Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa
File:                     3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa (raw, json)
Hash identifier:          qIYcDK86TP8co+G6TwfXdJuyFRyTj+T+xl2ccxaKPsw=
Subject key identifier:   E1:F8:E8:63:0C:EC:71:08:B1:C3:35:54:E9:FD:93:B2:7B:99:0E:B5
Certificate issuer:       /CN=DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1
Certificate serial:       6E330D48481BC323B4B8C13011778ED304B650F8
Authority key identifier: DC:9A:CC:F7:76:CB:F0:37:0B:3B:A2:78:3B:A7:A4:A1:14:07:24:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa
Signing time:             Mon 13 May 2024 15:35:00 +0000
ROA not before:           Mon 13 May 2024 15:30:00 +0000
ROA not after:            Mon 12 May 2025 15:35:00 +0000
asID:                     263746
IP address blocks:        138.59.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:33:0d:48:48:1b:c3:23:b4:b8:c1:30:11:77:8e:d3:04:b6:50:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1
        Validity
            Not Before: May 13 15:30:00 2024 GMT
            Not After : May 12 15:35:00 2025 GMT
        Subject: CN=E1F8E8630CEC7108B1C33554E9FD93B27B990EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:55:40:1b:ec:92:7a:41:60:7c:8b:60:7d:
                    bc:4e:b8:53:1a:d1:ae:72:b5:b0:56:27:3a:4f:5f:
                    13:84:05:67:17:b9:60:b2:0d:13:29:e7:5c:eb:0d:
                    6b:72:e4:d3:fe:17:67:e8:1e:2b:fc:36:00:fb:cd:
                    78:c8:43:2d:59:72:8e:2a:bc:18:fb:a3:b0:d6:4b:
                    71:f9:82:ab:bd:c2:00:60:20:56:19:f3:b5:a8:03:
                    e4:69:ac:bd:97:d3:18:e7:82:16:f4:29:c4:86:ec:
                    83:1f:c5:07:fc:38:3c:02:7f:f9:b7:10:01:0f:a6:
                    ba:ba:19:cc:ad:11:c8:4f:2f:e3:d9:6c:9e:35:0c:
                    bd:7c:86:32:4a:c9:bc:60:59:b2:73:50:f2:f0:02:
                    0b:cd:00:d8:a7:69:5e:36:82:fe:54:fa:79:ad:f6:
                    27:32:7f:23:9e:07:13:be:88:8e:31:42:f3:88:bf:
                    b6:30:77:61:33:b6:07:04:0d:5c:ce:7e:f1:54:13:
                    68:8b:77:af:7e:32:23:89:ef:bf:e3:ed:73:20:92:
                    df:d2:f9:b8:ed:78:d3:e5:e3:dc:77:76:b1:c5:7d:
                    1b:28:c3:11:d8:a5:7e:5b:3c:9b:d4:3a:ff:fe:21:
                    5c:26:93:8b:f3:2e:6f:6c:b3:07:88:ef:68:89:27:
                    89:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F8:E8:63:0C:EC:71:08:B1:C3:35:54:E9:FD:93:B2:7B:99:0E:B5
            X509v3 Authority Key Identifier:
                keyid:DC:9A:CC:F7:76:CB:F0:37:0B:3B:A2:78:3B:A7:A4:A1:14:07:24:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC9ACCF776CBF0370B3BA2783BA7A4A1140724D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/389E91678DEF91CE87465CAD49C02124F0CF27B3CDD885B84DCC12A736D4B58A/0/3133382e35392e3137322e302f32322d3234203d3e20323633373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:89:45:7b:26:a6:8c:6f:62:d6:cd:41:8f:c7:ee:a5:ed:78:
         8b:67:f9:50:b3:8d:18:1e:cd:a7:1d:87:dc:3f:65:09:f2:b5:
         88:9f:73:1a:73:5c:cf:ec:42:b6:50:da:0f:72:5c:38:06:1a:
         93:b8:05:6a:d9:ed:2b:9c:5c:7a:52:27:90:87:46:ca:f8:4a:
         9b:5e:90:3d:07:77:90:e2:dd:36:a9:a0:0a:86:89:d6:6c:14:
         b5:c7:26:02:03:27:aa:1a:07:3f:a6:92:08:30:f1:ee:8d:b4:
         e3:72:6d:7e:18:82:a4:5d:82:3c:61:5c:23:14:2a:f7:d0:7c:
         e8:72:47:a4:6d:4c:59:52:7d:68:18:f2:86:19:26:be:24:8a:
         4a:c5:f8:a9:aa:6f:6f:24:cc:85:fc:a1:eb:8e:20:52:8f:01:
         44:58:82:04:b9:a3:ff:6f:8a:f6:c1:41:36:cc:f0:52:0d:50:
         3d:55:92:c4:7b:9b:87:08:15:e6:de:61:c3:2c:54:78:3a:89:
         0e:97:d7:1b:70:4c:bb:1d:a2:f4:b2:e2:fa:b6:43:91:7c:0c:
         50:48:c7:b9:92:27:dc:de:5b:fb:60:d4:d2:0a:9b:d4:78:93:
         27:18:e9:75:a1:bd:58:36:87:98:4f:2b:66:0e:23:b8:da:a8:
         c1:13:a4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:13:39 2024 by rpki-client on console-ams.rpki-client.org