Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/3133382e3132322e372e302f32342d3234203d3e20323639393734.roa
File:                     3133382e3132322e372e302f32342d3234203d3e20323639393734.roa (raw, json)
Hash identifier:          2bT7Ake09csi/gJ6Tg3/JJZby4VVQai1Ma3bSwX8Nt8=
Subject key identifier:   12:6C:5C:30:23:16:9F:9F:52:FE:ED:DB:C9:88:C5:5E:F9:11:0D:1E
Certificate issuer:       /CN=27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F
Certificate serial:       0CB4A43EA67BEB568D3A3C290E2CA29837DBC6F1
Authority key identifier: 27:B2:C2:0B:7F:3B:89:AC:F8:EE:F9:84:3F:F5:DE:D4:D0:58:37:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/3133382e3132322e372e302f32342d3234203d3e20323639393734.roa
Signing time:             Tue 05 Mar 2024 17:45:34 +0000
ROA not before:           Tue 05 Mar 2024 17:40:34 +0000
ROA not after:            Tue 04 Mar 2025 17:45:34 +0000
asID:                     269974
IP address blocks:        138.122.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b4:a4:3e:a6:7b:eb:56:8d:3a:3c:29:0e:2c:a2:98:37:db:c6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F
        Validity
            Not Before: Mar  5 17:40:34 2024 GMT
            Not After : Mar  4 17:45:34 2025 GMT
        Subject: CN=126C5C3023169F9F52FEEDDBC988C55EF9110D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:51:90:63:cf:17:bd:dc:87:b6:4f:93:62:
                    e6:ba:72:23:57:4b:cc:57:50:e3:f0:d6:2b:28:1c:
                    83:3b:6a:f0:51:d8:f4:9a:40:19:cc:bd:cb:7e:60:
                    9a:9b:6e:9c:d0:b5:ff:b1:22:12:01:73:20:64:88:
                    0c:85:79:65:fa:36:2d:25:d7:83:af:ad:cb:b4:78:
                    1d:8f:ba:0f:8e:f4:ef:eb:a9:a8:4b:72:6c:f3:50:
                    f0:f0:32:3e:b7:f5:7b:bf:a9:7f:e7:ba:43:c5:2c:
                    71:8b:95:bc:a2:af:cb:06:3b:b9:e2:ad:6b:48:69:
                    61:14:04:e7:c8:32:58:95:ce:73:e0:f5:00:d7:fa:
                    8f:65:6a:f4:44:cb:7b:6a:b9:32:91:d5:f6:d3:d9:
                    9d:78:72:57:bd:15:cb:5d:9c:47:29:20:b2:cf:41:
                    44:de:e0:ca:50:63:7c:63:90:0d:21:0e:5d:26:73:
                    49:02:6d:89:37:e3:eb:0d:0c:a7:0c:83:f5:62:5c:
                    f8:2d:c4:af:81:48:3b:60:d3:8e:64:92:25:7d:d8:
                    f7:49:03:0c:66:6c:d8:d2:a5:fb:dd:07:8a:11:5e:
                    53:23:33:42:2b:b6:50:ec:c8:38:28:8a:34:e5:32:
                    b1:29:52:59:12:7a:82:96:aa:d9:61:55:e9:86:1c:
                    c7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6C:5C:30:23:16:9F:9F:52:FE:ED:DB:C9:88:C5:5E:F9:11:0D:1E
            X509v3 Authority Key Identifier:
                keyid:27:B2:C2:0B:7F:3B:89:AC:F8:EE:F9:84:3F:F5:DE:D4:D0:58:37:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/3133382e3132322e372e302f32342d3234203d3e20323639393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:36:75:ed:09:1d:cd:2b:d2:50:55:99:35:02:25:62:90:e9:
