Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/3133312e3136312e3233362e302f32342d3234203d3e20323633363837.roa
File:                     3133312e3136312e3233362e302f32342d3234203d3e20323633363837.roa (raw, json)
Hash identifier:          sEMvMCpGehd3z/e8D56zgJybf/IZj4ASIwbWHB4yt7U=
Subject key identifier:   73:B0:89:50:51:AB:BA:D2:D7:AA:09:40:3F:7B:69:42:9D:E0:5D:4B
Certificate issuer:       /CN=2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343
Certificate serial:       3ECAF8CEB09B4DBC095132EF8135FFAFE5902F19
Authority key identifier: 2A:CB:03:DB:51:DD:B7:21:3E:9A:E4:4C:07:C6:BB:7B:82:8B:13:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/3133312e3136312e3233362e302f32342d3234203d3e20323633363837.roa
Signing time:             Tue 05 Mar 2024 17:49:21 +0000
ROA not before:           Tue 05 Mar 2024 17:44:21 +0000
ROA not after:            Tue 04 Mar 2025 17:49:21 +0000
asID:                     263687
IP address blocks:        131.161.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ca:f8:ce:b0:9b:4d:bc:09:51:32:ef:81:35:ff:af:e5:90:2f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343
        Validity
            Not Before: Mar  5 17:44:21 2024 GMT
            Not After : Mar  4 17:49:21 2025 GMT
        Subject: CN=73B0895051ABBAD2D7AA09403F7B69429DE05D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:ec:26:9b:f3:aa:53:e8:6d:70:c0:bf:1a:
                    8e:31:40:16:5f:9f:75:47:da:d7:80:13:93:5f:3d:
                    97:46:7d:27:b5:6b:b5:85:a0:2b:76:7e:92:58:f2:
                    a5:b6:17:12:54:00:a7:f2:26:de:35:a5:de:23:0d:
                    f9:15:c6:10:db:ce:bb:61:64:86:f1:4e:c2:bb:3a:
                    ce:66:24:d9:47:fa:73:c4:0b:03:05:7b:1c:ac:84:
                    56:2b:a4:0c:a5:4b:14:a3:4b:03:b6:ce:7b:ac:bb:
                    90:85:f4:2a:41:f6:80:f7:91:47:2c:b3:82:8a:e9:
                    95:e0:91:5f:b4:88:03:39:1a:fa:22:a0:ec:b6:6c:
                    18:e3:91:5b:00:30:a8:28:46:05:70:31:e5:f1:f0:
                    e1:d3:1e:46:3b:12:58:da:d3:87:3f:53:22:db:63:
                    6e:83:ef:25:49:a4:f6:83:9a:80:89:2c:f4:1d:52:
                    42:a6:d7:5d:57:f8:04:f3:c7:1b:81:82:58:cc:14:
                    5f:81:2f:46:35:04:35:c9:79:15:6d:d1:9f:f6:58:
                    a2:71:4b:a0:bb:27:c2:09:11:06:d2:a1:5e:fe:e7:
                    ad:29:f2:56:3a:52:6d:98:d7:ce:28:4e:79:52:a5:
                    b4:e1:2c:48:0d:06:63:10:f8:6b:42:24:13:ac:f1:
                    fa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B0:89:50:51:AB:BA:D2:D7:AA:09:40:3F:7B:69:42:9D:E0:5D:4B
            X509v3 Authority Key Identifier:
                keyid:2A:CB:03:DB:51:DD:B7:21:3E:9A:E4:4C:07:C6:BB:7B:82:8B:13:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ACB03DB51DDB7213E9AE44C07C6BB7B828B1343.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE4A5B16231DD3BC79FD12E6C963E06FDC24A235177CC43CA5B6A0FE4FCF4BB6/0/3133312e3136312e3233362e302f32342d3234203d3e20323633363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:45:e8:a1:cf:40:be:71:2f:95:b9:f2:37:37:8f:9e:a2:fa:
         2d:58:68:e6:b6:52:c6:39:69:c8:53:51:ca:26:6c:e4:74:82:
         cf:f4:60:8c:32:81:6c:8a:f6:01:3a:b4:46:c1:b2:c6:02:c2:
         44:5e:bc:f5:9a:6d:78:01:c9:ed:52:fd:f9:69:e6:fd:bf:4e:
         50:5a:4f:95:ee:15:77:ef:cc:81:88:55:9d:f4:03:0d:e3:18:
         04:bc:27:49:04:a9:0c:06:c3:da:b0:fa:69:75:94:de:f9:01:
         bb:7d:65:3c:f3:d7:0a:13:ab:d1:f8:81:f5:0f:09:e7:9b:93:
         ea:2c:60:b2:ea:2a:51:27:d0:dc:e0:33:41:a0:8b:a9:b7:94:
         65:c4:44:4b:f3:47:ad:c1:5e:8a:59:85:0c:c5:8c:2c:e7:53:
         d6:6f:72:08:01:f4:eb:73:ba:99:88:e2:bf:5d:3d:95:54:b1:
         95:da:c8:63:3f:8f:a3:bc:73:af:01:29:7d:27:3b:00:1d:e5:
         ad:a0:3b:4d:2f:e7:51:c3:9a:1a:97:20:d0:62:77:a8:f2:43:
         ef:58:0d:bf:f9:ec:89:cc:2e:df:c6:6f:c5:a2:5a:09:43:44:
         7e:e0:00:3c:ce:cf:21:ad:56:cc:92:2b:21:1b:df:4f:4c:4d:
         fb:13:9b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:08 2024 by rpki-client on console-ams.rpki-client.org