Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3133382e3132312e31322e302f32322d3232203d3e203233353230.roa
File:                     3133382e3132312e31322e302f32322d3232203d3e203233353230.roa (raw, json)
Hash identifier:          k0unz3Kvut7P7T0/Yc6fGAHMeL60uqJ9x13LwGgYpXM=
Subject key identifier:   27:89:36:A5:8B:16:12:43:76:B7:B9:83:06:4E:55:BB:57:FD:E7:90
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       275EBD1190C7AB2FEC2E325522F998E1A154262B
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3133382e3132312e31322e302f32322d3232203d3e203233353230.roa
Signing time:             Tue 05 Mar 2024 18:16:17 +0000
ROA not before:           Tue 05 Mar 2024 18:11:17 +0000
ROA not after:            Tue 04 Mar 2025 18:16:17 +0000
asID:                     23520
IP address blocks:        138.121.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5e:bd:11:90:c7:ab:2f:ec:2e:32:55:22:f9:98:e1:a1:54:26:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:17 2024 GMT
            Not After : Mar  4 18:16:17 2025 GMT
        Subject: CN=278936A58B16124376B7B983064E55BB57FDE790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:01:a1:fb:40:ed:39:07:46:c0:c4:51:48:
                    62:5f:57:38:ae:55:3b:e2:75:4a:5a:d9:54:e8:6a:
                    ce:7b:73:49:ae:f4:84:14:95:2c:72:d4:c5:8a:a7:
                    e5:5a:e6:4f:f0:50:cf:1c:29:4b:a4:e3:dc:31:56:
                    4f:72:31:1b:f2:0c:7d:70:66:74:27:20:ac:eb:7f:
                    51:c0:7a:c2:63:75:2d:4d:69:1a:ae:8f:4b:68:a3:
                    64:2a:59:f3:15:a8:22:57:4a:7b:fd:79:e0:ca:3d:
                    ec:32:4b:df:ae:76:58:32:ad:f8:a9:09:f5:ad:48:
                    f7:6b:45:d0:5a:fc:56:92:66:0b:da:ef:32:59:05:
                    cb:f5:4f:54:ba:c4:c3:79:fd:54:38:63:76:35:1c:
                    c3:c6:37:5c:9c:58:d6:e9:b9:7d:92:cc:60:bf:3f:
                    0f:a6:14:da:2d:68:63:a4:f7:23:20:1e:fa:1d:13:
                    d9:8c:59:d1:66:1b:45:88:e8:79:c1:e9:ee:00:5a:
                    b5:86:b8:3a:3e:3f:de:e4:8c:f0:ff:e7:3d:2d:e4:
                    98:50:b1:4a:74:3e:d3:65:2e:77:96:e8:b0:28:3b:
                    9a:04:3b:b8:61:d3:d5:52:c2:19:dd:f1:63:80:12:
                    c7:5f:9a:d9:a2:14:dc:c0:e4:70:01:cc:80:56:ca:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:89:36:A5:8B:16:12:43:76:B7:B9:83:06:4E:55:BB:57:FD:E7:90
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3133382e3132312e31322e302f32322d3232203d3e203233353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:d3:0e:8f:5d:0e:49:13:e8:b2:98:75:02:62:99:2c:81:90:
         44:f1:42:f4:fc:cf:17:5d:e5:71:cb:f5:7f:fc:dd:44:10:e7:
         22:4e:fb:81:71:df:a6:22:fd:91:ba:0e:f7:31:2c:53:c8:c7:
         38:d6:ca:1a:42:58:05:9f:04:c4:4f:29:14:3e:16:46:37:cf:
         73:74:7e:a1:f0:48:77:f6:a2:c9:d8:dc:3b:1f:e5:f7:6b:b3:
         40:59:0f:46:bb:9d:6f:bb:0f:eb:12:85:35:ac:38:1f:7e:23:
         3c:c7:76:d6:ae:8c:19:85:24:51:e9:e3:8e:bf:90:d2:95:ae:
         c3:9b:f3:5c:f9:83:1b:a0:5a:74:0b:14:b3:95:bc:91:b2:ef:
         d5:1c:0b:79:c8:d4:4c:aa:f4:5a:5d:5f:91:31:c8:86:8a:c2:
         4e:a0:d3:ce:b9:2c:a5:b7:03:30:a8:76:02:7b:5c:49:e7:a8:
         99:33:7b:17:33:df:d4:9b:d2:83:17:2d:22:0c:13:54:2f:eb:
         6e:d6:fb:fb:fa:7a:e9:56:2a:45:4f:92:75:15:26:6f:42:00:
         82:e7:dc:5e:8f:41:76:d0:bf:71:8a:63:be:51:06:27:47:40:
         ab:47:bd:73:8e:af:16:55:a2:28:6b:c0:a7:58:a7:f1:4b:20:
         06:aa:c4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org