Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3133382e39342e3134342e302f32322d3234203d3e203232383639.roa
File:                     3133382e39342e3134342e302f32322d3234203d3e203232383639.roa (raw, json)
Hash identifier:          FpcK68/NaTbr/z67C9FtUkFJLEy4tTKRacqTvw1Q1HI=
Subject key identifier:   C4:D4:1D:EA:9F:F6:EB:31:2F:73:D9:D5:54:91:DF:75:AA:90:81:2B
Certificate issuer:       /CN=231411337300474BC5489725C8707684F70A876D
Certificate serial:       4A9C77CDE7FD663ECA4E793FA774EA60AD506427
Authority key identifier: 23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3133382e39342e3134342e302f32322d3234203d3e203232383639.roa
Signing time:             Tue 05 Mar 2024 18:15:54 +0000
ROA not before:           Tue 05 Mar 2024 18:10:54 +0000
ROA not after:            Tue 04 Mar 2025 18:15:54 +0000
asID:                     22869
IP address blocks:        138.94.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9c:77:cd:e7:fd:66:3e:ca:4e:79:3f:a7:74:ea:60:ad:50:64:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231411337300474BC5489725C8707684F70A876D
        Validity
            Not Before: Mar  5 18:10:54 2024 GMT
            Not After : Mar  4 18:15:54 2025 GMT
        Subject: CN=C4D41DEA9FF6EB312F73D9D55491DF75AA90812B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:70:a5:07:9f:1e:06:c4:67:81:3b:c0:a2:
                    54:be:24:26:1a:4a:c6:11:99:28:7f:aa:7b:a4:0e:
                    db:11:51:ac:f7:17:49:e9:de:cd:d6:d3:9a:13:fb:
                    3a:44:4d:46:21:87:8b:9f:36:8b:c5:1b:de:fa:9f:
                    ad:a5:80:83:a8:4d:cc:65:9b:d8:7d:d6:5d:36:3e:
                    89:20:3c:e3:b9:66:d8:2c:07:7f:51:84:86:7d:77:
                    02:6e:1b:bc:41:48:ef:71:12:05:63:6b:e4:5d:81:
                    e7:6c:3a:98:01:cb:4a:36:68:9b:80:48:32:58:bd:
                    5e:ea:f1:3f:59:85:34:e6:b5:72:fe:9e:79:31:bc:
                    8d:04:c8:10:20:36:04:66:1e:c8:91:fd:42:77:c1:
                    60:63:f4:0c:af:13:7f:43:29:89:a0:d7:7f:5e:b3:
                    ab:9e:15:c8:50:bc:a5:07:37:45:3c:43:da:ab:2f:
                    c7:66:a4:3b:cb:7e:20:fb:1d:fe:77:ae:6a:91:82:
                    e1:cf:3f:cc:25:5c:b0:8d:15:59:dd:10:03:f9:a6:
                    86:3c:7e:4f:fd:59:42:66:cd:25:41:65:88:1d:db:
                    98:f0:c0:f0:66:e2:a2:3e:e0:bd:90:d4:b3:79:97:
                    1d:57:43:22:44:b3:19:7d:17:91:a3:01:68:1e:5f:
                    6d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D4:1D:EA:9F:F6:EB:31:2F:73:D9:D5:54:91:DF:75:AA:90:81:2B
            X509v3 Authority Key Identifier:
                keyid:23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/3133382e39342e3134342e302f32322d3234203d3e203232383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:97:63:54:d6:ff:d0:39:dd:78:62:6a:99:4a:41:a3:82:35:
         f0:95:40:c3:8f:2b:3f:bb:1b:b1:48:dd:83:57:60:a6:b4:ad:
         de:4d:9b:48:7e:16:13:aa:7c:eb:1f:81:fa:24:4f:40:af:17:
         b8:14:fa:00:98:82:7f:97:89:30:e1:e9:dd:1e:7e:0c:d3:10:
         49:a7:e2:d9:7a:3e:d1:32:db:b3:2d:92:06:22:29:cf:9d:20:
         59:fe:48:14:6d:23:24:70:40:51:5c:2e:89:76:b6:0a:47:35:
         f4:2b:4d:f4:79:87:43:89:d7:c3:62:f1:0b:cd:91:76:e5:55:
         88:eb:35:69:27:9b:3f:15:22:c7:de:be:f6:5a:61:09:9d:6a:
         ff:f8:d2:92:29:18:b4:12:bc:71:d3:41:8f:1e:1d:d3:8b:2c:
         f1:1a:3a:95:1e:00:7c:ce:96:3b:d2:9c:e6:08:a4:57:24:20:
         ae:f0:9b:50:7c:45:67:7d:87:78:44:bb:fe:7b:ce:07:32:d5:
         bd:7b:81:03:af:2b:b3:68:3d:5a:78:73:5c:5d:33:e5:9b:b3:
         64:33:35:f4:39:c6:cd:af:2a:d6:aa:ce:c9:a7:87:90:91:d7:
         f2:a9:d4:4b:fa:13:7a:b6:bd:ff:89:e1:8a:8f:d2:8a:25:50:
         58:a4:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:35 2024 by rpki-client on console-fra.rpki-client.org