Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34302e302f32342d3234203d3e203237383233.roa
File:                     3133382e3231392e34302e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          xQ7Jku96+IE1w/D4xK55aN4+ouLcYmzoNwm9VIxwXsw=
Subject key identifier:   85:C3:E2:B0:8A:A1:9D:80:E5:4B:D5:35:31:51:B2:83:72:1D:8D:74
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       21911E81961209F053253EE1F87E8563E02A37BD
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34302e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:05 +0000
ROA not before:           Tue 05 Mar 2024 17:35:05 +0000
ROA not after:            Tue 04 Mar 2025 17:40:05 +0000
asID:                     27823
IP address blocks:        138.219.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:91:1e:81:96:12:09:f0:53:25:3e:e1:f8:7e:85:63:e0:2a:37:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:05 2024 GMT
            Not After : Mar  4 17:40:05 2025 GMT
        Subject: CN=85C3E2B08AA19D80E54BD5353151B283721D8D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:d2:6c:f9:a8:db:2a:d3:d7:33:54:c3:0f:
                    2c:a4:4b:d5:2d:2d:0a:c5:13:0a:ba:2c:41:87:a9:
                    7d:0f:01:f6:65:79:77:ba:ae:1e:1c:0e:90:f3:1c:
                    61:d2:6e:3d:f3:29:49:84:88:69:02:f7:e2:73:32:
                    6b:c8:33:d1:0f:25:7e:2f:78:ee:b2:ec:85:8c:50:
                    23:19:74:a5:d4:7f:e8:dd:54:de:c3:ce:f9:8d:95:
                    28:7f:ff:00:22:7f:46:56:23:83:24:64:5b:ea:d6:
                    04:93:b1:89:b9:74:2b:94:b9:cd:60:03:82:10:59:
                    86:88:14:7f:a3:59:10:0f:fb:a4:76:56:1e:18:90:
                    d0:de:22:df:6d:40:b5:52:65:f5:6b:56:4c:7e:1a:
                    e1:6d:23:9e:37:3e:36:44:65:d1:5f:6d:24:90:3e:
                    ed:f6:51:c1:ab:f5:f4:ec:17:a9:91:17:d9:45:b3:
                    30:a9:e6:a4:4c:25:79:44:3e:3d:d5:d5:c0:e8:e0:
                    72:c1:66:9b:35:69:f0:e4:2b:3e:58:71:50:34:88:
                    b7:6d:7d:c8:e1:02:5d:d6:c0:e5:ac:62:a4:ca:70:
                    d7:79:d0:54:de:79:46:fd:e0:27:5a:63:6f:de:f8:
                    da:00:e5:55:5e:50:8f:8c:b3:71:6c:82:4a:a3:39:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C3:E2:B0:8A:A1:9D:80:E5:4B:D5:35:31:51:B2:83:72:1D:8D:74
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34302e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:30:c2:d8:71:05:1b:23:a7:42:5a:ee:f9:90:44:f1:71:ea:
         71:dd:a7:c7:88:11:4e:5e:53:b7:09:d5:41:c4:38:8a:a9:29:
         66:c8:f2:a5:02:2d:23:7d:49:37:94:0c:9b:d7:54:c4:7b:6f:
         4e:47:9a:b0:82:b6:18:0c:72:05:7f:0e:53:f7:6a:a0:2b:1e:
         c1:fa:d0:82:49:33:b3:37:ed:ac:13:eb:c7:e1:ef:ec:2b:e9:
         26:97:fc:6d:31:17:4e:bf:87:4f:4d:0a:0e:9e:07:61:f5:3d:
         1d:20:2e:cb:0e:99:dc:f2:45:7b:26:a5:10:c9:c3:e8:6d:2f:
         80:33:15:93:61:0a:9e:94:b3:be:67:08:a3:ff:ab:e5:c5:53:
         0f:c6:85:6f:a0:da:23:dc:70:c4:78:1b:b1:9c:fa:d7:78:48:
         d4:73:9f:36:ad:16:c6:06:80:2e:9c:4b:2d:57:75:8b:e2:0c:
         f8:e8:ee:1c:10:88:bc:fe:35:93:d8:77:a2:e8:d0:24:b7:b3:
         0c:4b:a9:ae:4f:da:c0:54:2f:17:ea:6d:3c:64:f9:ae:56:ae:
         76:bb:c5:f5:28:9d:58:50:99:e5:64:55:05:8f:77:50:e7:4e:
         51:1a:f1:33:44:21:94:a1:4a:c3:f3:ea:cb:98:8a:0d:5f:5f:
         c5:1a:fb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 06:21:06 2024 by rpki-client on console-ams.rpki-client.org