Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/3133382e3138352e3131322e302f32322d3234203d3e203238303636.roa
File:                     3133382e3138352e3131322e302f32322d3234203d3e203238303636.roa (raw, json)
Hash identifier:          +oboDl11eignNSLRoDqSdLRfBjRlygu6Z9ntPuK9J1M=
Subject key identifier:   E4:09:DA:0D:53:96:E9:E1:3E:25:7B:65:CD:43:EA:5D:8E:29:AF:03
Certificate issuer:       /CN=FB2370BF9B986D58F8105A4410005CD845985926
Certificate serial:       236414C999B7BD79E49830CE0261119E36599764
Authority key identifier: FB:23:70:BF:9B:98:6D:58:F8:10:5A:44:10:00:5C:D8:45:98:59:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/3133382e3138352e3131322e302f32322d3234203d3e203238303636.roa
Signing time:             Tue 05 Mar 2024 17:41:24 +0000
ROA not before:           Tue 05 Mar 2024 17:36:24 +0000
ROA not after:            Tue 04 Mar 2025 17:41:24 +0000
asID:                     28066
IP address blocks:        138.185.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:64:14:c9:99:b7:bd:79:e4:98:30:ce:02:61:11:9e:36:59:97:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB2370BF9B986D58F8105A4410005CD845985926
        Validity
            Not Before: Mar  5 17:36:24 2024 GMT
            Not After : Mar  4 17:41:24 2025 GMT
        Subject: CN=E409DA0D5396E9E13E257B65CD43EA5D8E29AF03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f2:b5:be:38:bc:cc:38:1f:0b:f9:10:c1:e0:
                    0d:53:21:e6:8e:55:f4:b9:71:76:7f:b1:4c:fc:ec:
                    18:92:5a:af:32:47:07:2f:4c:9f:74:38:48:c0:d2:
                    eb:13:6b:5c:c6:17:9d:ce:d1:2d:58:7d:98:41:db:
                    eb:c9:d0:80:3e:cd:86:21:75:5e:c9:0a:e0:ce:b4:
                    08:81:c6:74:5a:2a:12:a5:54:87:9d:a5:9e:89:59:
                    8e:4d:e1:30:7d:f7:60:2b:cd:6d:d2:5e:ad:ae:99:
                    ad:fd:01:d1:8d:fd:cd:70:fc:b1:6d:9f:b0:c9:12:
                    c3:21:9b:8f:a6:c7:36:a6:4e:68:24:47:7b:68:3a:
                    82:75:81:11:13:ae:aa:ed:9f:2a:bd:df:43:2d:78:
                    10:20:84:08:83:ea:31:32:1d:ce:45:39:34:90:1d:
                    98:25:ff:13:29:df:cb:f1:37:a9:57:38:a4:31:eb:
                    f5:68:6d:46:1d:2a:e2:b8:a1:e2:2c:b8:ef:35:d1:
                    3e:50:61:bb:b7:d5:f4:f6:f7:28:7f:e4:ba:c6:a4:
                    46:07:fb:3e:09:68:6a:f4:d5:ec:b4:c5:2a:51:35:
                    13:82:ef:8b:f2:e3:68:2d:9a:49:f6:1f:8d:d4:1e:
                    02:f7:d5:96:bc:e3:95:c7:02:c3:32:8e:58:58:92:
                    fb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:09:DA:0D:53:96:E9:E1:3E:25:7B:65:CD:43:EA:5D:8E:29:AF:03
            X509v3 Authority Key Identifier:
                keyid:FB:23:70:BF:9B:98:6D:58:F8:10:5A:44:10:00:5C:D8:45:98:59:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/3133382e3138352e3131322e302f32322d3234203d3e203238303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:6c:18:71:bb:6a:6b:ab:46:7b:a4:a5:81:1c:d6:25:d9:7d:
         f3:83:03:fe:74:03:85:2c:28:1f:59:a3:e5:43:3b:8c:f2:0a:
         38:77:16:74:32:94:a1:88:22:25:f6:f2:78:e3:1f:ef:90:22:
         1a:43:de:5f:f0:d8:ba:bb:a9:0c:06:b8:13:6d:c3:55:a0:0c:
         95:63:52:0e:53:38:25:0d:f8:96:65:f4:e5:d1:0d:69:63:8a:
         e7:65:c1:b2:b3:37:f7:e8:7d:7d:6e:ec:b1:1f:67:0e:9e:c9:
         1a:67:86:44:7f:d5:34:47:9c:f9:de:91:f8:d0:c5:13:b0:ff:
         1d:e4:23:30:6d:e2:22:47:af:44:23:24:f1:7e:51:03:53:52:
         d9:4e:be:2e:7d:bb:0c:5a:d8:53:c6:cb:ee:10:3c:a9:2e:53:
         cd:68:ba:ac:ea:f9:57:f2:ca:4a:b1:af:d3:b2:4b:97:d0:b9:
         72:2c:94:8b:7b:e1:c1:a6:9b:8a:d0:c7:26:24:c6:5b:b3:48:
         74:a8:6a:97:1e:fd:b6:7c:39:1b:cb:0a:76:2a:66:e3:83:7d:
         b8:6f:3e:71:ca:84:cb:08:47:22:23:1c:be:0f:91:6b:fe:d8:
         46:d2:36:a8:59:7b:73:ad:5c:5b:97:9d:7c:d7:27:ec:78:ce:
         44:fb:a3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:46:54 2024 by rpki-client on console-fra.rpki-client.org