Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34312e302f32342d3234203d3e203237383233.roa
File:                     3133382e3231392e34312e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          6OHzoHtpsLweJsOeOsUeEtWYQ4h2TgWIfLF6VMXwuqk=
Subject key identifier:   F6:F7:98:6F:73:D8:AF:AE:72:6C:64:73:B5:74:03:17:43:0B:74:F1
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       1523FDC2FA36F3B195AB61C6580F4AE4BD32959A
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34312e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:04 +0000
ROA not before:           Tue 05 Mar 2024 17:35:04 +0000
ROA not after:            Tue 04 Mar 2025 17:40:04 +0000
asID:                     27823
IP address blocks:        138.219.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:23:fd:c2:fa:36:f3:b1:95:ab:61:c6:58:0f:4a:e4:bd:32:95:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:04 2024 GMT
            Not After : Mar  4 17:40:04 2025 GMT
        Subject: CN=F6F7986F73D8AFAE726C6473B5740317430B74F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:a6:f4:b9:2e:2b:fa:93:3c:7a:a4:19:7a:
                    41:f3:bf:b8:e9:0e:9e:09:49:c3:46:b9:a7:1d:c6:
                    f5:58:8e:42:31:b7:eb:6e:d4:40:50:de:55:3f:37:
                    71:29:39:b4:27:1e:7c:d9:d0:38:9b:ce:a5:44:f7:
                    c2:d8:81:fc:53:7a:09:0d:d5:3c:05:a2:2a:df:82:
                    b2:f2:a7:18:5d:2d:f6:73:9d:36:f6:a3:a3:22:62:
                    a2:f6:6e:ac:ba:ab:f7:58:72:9c:99:67:ff:cc:10:
                    bd:39:b8:ee:07:c1:92:ca:2b:41:5f:af:d9:5f:d2:
                    f6:ef:06:d1:69:55:d0:df:c2:13:92:9f:9d:53:fe:
                    2b:5b:6d:0c:d9:a4:4f:c1:3f:24:bd:b2:ae:49:9f:
                    47:f6:4c:bc:1a:f7:c3:a8:fd:d1:3c:9f:0f:45:38:
                    9f:e1:7f:ae:91:39:90:f4:58:c3:25:b3:ff:51:e9:
                    42:c8:56:b0:b9:f5:33:49:ac:56:78:6b:ec:6f:98:
                    5d:eb:d3:c2:bd:c8:84:ae:30:f1:86:0c:45:f4:63:
                    16:90:90:d1:cd:de:cb:cf:ba:8b:a2:8a:a7:94:9e:
                    23:16:9c:e7:97:bc:b3:a4:7f:2c:d6:71:34:ee:8a:
                    97:52:c8:e0:c8:65:21:52:70:8d:0d:1f:4c:f1:db:
                    38:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F7:98:6F:73:D8:AF:AE:72:6C:64:73:B5:74:03:17:43:0B:74:F1
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3133382e3231392e34312e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:5c:ef:11:3c:7a:ba:50:44:44:51:07:1d:df:4f:a9:cf:cb:
         79:8b:57:91:8f:41:fd:03:83:25:5d:7d:58:79:16:d9:dd:3f:
         b1:8d:fb:b4:ea:64:12:95:2e:90:22:69:3c:44:a6:5d:b3:38:
         a7:a7:b4:ed:bd:2a:e6:fe:86:77:5a:e3:62:22:1f:fd:bd:15:
         f3:54:d4:7a:bb:2b:76:9a:72:a6:2b:d7:c3:a5:f1:e3:0b:32:
         0a:2c:a3:d5:a5:d3:a5:1a:0c:30:84:08:3b:f8:3d:31:79:e5:
         5d:20:12:97:f3:f5:05:81:13:fa:31:3d:e0:c1:3f:d2:53:af:
         9e:1a:1d:f9:e5:ee:8b:5d:70:1a:ac:ca:f9:66:4e:50:72:56:
         d9:1a:14:18:67:a9:ee:f9:fc:45:33:52:b6:26:4c:c0:86:3a:
         6d:71:49:41:55:15:49:e3:e5:c2:2d:2c:43:0f:32:cc:06:00:
         70:b4:db:6c:bb:d4:2b:b8:eb:e2:f7:bd:d7:7e:c8:70:ee:da:
         68:3e:39:48:f6:20:ed:56:5e:81:ce:1b:d6:fe:97:ab:69:f6:
         ee:63:c3:89:12:2f:5b:5e:3b:d1:1d:4f:75:59:93:ef:00:0d:
         db:fd:2b:48:d1:f5:1e:31:84:cd:50:d3:03:5a:d6:33:76:b3:
         40:75:99:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:50:23 2024 by rpki-client on console-fra.rpki-client.org