         75:b6:ba:f5:fc:50:68:dc:9a:ae:07:ad:a2:f8:a8:9b:f5:a4:
         f6:04:03:3e:87:3a:df:8a:5c:81:f6:50:e8:51:32:ab:48:e1:
         65:fe:f3:b8:20:40:fa:8b:07:01:37:7f:d3:97:96:d1:71:f9:
         b2:61:78:03:d4:9d:bc:83:e2:b3:6e:b6:c5:5c:b1:bc:b9:d5:
         49:5c:70:5a:db:28:b5:fc:bf:2a:15:7f:04:3c:f2:22:8a:e5:
         6b:67:97:c3:d6:53:8d:0c:c0:10:16:91:1f:c2:13:7c:ad:b9:
         3f:02:e1:4e:ee:93:2b:01:bb:e0:a0:77:f4:40:58:1a:62:63:
         12:5d:e3:8b:12:55:1f:fe:20:e5:8a:38:52:70:1a:7e:6e:7c:
         ba:dc:8d:5c:91:07:0b:e4:8f:f5:1a:7c:80:0e:4c:62:b8:ad:
         b5:cd:dc:50:c3:f9:59:4a:f9:dd:20:1c:74:e5:34:14:c6:fa:
         f6:7f:c6:2a:8c:b9:32:15:92:f7:2a:c3:d4:a4:da:88:db:83:
         e2:50:ee:f4:42:2d:48:33:ef:c3:db:f2:9e:c6:09:4f:cf:35:
         84:b2:a6:9e:15:1b:10:12:f0:a8:08:34:cb:25:69:a5:dc:b9:
         c4:a9:09:07
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDLSkPqZ761aNOjwpDiyimDfbxvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdCMkMyMEI3RjNCODlBQ0Y4RUVGOTg0M0ZGNURFRDRE
MDU4MzcwRjAeFw0yNDAzMDUxNzQwMzRaFw0yNTAzMDQxNzQ1MzRaMDMxMTAvBgNV
BAMTKDEyNkM1QzMwMjMxNjlGOUY1MkZFRUREQkM5ODhDNTVFRjkxMTBEMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN41GQY88XvdyHtk+TYua6ciNX
S8xXUOPw1isoHIM7avBR2PSaQBnMvct+YJqbbpzQtf+xIhIBcyBkiAyFeWX6Ni0l
14Ovrcu0eB2Pug+O9O/rqahLcmzzUPDwMj639Xu/qX/nukPFLHGLlbyir8sGO7ni
rWtIaWEUBOfIMliVznPg9QDX+o9lavREy3tquTKR1fbT2Z14cle9FctdnEcpILLP
QUTe4MpQY3xjkA0hDl0mc0kCbYk34+sNDKcMg/ViXPgtxK+BSDtg045kkiV92PdJ
AwxmbNjSpfvdB4oRXlMjM0IrtlDsyDgoijTlMrEpUlkSeoKWqtlhVemGHMeLAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUEmxcMCMWn59S/u3byYjFXvkRDR4wHwYDVR0j
BBgwFoAUJ7LCC387iaz47vmEP/Xe1NBYNw8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0MyMUVCMTA5REYwRkZGRTdCN0NGNTVENDA2M0VEOTY0
Q0ZFMUQ1QTE5Rjg2OUUzOUI2ODFFRjNDOEUyNDdDLzAvMjdCMkMyMEI3RjNCODlB
Q0Y4RUVGOTg0M0ZGNURFRDREMDU4MzcwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yN0IyQzIwQjdGM0I4OUFDRjhF
RUY5ODQzRkY1REVENEQwNTgzNzBGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNDMjFFQjEwOURGMEZGRkU3QjdDRjU1RDQwNjNFRDk2NENGRTFENUEx
OUY4NjlFMzlCNjgxRUYzQzhFMjQ3Qy8wLzMxMzMzODJlMzEzMjMyMmUzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzczNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp6BzAN
BgkqhkiG9w0BAQsFAAOCAQEASDZ17QkdzSvSUFWZNQIlYpDpdba69fxQaNyarget
oviom/Wk9gQDPoc634pcgfZQ6FEyq0jhZf7zuCBA+osHATd/05eW0XH5smF4A9Sd
vIPis262xVyxvLnVSVxwWtsotfy/KhV/BDzyIorla2eXw9ZTjQzAEBaRH8ITfK25
PwLhTu6TKwG74KB39EBYGmJjEl3jixJVH/4g5Yo4UnAafm58utyNXJEHC+SP9Rp8
gA5MYrittc3cUMP5WUr53SAcdOU0FMb69n/GKoy5MhWS9yrD1KTaiNuD4lDu9EIt
SDPvw9vynsYJT881hLKmnhUbEBLwqAg0yyVppdy5xKkJBw==
-----END CERTIFICATE-----
Generated at Sat May 4 11:06:16 2024 by rpki-client on console-fra.rpki-client.org