Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3133382e39372e3135362e302f32322d3232203d3e203532343439.roa
File:                     3133382e39372e3135362e302f32322d3232203d3e203532343439.roa (raw, json)
Hash identifier:          jVLdmBHHSOncJUoTopBntW47sGm5BTPwIAWntpUN9Pk=
Subject key identifier:   36:32:9D:7E:5C:DC:85:9A:D8:70:E9:F6:BE:3E:07:93:AE:85:F1:20
Certificate issuer:       /CN=A6092CA6DF0448374137DE890AB584D961C1028E
Certificate serial:       37F35658EEED0CB917DF6EFA8911E0D475A2B29B
Authority key identifier: A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3133382e39372e3135362e302f32322d3232203d3e203532343439.roa
Signing time:             Tue 05 Mar 2024 18:06:41 +0000
ROA not before:           Tue 05 Mar 2024 18:01:41 +0000
ROA not after:            Tue 04 Mar 2025 18:06:41 +0000
asID:                     52449
IP address blocks:        138.97.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f3:56:58:ee:ed:0c:b9:17:df:6e:fa:89:11:e0:d4:75:a2:b2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6092CA6DF0448374137DE890AB584D961C1028E
        Validity
            Not Before: Mar  5 18:01:41 2024 GMT
            Not After : Mar  4 18:06:41 2025 GMT
        Subject: CN=36329D7E5CDC859AD870E9F6BE3E0793AE85F120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:94:be:49:d7:ab:6b:46:01:f0:68:f9:36:
                    73:5f:e8:5a:ac:4c:bc:80:03:c6:35:4f:15:13:39:
                    47:af:35:05:ce:ea:d8:25:7e:b3:be:72:ee:d8:7e:
                    18:d1:c7:21:a9:cb:cb:9b:bb:42:bc:de:62:83:ef:
                    0c:d1:04:64:a4:81:3b:0b:db:75:11:a1:5b:fa:6a:
                    b9:ce:a0:91:3f:2f:2b:5a:83:4d:1a:5e:ed:8b:89:
                    44:bd:5e:0f:28:e7:d7:f3:7c:e0:aa:31:1c:ab:5b:
                    f3:4b:1a:47:51:12:0f:e6:2d:2c:11:71:8d:4e:08:
                    b6:24:9e:81:9f:90:8b:0a:65:9e:b3:d4:f9:a6:86:
                    7b:30:c7:16:95:cb:f0:65:ce:11:d4:10:a9:9f:a3:
                    0d:9c:4d:09:1e:c6:67:3d:a2:e9:77:39:f3:18:26:
                    20:19:e8:9e:d7:44:91:71:5b:7c:6d:ce:4e:ed:10:
                    8c:54:83:92:9e:ef:7e:a9:5a:e0:b7:27:8c:20:a6:
                    56:c4:10:fa:33:ad:62:d6:4a:c9:7d:16:31:e3:5c:
                    d1:f4:af:aa:eb:da:a0:9c:ea:73:12:92:47:5a:77:
                    3d:ae:1c:6e:1c:6a:2e:35:e0:f3:1b:1c:26:c8:d8:
                    c6:12:54:18:62:27:59:30:08:ce:a5:49:a5:1b:e7:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:32:9D:7E:5C:DC:85:9A:D8:70:E9:F6:BE:3E:07:93:AE:85:F1:20
            X509v3 Authority Key Identifier:
                keyid:A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3133382e39372e3135362e302f32322d3232203d3e203532343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:b5:1e:ef:da:b4:bc:2a:ff:90:09:ae:39:82:73:61:43:32:
         5e:d9:68:d9:02:1e:9a:9c:02:31:a2:b4:79:85:5f:f1:84:ad:
         9c:3f:7a:a3:e5:0f:4a:28:d2:d2:28:0e:bf:2c:bd:17:0b:a2:
         c7:c2:2b:56:c3:d5:14:be:c7:6d:a2:f8:3d:fd:d3:43:3a:56:
         7a:59:74:7e:27:51:aa:70:e8:14:3b:75:8d:64:2f:5c:d1:87:
         04:38:67:08:81:b7:fa:a0:67:d0:04:5c:1b:76:3c:2b:42:fb:
         27:cf:df:57:a3:82:66:ca:4e:2d:72:33:44:cb:ca:b8:a7:e6:
         e3:b5:4a:67:2a:7a:2c:08:b1:fa:4b:4e:ea:8c:05:ef:6c:c7:
         c2:e1:24:17:cb:06:8f:9f:75:b2:86:41:75:34:16:f4:4d:7e:
         2f:48:73:4b:5d:de:6d:d6:34:ce:53:4c:ec:58:5c:ea:3e:28:
         d8:1d:63:04:a8:1f:5f:29:e7:c5:26:eb:3f:91:8f:05:af:db:
         f0:9b:26:1c:70:0c:9e:c1:46:3c:b3:f6:07:b8:c8:c6:21:0c:
         ca:f7:10:68:56:0c:31:b5:a8:79:5b:90:3b:44:d4:71:b7:f6:
         b8:97:cd:73:a0:a7:e3:8d:82:7b:ed:7b:d2:fd:b2:1f:21:af:
         a9:33:a1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org