Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07D0AD335E61C788F1CFF1422E994CD61DBBB16D1B22DC8EECAA6875470393D3/0/3133382e39342e3134302e302f32322d3234203d3e203238333937.roa
File:                     3133382e39342e3134302e302f32322d3234203d3e203238333937.roa (raw, json)
Hash identifier:          5MXwWE8Dej0HWKthdKvx2tP2K43FZ3HQo4Xh+sn9xU8=
Subject key identifier:   2C:C7:43:C0:3E:6A:21:F1:C4:10:55:BF:84:29:9A:6F:5A:70:3F:3B
Certificate issuer:       /CN=854635177B013A723EEB20E0A79AEBE128081C13
Certificate serial:       335B52105E58ECB005EB6D1D043758055A96584E
Authority key identifier: 85:46:35:17:7B:01:3A:72:3E:EB:20:E0:A7:9A:EB:E1:28:08:1C:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/854635177B013A723EEB20E0A79AEBE128081C13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07D0AD335E61C788F1CFF1422E994CD61DBBB16D1B22DC8EECAA6875470393D3/0/3133382e39342e3134302e302f32322d3234203d3e203238333937.roa
Signing time:             Tue 05 Mar 2024 18:19:21 +0000
ROA not before:           Tue 05 Mar 2024 18:14:21 +0000
ROA not after:            Tue 04 Mar 2025 18:19:21 +0000
asID:                     28397
IP address blocks:        138.94.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07D0AD335E61C788F1CFF1422E994CD61DBBB16D1B22DC8EECAA6875470393D3/0/854635177B013A723EEB20E0A79AEBE128081C13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07D0AD335E61C788F1CFF1422E994CD61DBBB16D1B22DC8EECAA6875470393D3/0/854635177B013A723EEB20E0A79AEBE128081C13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/854635177B013A723EEB20E0A79AEBE128081C13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5b:52:10:5e:58:ec:b0:05:eb:6d:1d:04:37:58:05:5a:96:58:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854635177B013A723EEB20E0A79AEBE128081C13
        Validity
            Not Before: Mar  5 18:14:21 2024 GMT
            Not After : Mar  4 18:19:21 2025 GMT
        Subject: CN=2CC743C03E6A21F1C41055BF84299A6F5A703F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:bb:90:99:62:67:60:ba:c9:97:c0:21:33:
                    18:f4:fc:b4:fa:53:fe:64:6f:af:d2:7a:a9:09:b7:
                    55:dd:25:00:30:42:86:8c:af:ff:dd:be:59:fd:e8:
                    04:f8:b6:70:ce:00:6d:58:2b:c5:a5:d6:63:ed:1e:
                    40:55:b6:86:8c:bf:2b:85:e9:6f:29:1d:30:4d:46:
                    ec:af:02:7b:fb:41:fa:0c:a2:c7:90:d6:4e:c8:73:
                    99:d0:b7:a9:9b:b0:5f:d9:18:1e:50:23:53:fc:96:
                    5c:23:30:7a:ae:98:ac:a5:54:12:2f:61:2a:fe:61:
                    78:e7:4f:3e:4a:71:3c:aa:98:63:08:7c:ac:d5:2e:
                    14:33:c8:c1:d1:0a:c7:f2:70:04:84:7c:e7:08:d5:
                    f6:a1:69:1c:d2:a4:de:89:6b:37:f3:b8:56:be:53:
                    f2:8c:91:c2:75:c5:c3:7e:17:25:17:ce:06:94:66:
                    d7:20:7a:60:5d:03:56:b8:ee:b3:0d:e5:6f:dd:5a:
                    25:c6:b8:e8:2c:45:9e:ac:af:ef:41:b7:ed:e6:a9:
                    9b:32:e5:4d:51:e7:d8:ef:66:18:e4:40:b8:df:bd:
                    8b:5b:29:4c:35:d5:6c:d1:c5:27:bd:d4:c2:d4:90:
                    4b:4f:3f:95:44:5b:f9:4f:fe:ac:ab:22:bb:f6:06:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C7:43:C0:3E:6A:21:F1:C4:10:55:BF:84:29:9A:6F:5A:70:3F:3B
            X509v3 Authority Key Identifier:
                keyid:85:46:35:17:7B:01:3A:72:3E:EB:20:E0:A7:9A:EB:E1:28:08:1C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07D0AD335E61C788F1CFF1422E994CD61DBBB16D1B22DC8EECAA6875470393D3/0/854635177B013A723EEB20E0A79AEBE128081C13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/854635177B013A723EEB20E0A79AEBE128081C13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07D0AD335E61C788F1CFF1422E994CD61DBBB16D1B22DC8EECAA6875470393D3/0/3133382e39342e3134302e302f32322d3234203d3e203238333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:aa:13:dc:94:0f:f5:14:a8:e0:75:4d:96:78:63:de:67:7e:
         86:bb:0c:3c:97:f9:18:f5:43:21:32:55:00:d9:a6:79:52:aa:
         4d:83:71:66:ac:da:35:fb:53:2f:92:1b:3d:54:7f:0a:fe:51:
         c4:fb:21:f9:59:34:3d:fa:cb:bb:39:ab:3f:7b:09:7d:ef:d5:
         53:4a:3c:79:5c:1b:db:72:40:24:9c:8c:40:2e:c3:97:f1:a7:
         36:16:75:5c:b2:2c:d3:f3:87:91:e4:69:f7:28:48:65:e6:83:
         b1:14:b8:ef:f8:55:5d:82:23:fe:93:f6:7f:f9:6c:02:e1:3a:
         81:f3:0f:98:c1:7f:e2:bf:62:b0:f3:91:25:86:90:c6:ef:0e:
         c1:3a:9c:55:95:a9:ad:15:8d:49:df:23:af:39:49:ad:11:e2:
         54:a1:26:fa:40:72:cf:93:d3:f4:70:92:d7:ac:22:ea:b8:df:
         54:b5:ad:7e:77:91:e4:9e:9e:57:9e:24:e8:85:c3:59:73:5f:
         97:0b:5f:0e:ca:cf:0b:4c:d0:69:85:3a:1b:6b:05:28:11:60:
         75:57:06:6e:75:ff:80:85:c2:a4:ca:89:4b:b7:5b:97:6f:33:
         e5:88:10:c5:2d:c3:ec:e7:7d:03:33:46:83:f6:06:01:49:0e:
         9c:49:44:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:54:28 2024 by rpki-client on console-fra.rpki-client.org