Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3133382e3231392e3134302e302f32322d3234203d3e203532323333.roa
File:                     3133382e3231392e3134302e302f32322d3234203d3e203532323333.roa (raw, json)
Hash identifier:          l79NIVKj2DRv4CsMtXzFXZlmfDBdYQngAxvxzIS27xs=
Subject key identifier:   8E:9A:51:3F:5A:08:97:96:B6:D4:1C:18:37:B8:9C:01:DD:FD:2E:B6
Certificate issuer:       /CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
Certificate serial:       34706531C28AC34420B3E59109423C77367B8EAE
Authority key identifier: D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3133382e3231392e3134302e302f32322d3234203d3e203532323333.roa
Signing time:             Tue 05 Mar 2024 18:17:53 +0000
ROA not before:           Tue 05 Mar 2024 18:12:53 +0000
ROA not after:            Tue 04 Mar 2025 18:17:53 +0000
asID:                     52233
IP address blocks:        138.219.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:70:65:31:c2:8a:c3:44:20:b3:e5:91:09:42:3c:77:36:7b:8e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1A55CA9F61A19739707656D810C4C2DDBDB13DF
        Validity
            Not Before: Mar  5 18:12:53 2024 GMT
            Not After : Mar  4 18:17:53 2025 GMT
        Subject: CN=8E9A513F5A089796B6D41C1837B89C01DDFD2EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:c0:41:83:57:a1:c1:e6:a3:78:3f:af:9e:
                    c8:59:4e:af:57:92:67:83:ba:69:da:7a:f4:13:ab:
                    cd:f0:d0:a6:7e:60:9a:aa:62:60:ae:f0:2e:a3:78:
                    ac:64:a6:c3:ef:4f:c8:54:62:56:f6:e8:05:76:36:
                    33:a3:cf:77:ac:0e:e4:bd:de:c8:a3:72:be:20:a0:
                    4e:ee:81:4f:a0:aa:1d:3e:40:e5:d4:7a:9d:bf:9b:
                    f3:b9:c1:17:a7:78:26:01:7f:38:47:ac:9e:04:74:
                    72:23:1e:fb:ad:a6:f0:da:df:c7:5d:46:dd:d0:de:
                    66:ac:2e:37:5f:7a:b8:7f:33:f8:b5:cc:4b:6b:0a:
                    a3:2f:40:f2:d4:4e:b8:ba:38:63:36:7a:8d:43:7d:
                    73:ac:8f:1c:86:7c:a2:d2:91:2d:a9:3d:5d:6a:b1:
                    91:c0:54:0b:2f:31:5c:ac:6c:cc:71:53:27:16:45:
                    da:a7:48:31:e9:a3:ac:6f:e3:5c:01:f7:06:12:30:
                    3d:6c:df:8e:c2:19:31:4f:b2:76:9c:08:40:35:c5:
                    b7:66:9f:65:f7:ec:d5:28:df:25:a3:4b:d3:1a:35:
                    e7:97:29:8d:f8:67:6b:fc:cb:37:01:05:af:cd:ee:
                    e2:99:e6:10:08:1c:d8:f3:43:a4:f3:1b:1f:f7:c1:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9A:51:3F:5A:08:97:96:B6:D4:1C:18:37:B8:9C:01:DD:FD:2E:B6
            X509v3 Authority Key Identifier:
                keyid:D1:A5:5C:A9:F6:1A:19:73:97:07:65:6D:81:0C:4C:2D:DB:DB:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1A55CA9F61A19739707656D810C4C2DDBDB13DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/107759E18E96D074DFBA507C6272A1BEC47A7D8DBF0C1A971BD218A68EF1C154/0/3133382e3231392e3134302e302f32322d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:4e:9b:41:b3:81:d9:ae:26:fe:77:d5:c2:52:ed:1f:83:a0:
         a5:15:e2:80:2c:4e:67:1f:0f:57:f4:89:b8:3d:82:17:e2:0b:
         2d:1f:bc:58:b0:82:be:85:50:58:af:1b:01:b1:4f:a8:0e:76:
         73:62:fd:ca:4b:31:d0:cd:5a:5c:ed:55:8d:27:05:24:e2:89:
         22:af:b3:21:e2:6a:72:3d:a2:8e:bc:77:9d:57:e7:d5:88:3a:
         fd:0f:d5:80:63:a0:58:b1:c7:ee:b1:dc:95:b0:c7:59:46:18:
         5d:45:65:68:5f:77:b7:6c:14:5b:1f:ad:9f:a1:5d:7c:22:8d:
         64:bd:95:d0:5a:3e:1b:ba:21:b2:6e:6b:ef:c3:b4:8d:2d:72:
         c1:84:2d:d6:29:74:32:74:81:ad:8d:99:a5:5a:5e:61:c8:f9:
         3b:4e:29:bf:51:07:1e:bc:3f:0d:53:3e:d0:62:01:b5:ac:5a:
         f1:93:17:9e:fe:88:1c:0d:56:d7:d3:6c:7d:21:e7:4b:53:70:
         78:77:3c:cd:ab:a4:7b:2c:b4:d7:46:46:36:d6:71:a3:37:17:
         32:0b:76:9e:c4:66:18:5b:ea:24:b8:69:e6:d4:e8:e3:6d:0f:
         ce:58:bd:28:71:17:2e:4f:4a:40:81:99:f9:ab:b8:36:54:87:
         93:fd:1b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:33:51 2024 by rpki-client on console-ams.rpki-client.org