Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/3133382e3132312e3234302e302f32322d3234203d3e20323633373436.roa
File:                     3133382e3132312e3234302e302f32322d3234203d3e20323633373436.roa (raw, json)
Hash identifier:          Bk2BsZQB2m8a2gQwjpw2ZeKrHpLwzBezdT4coYWSRnA=
Subject key identifier:   A8:9C:DB:E1:36:95:8C:1F:C0:7B:90:A2:DD:19:09:E7:D4:02:AC:FC
Certificate issuer:       /CN=DB96EF9719DEAB2F806B872EA360985A830AD8E5
Certificate serial:       695738C78BD6E69D4D9F9EBED124420B71D9FA7C
Authority key identifier: DB:96:EF:97:19:DE:AB:2F:80:6B:87:2E:A3:60:98:5A:83:0A:D8:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/3133382e3132312e3234302e302f32322d3234203d3e20323633373436.roa
Signing time:             Tue 05 Mar 2024 18:14:07 +0000
ROA not before:           Tue 05 Mar 2024 18:09:07 +0000
ROA not after:            Tue 04 Mar 2025 18:14:07 +0000
asID:                     263746
IP address blocks:        138.121.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:57:38:c7:8b:d6:e6:9d:4d:9f:9e:be:d1:24:42:0b:71:d9:fa:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB96EF9719DEAB2F806B872EA360985A830AD8E5
        Validity
            Not Before: Mar  5 18:09:07 2024 GMT
            Not After : Mar  4 18:14:07 2025 GMT
        Subject: CN=A89CDBE136958C1FC07B90A2DD1909E7D402ACFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:e2:46:1f:74:91:48:7f:b0:33:9c:a0:15:
                    13:ef:e5:95:54:68:e2:32:7d:c8:c3:21:8c:ff:7e:
                    b4:77:5c:40:98:31:cc:23:03:7c:15:99:50:89:f4:
                    fc:74:73:e2:9f:52:94:83:86:4e:ef:c6:0f:19:27:
                    90:11:c6:f1:13:66:46:40:18:46:57:70:f1:43:f1:
                    09:a5:94:42:06:8d:45:1b:09:a4:f6:df:d6:a2:41:
                    d0:a7:d8:8d:18:85:11:12:a9:06:aa:19:a9:78:97:
                    77:c5:d7:d1:d1:d8:70:e6:d7:bf:c6:85:22:0e:22:
                    90:cc:1b:9f:cf:8a:ba:c2:0b:da:dd:24:01:37:da:
                    45:db:7b:1b:8d:c8:aa:40:ec:fe:bd:d6:18:6b:74:
                    36:cf:c6:1f:7b:b9:03:2b:f3:73:11:60:1a:82:07:
                    f0:8d:75:65:aa:7e:ee:ca:31:9d:95:84:34:54:ad:
                    ee:6a:1a:06:99:f4:86:cd:84:ae:2e:a1:a3:37:bc:
                    c6:5a:38:f3:70:62:c6:a7:dc:ac:b4:33:a4:a8:73:
                    8d:99:65:ad:1c:d0:da:38:54:12:bd:40:6e:67:5e:
                    ea:70:5f:39:b3:26:27:a4:2c:58:eb:5b:14:c8:53:
                    cf:79:71:94:0b:40:16:3f:be:93:5c:bd:46:cf:9e:
                    99:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9C:DB:E1:36:95:8C:1F:C0:7B:90:A2:DD:19:09:E7:D4:02:AC:FC
            X509v3 Authority Key Identifier:
                keyid:DB:96:EF:97:19:DE:AB:2F:80:6B:87:2E:A3:60:98:5A:83:0A:D8:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB96EF9719DEAB2F806B872EA360985A830AD8E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18B7D3007F0EE83FA3973E63E4AB5AE1AF733E8118FA67C62AA932BD2F32C4FB/0/3133382e3132312e3234302e302f32322d3234203d3e20323633373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:a3:57:f0:1f:55:05:e9:08:82:53:a3:08:22:b0:02:a6:
         94:9c:12:77:3a:42:96:81:26:46:3d:b4:0d:63:e2:f2:52:fa:
         3e:cc:0c:48:ef:c7:39:eb:f3:66:47:06:dd:ce:05:96:4a:f5:
         cc:04:33:d1:5c:36:5b:db:f2:1f:42:ef:09:16:d6:4d:de:6b:
         3a:aa:46:eb:5f:f4:53:17:96:03:de:90:d6:6c:c9:57:34:ac:
         cd:56:2a:60:8b:68:6c:e0:49:20:1d:e0:3d:35:12:6b:08:06:
         5b:b9:a7:ab:24:69:a6:9f:56:68:51:c8:fa:e0:7e:f7:ab:c4:
         9b:a3:de:39:42:2a:7b:68:1a:e1:96:32:cb:de:7b:1f:a1:a9:
         68:c1:b6:a8:3f:5f:82:8c:5b:6a:4a:63:ca:69:c5:9d:89:0d:
         d9:4e:70:2b:8e:10:7a:ee:f7:25:93:f4:51:c3:1b:83:59:b5:
         88:d3:89:c9:a4:78:72:52:d1:14:b3:f7:fe:69:39:92:0f:d6:
         5e:e4:a7:1d:0d:3d:f9:65:b3:33:49:50:bf:6d:ba:b9:a4:8a:
         9c:c5:19:bf:b8:9f:d1:0b:fe:8f:5f:29:69:30:38:2b:90:2f:
         08:fc:c8:d4:4c:7d:26:e6:6d:c9:d5:d8:f1:b4:fb:6e:34:15:
         e0:81:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org