Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16F04F49098269C7AE45E7884292E5EDA9D2ACC4167A67F0D74D5FBF78198103/0/3133382e39372e3136302e302f32322d3234203d3e20323633373531.roa
File:                     3133382e39372e3136302e302f32322d3234203d3e20323633373531.roa (raw, json)
Hash identifier:          K1E8v9WK4xbSVeMfMVW/3W+IeV9Hn2NxySNoctYdKDY=
Subject key identifier:   23:6B:B2:90:B6:1B:35:94:B2:CA:7A:CA:8A:61:E0:3F:DF:C3:6D:EC
Certificate issuer:       /CN=84B2102857DD9312F9D75A5E7F972DCBBD0799CC
Certificate serial:       5BF735BB8292DFE781350DF40D6DD659652E2FA5
Authority key identifier: 84:B2:10:28:57:DD:93:12:F9:D7:5A:5E:7F:97:2D:CB:BD:07:99:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B2102857DD9312F9D75A5E7F972DCBBD0799CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16F04F49098269C7AE45E7884292E5EDA9D2ACC4167A67F0D74D5FBF78198103/0/3133382e39372e3136302e302f32322d3234203d3e20323633373531.roa
Signing time:             Thu 11 Apr 2024 14:25:00 +0000
ROA not before:           Thu 11 Apr 2024 14:20:00 +0000
ROA not after:            Thu 10 Apr 2025 14:25:00 +0000
asID:                     263751
IP address blocks:        138.97.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16F04F49098269C7AE45E7884292E5EDA9D2ACC4167A67F0D74D5FBF78198103/0/84B2102857DD9312F9D75A5E7F972DCBBD0799CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16F04F49098269C7AE45E7884292E5EDA9D2ACC4167A67F0D74D5FBF78198103/0/84B2102857DD9312F9D75A5E7F972DCBBD0799CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B2102857DD9312F9D75A5E7F972DCBBD0799CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f7:35:bb:82:92:df:e7:81:35:0d:f4:0d:6d:d6:59:65:2e:2f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B2102857DD9312F9D75A5E7F972DCBBD0799CC
        Validity
            Not Before: Apr 11 14:20:00 2024 GMT
            Not After : Apr 10 14:25:00 2025 GMT
        Subject: CN=236BB290B61B3594B2CA7ACA8A61E03FDFC36DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:4b:64:25:e5:5f:cd:bb:88:39:57:3d:09:
                    f5:70:63:01:78:ae:4c:fb:e7:57:4e:24:76:e2:df:
                    83:4e:f7:58:f3:f1:28:8e:c0:ef:30:0e:be:0d:90:
                    16:37:a7:7d:f0:0c:8f:17:bf:ab:a3:f0:23:2f:7e:
                    cf:c8:ec:3a:32:8d:14:4c:c4:d4:1e:de:1b:da:bf:
                    e3:8b:d6:d6:ba:a6:b0:e1:8c:33:ec:8b:f5:cb:dc:
                    e9:ee:ab:ca:84:ae:2e:99:23:09:c3:d1:af:a9:24:
                    f6:ef:1c:ff:10:23:2d:e7:af:81:0c:37:f4:ab:76:
                    30:98:dd:8b:8f:11:ed:b4:51:7a:65:9e:aa:be:a3:
                    f5:90:ad:50:dd:bb:6c:52:ea:ef:fa:2f:86:05:5d:
                    b4:01:d5:4d:16:4e:c8:66:c5:53:4c:8b:7b:c8:47:
                    8a:ae:8a:34:b2:b5:25:b0:21:d9:20:e1:b5:ed:5c:
                    68:18:a8:9f:f5:2e:7b:16:97:19:63:5c:65:d9:12:
                    f8:41:7d:55:8a:b2:99:7e:90:42:a1:4f:39:2b:13:
                    8f:04:07:48:84:54:b8:83:8b:bf:ed:74:9a:22:04:
                    d7:4c:e2:ea:02:e2:17:1d:29:ec:72:03:f6:fe:9c:
                    d4:a9:31:92:1d:c6:1a:65:b8:64:82:25:9d:28:24:
                    76:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6B:B2:90:B6:1B:35:94:B2:CA:7A:CA:8A:61:E0:3F:DF:C3:6D:EC
            X509v3 Authority Key Identifier:
                keyid:84:B2:10:28:57:DD:93:12:F9:D7:5A:5E:7F:97:2D:CB:BD:07:99:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16F04F49098269C7AE45E7884292E5EDA9D2ACC4167A67F0D74D5FBF78198103/0/84B2102857DD9312F9D75A5E7F972DCBBD0799CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B2102857DD9312F9D75A5E7F972DCBBD0799CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16F04F49098269C7AE45E7884292E5EDA9D2ACC4167A67F0D74D5FBF78198103/0/3133382e39372e3136302e302f32322d3234203d3e20323633373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:18:9f:a5:9f:be:ea:ae:31:9a:3a:7d:9f:d5:4f:c7:17:a8:
         ae:32:b1:02:1c:24:33:d4:99:c1:2c:bc:51:59:28:77:d3:6a:
         fe:d1:f2:6f:81:98:99:db:49:3c:c9:b4:4c:fa:6a:ef:56:7b:
         d8:c8:e0:21:8b:60:96:a7:59:fe:7c:e0:a6:7a:fd:d9:b0:41:
         d7:f8:bc:18:f0:f8:96:36:7a:e6:a7:40:89:4d:98:3c:f4:d9:
         4f:1d:7c:95:b4:8e:57:c6:9f:64:36:07:6b:19:8a:e4:ef:b1:
         86:bb:ee:23:27:c2:30:99:f8:89:2b:06:b2:65:c2:05:10:90:
         41:60:75:44:c7:ea:cb:d2:54:01:80:71:0b:45:ac:ff:26:77:
         e2:15:cb:c0:94:fc:29:d5:de:2c:13:a0:c1:12:2c:8e:09:52:
         8b:48:b7:ff:e4:2e:3b:4d:2c:56:89:eb:af:90:4e:76:21:3e:
         11:8e:40:37:a4:5e:8e:70:a4:e8:da:35:25:fe:67:9a:39:dd:
         46:15:64:0e:1c:a1:40:6d:32:47:81:78:52:96:d1:ae:03:33:
         49:36:d6:46:65:9a:ea:10:dd:01:3a:db:c5:41:96:e8:75:16:
         6d:17:4e:b6:ab:ae:2f:66:6c:cc:39:e0:43:c8:d0:20:e4:81:
         54:fa:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org