Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3133382e39342e3231362e302f32322d3232203d3e20323633373434.roa
File:                     3133382e39342e3231362e302f32322d3232203d3e20323633373434.roa (raw, json)
Hash identifier:          RDir2eUbMzAVJBBmP1D2kD2a90pRL1EKbGg4GzPFN0E=
Subject key identifier:   76:31:E6:6C:99:2F:0F:99:46:1D:7A:90:81:AD:AD:95:05:95:04:EE
Certificate issuer:       /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial:       59FA80484337E4E0D8A385962D8B6158EDA12DA0
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3133382e39342e3231362e302f32322d3232203d3e20323633373434.roa
Signing time:             Tue 05 Mar 2024 17:45:13 +0000
ROA not before:           Tue 05 Mar 2024 17:40:13 +0000
ROA not after:            Tue 04 Mar 2025 17:45:13 +0000
asID:                     263744
IP address blocks:        138.94.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fa:80:48:43:37:e4:e0:d8:a3:85:96:2d:8b:61:58:ed:a1:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
        Validity
            Not Before: Mar  5 17:40:13 2024 GMT
            Not After : Mar  4 17:45:13 2025 GMT
        Subject: CN=7631E66C992F0F99461D7A9081ADAD95059504EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:21:10:09:87:c7:48:5e:82:16:9d:1f:8d:
                    5c:f4:5b:de:82:ed:08:7b:a5:00:dd:43:61:c9:c6:
                    b4:98:66:a9:50:b1:94:1d:66:e7:76:a4:4e:4c:ff:
                    f8:bd:26:d7:41:34:3e:64:7d:c9:c4:c7:d2:d0:0a:
                    37:de:da:63:a7:4e:c1:4d:7e:91:c9:8f:ab:a8:0c:
                    67:b0:21:a1:5f:cf:c0:ba:d3:0c:50:a1:10:5d:4f:
                    b1:f3:ce:80:2e:5b:3a:e0:eb:7e:49:92:b6:29:ac:
                    f8:37:c7:5e:8a:e9:32:14:01:7c:2e:8f:df:ef:b0:
                    31:a8:b2:7c:71:2b:8c:5e:2a:8f:3d:70:84:5c:7f:
                    b9:8a:90:20:60:ee:9c:91:62:c0:7f:e3:da:e6:95:
                    e3:94:27:1c:65:13:31:ba:b2:70:d7:84:11:53:6b:
                    7f:04:ce:eb:d5:80:03:0b:61:6a:bd:ad:81:21:9f:
                    15:36:71:96:e0:65:37:b5:a9:7b:21:5a:40:90:28:
                    26:6d:c1:a2:69:0c:21:58:57:cf:9a:a6:94:da:6e:
                    50:61:8c:e5:34:7a:95:74:a1:d1:31:68:1a:a0:69:
                    7b:16:5c:5d:d5:0e:b1:7d:da:d2:3c:32:0c:13:8c:
                    10:a4:c2:b8:8b:fd:00:04:ad:9d:5b:c4:27:7e:68:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:31:E6:6C:99:2F:0F:99:46:1D:7A:90:81:AD:AD:95:05:95:04:EE
            X509v3 Authority Key Identifier:
                keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3133382e39342e3231362e302f32322d3232203d3e20323633373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:d7:15:14:d0:92:4f:f1:50:17:cb:49:3f:37:96:b9:2f:54:
