Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/3133382e3132322e362e302f32342d3234203d3e20323639393734.roa
File:                     3133382e3132322e362e302f32342d3234203d3e20323639393734.roa (raw, json)
Hash identifier:          hEfvyINiLKEgrjDE4QSLwyAwztLj0METyXtX0WKoXAQ=
Subject key identifier:   50:BD:DE:65:4A:49:28:62:43:E0:AF:D6:2C:E6:67:B4:CA:4C:C4:C2
Certificate issuer:       /CN=27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F
Certificate serial:       53776A384F1BB95823C922B5BC22EA1F1311E5D2
Authority key identifier: 27:B2:C2:0B:7F:3B:89:AC:F8:EE:F9:84:3F:F5:DE:D4:D0:58:37:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/3133382e3132322e362e302f32342d3234203d3e20323639393734.roa
Signing time:             Tue 05 Mar 2024 17:45:35 +0000
ROA not before:           Tue 05 Mar 2024 17:40:35 +0000
ROA not after:            Tue 04 Mar 2025 17:45:35 +0000
asID:                     269974
IP address blocks:        138.122.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:77:6a:38:4f:1b:b9:58:23:c9:22:b5:bc:22:ea:1f:13:11:e5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F
        Validity
            Not Before: Mar  5 17:40:35 2024 GMT
            Not After : Mar  4 17:45:35 2025 GMT
        Subject: CN=50BDDE654A49286243E0AFD62CE667B4CA4CC4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3e:3a:92:66:8e:e5:f7:d1:e8:5b:a6:b9:bc:
                    1e:a1:a3:c5:c7:ae:63:ea:0b:01:60:e7:1f:c9:02:
                    39:6c:1e:48:15:db:72:ca:f2:4c:18:c7:56:34:86:
                    15:b9:35:96:6d:35:86:72:55:72:bd:ab:28:c3:d5:
                    e6:4c:13:b8:df:0a:93:b8:23:37:99:8e:25:1d:92:
                    70:32:10:88:61:51:3a:0c:48:0a:a1:0c:52:37:03:
                    2a:f5:be:c8:eb:10:83:c2:5e:df:3c:65:a5:54:3b:
                    25:e0:3d:01:31:61:8a:7b:da:15:38:82:13:bf:8e:
                    7f:4e:82:8e:9b:90:2d:8f:69:8f:45:e3:8a:57:8f:
                    8e:44:cd:f2:d4:d6:1e:33:a6:e1:35:86:df:29:e3:
                    b2:4d:df:8d:fa:c6:62:f4:7f:4f:ae:7f:aa:84:77:
                    55:aa:0e:1a:93:d6:36:3f:64:c0:54:fa:d1:3d:a0:
                    67:a5:e3:00:62:71:4e:10:8e:1f:0c:35:e8:29:75:
                    e8:8f:51:52:0c:1a:03:1c:fa:ba:47:0b:6d:60:63:
                    4a:4e:4d:9f:be:e9:80:83:2d:ae:0e:f8:7c:b4:d0:
                    06:25:93:58:9f:d6:03:a0:4f:7b:92:1b:71:f9:04:
                    f8:77:6b:9e:30:6d:7c:62:eb:70:a8:54:74:56:dd:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BD:DE:65:4A:49:28:62:43:E0:AF:D6:2C:E6:67:B4:CA:4C:C4:C2
            X509v3 Authority Key Identifier:
                keyid:27:B2:C2:0B:7F:3B:89:AC:F8:EE:F9:84:3F:F5:DE:D4:D0:58:37:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/3133382e3132322e362e302f32342d3234203d3e20323639393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:b9:f8:7e:7b:70:03:2f:62:52:7d:7f:b2:83:a4:a0:a8:7f:
         d5:04:01:9e:f4:5e:1c:76:80:38:10:3e:2a:a2:78:2c:df:c8:
         80:d0:ac:a3:a6:33:1f:e8:27:34:bb:8f:c9:9c:89:30:ce:58:
         2e:97:96:0e:c0:d9:0b:58:62:3e:5d:18:c6:9b:0a:64:71:b2:
         81:cd:8b:1f:3b:61:66:c1:9c:31:dd:d3:9c:86:cc:02:a0:35:
         dd:03:09:2e:c1:d4:57:d2:1a:f4:aa:36:ff:52:cd:ae:5e:15:
         66:fa:85:f7:a0:73:7a:80:fa:37:33:39:e6:b2:d6:be:11:0b:
         3e:a3:33:80:6a:b2:38:d0:40:0f:45:82:b5:58:00:97:f9:1e:
         a5:3c:66:6f:0f:ce:49:76:bd:35:63:c3:5c:91:1c:bd:c7:42:
         05:32:3e:6b:72:8f:b6:da:5a:a7:56:41:0a:d2:3f:50:39:e2:
         6e:dc:c7:b0:fb:2c:2d:e6:65:9a:56:38:c8:7c:c8:76:5a:9b:
         54:29:8b:ba:31:cb:5e:be:65:5c:c2:91:f1:43:53:66:e1:34:
         6c:39:5f:af:b4:fa:0a:1b:8e:c3:72:3e:d9:cb:ea:ac:85:96:
         68:b9:63:2e:7a:ae:a3:7b:4c:e9:96:a0:c2:35:41:59:48:e3:
         2e:a0:fd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:04 2024 by rpki-client on console-ams.rpki-client.org