:81:d7:32:71:7f:dc:9f:
         21:d3:85:db:9c:87:56:b8:a3:34:a1:78:aa:d4:2a:c1:a6:76:
         e1:ab:ca:26:31:86:bd:b4:65:33:f8:a1:0b:54:31:c4:84:f6:
         b8:e2:ac:7d:1a:42:28:ee:d6:73:8f:f6:2a:8f:9b:4e:87:dd:
         b2:70:bc:20:bc:3b:03:9c:03:d6:4e:8b:31:b0:cb:b0:bb:15:
         ee:ba:49:5b:4b:86:fe:d6:74:4a:e4:72:7f:0f:77:e6:8e:a5:
         0c:83:dd:30:ed:e8:2b:1a:2b:e4:51:e0:61:ee:0b:3c:f1:21:
         be:1b:ac:2a:44:71:c4:7b:66:8a:f9:4f:6e:3d:11:f2:31:b6:
         eb:b7:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:46 2024 by rpki-client on console-fra.rpki-client.org