         06:aa:a1:9c:46:02:eb:44:50:3b:1c:e9:ca:53:e8:e1:93:f1:
         f8:0e:b2:66:48:d7:dc:85:a4:fa:2c:19:50:ee:a8:06:8d:7a:
         55:2c:61:38:25:5d:54:db:95:ca:22:93:da:5c:50:bb:c1:40:
         08:bd:7c:7a:95:79:3a:44:76:50:68:2e:1e:02:82:7f:91:fd:
         4f:be:76:7c:72:e2:d1:6c:8c:a0:7c:7f:4d:8f:40:d5:40:7f:
         0a:e7:1b:4d:34:0b:ed:76:0d:33:20:f7:00:83:2a:77:46:62:
         15:09:7d:07:87:14:58:e0:0b:5d:bf:12:aa:d6:d6:38:56:f8:
         97:5b:20:8f:d1:da:de:34:b7:26:e4:05:db:83:04:bd:49:1b:
         30:fd:a1:4a:cc:6b:5d:71:d6:d2:88:9d:84:37:4e:23:20:03:
         0a:5f:61:3d:c5:0a:9e:9d:03:f6:92:09:ab:30:23:b3:92:35:
         1f:78:48:ed:f1:e3:60:33:30:ed:2b:09:ab:0e:d2:31:d0:23:
         7b:4e:b8:fe:a0:e3:7e:1b:6e:1d:8b:69:ce:ff:ab:ec:57:31:
         8b:ca:c5:5a:d7:a7:f1:91:86:17:c8:9b:08:5b:8b:d3:ef:55:
         bc:cd:14:94
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUWfqASEM35ODYo4WWLYthWO2hLaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMyRDcxMDYyNzUxNzczQjVGQTUxQUMwQUI2OTEyNzgy
NkY3NTZBMjAeFw0yNDAzMDUxNzQwMTNaFw0yNTAzMDQxNzQ1MTNaMDMxMTAvBgNV
BAMTKDc2MzFFNjZDOTkyRjBGOTk0NjFEN0E5MDgxQURBRDk1MDU5NTA0RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYgiEQCYfHSF6CFp0fjVz0W96C
7Qh7pQDdQ2HJxrSYZqlQsZQdZud2pE5M//i9JtdBND5kfcnEx9LQCjfe2mOnTsFN
fpHJj6uoDGewIaFfz8C60wxQoRBdT7HzzoAuWzrg635JkrYprPg3x16K6TIUAXwu
j9/vsDGosnxxK4xeKo89cIRcf7mKkCBg7pyRYsB/49rmleOUJxxlEzG6snDXhBFT
a38EzuvVgAMLYWq9rYEhnxU2cZbgZTe1qXshWkCQKCZtwaJpDCFYV8+appTablBh
jOU0epV0odExaBqgaXsWXF3VDrF92tI8MgwTjBCkwriL/QAErZ1bxCd+aFifAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUdjHmbJkvD5lGHXqQga2tlQWVBO4wHwYDVR0j
BBgwFoAUYy1xBidRdztfpRrAq2kSeCb3VqIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDNBRTFBQzMzMEVBQzhBNjNEMDIzMzA3NDI3NTNBQzZG
RTdGMDI4MDQyM0Q0QTQxQUFENDc4MzBFOTlEMDk5LzAvNjMyRDcxMDYyNzUxNzcz
QjVGQTUxQUMwQUI2OTEyNzgyNkY3NTZBMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MzJENzEwNjI3NTE3NzNCNUZB
NTFBQzBBQjY5MTI3ODI2Rjc1NkEyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTAzQUUxQUMzMzBFQUM4QTYzRDAyMzMwNzQyNzUzQUM2RkU3RjAyODA0
MjNENEE0MUFBRDQ3ODMwRTk5RDA5OS8wLzMxMzMzODJlMzkzNDJlMzIzMTM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMzMzczNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCil7Y
MA0GCSqGSIb3DQEBCwUAA4IBAQAG1xUU0JJP8VAXy0k/N5a5L1QGqqGcRgLrRFA7
HOnKU+jhk/H4DrJmSNfchaT6LBlQ7qgGjXpVLGE4JV1U25XKIpPaXFC7wUAIvXx6
lXk6RHZQaC4eAoJ/kf1PvnZ8cuLRbIygfH9Nj0DVQH8K5xtNNAvtdg0zIPcAgyp3
RmIVCX0HhxRY4AtdvxKq1tY4VviXWyCP0dreNLcm5AXbgwS9SRsw/aFKzGtdcdbS
iJ2EN04jIAMKX2E9xQqenQP2kgmrMCOzkjUfeEjt8eNgMzDtKwmrDtIx0CN7Trj+
oON+G24di2nO/6vsVzGLysVa16fxkYYXyJsIW4vT71W8zRSU
-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:04 2024 by rpki-client on console-ams.rpki-client.org