Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36352e302f32342d3234203d3e203532343637.roa
File:                     3133382e33362e36352e302f32342d3234203d3e203532343637.roa (raw, json)
Hash identifier:          //LV7OdAgSfY4FbhHPN5iiGSrHjyJ9CMgp4uHn3Xap0=
Subject key identifier:   32:9C:29:75:24:53:CD:5F:DE:D1:EB:54:E8:EF:DE:35:16:74:C3:0C
Certificate issuer:       /CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
Certificate serial:       2F54790D8C53271E6F24645EC7BB6470AEE5D25E
Authority key identifier: 64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36352e302f32342d3234203d3e203532343637.roa
Signing time:             Tue 05 Mar 2024 17:55:31 +0000
ROA not before:           Tue 05 Mar 2024 17:50:31 +0000
ROA not after:            Tue 04 Mar 2025 17:55:31 +0000
asID:                     52467
IP address blocks:        138.36.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:54:79:0d:8c:53:27:1e:6f:24:64:5e:c7:bb:64:70:ae:e5:d2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
        Validity
            Not Before: Mar  5 17:50:31 2024 GMT
            Not After : Mar  4 17:55:31 2025 GMT
        Subject: CN=329C29752453CD5FDED1EB54E8EFDE351674C30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:c0:90:5c:48:1f:2b:9c:3c:c2:4a:01:fe:
                    4b:53:a6:9f:14:56:28:92:83:a6:ab:f4:e9:b2:9c:
                    2d:3a:de:3d:72:b7:d9:b5:33:86:e3:b6:68:9d:0f:
                    16:b0:38:1e:36:55:39:66:ae:c3:fc:29:92:05:4c:
                    2e:15:9c:a2:3c:da:28:db:97:7e:7a:72:af:78:78:
                    de:0f:8d:c3:f4:c5:ee:5c:5a:9e:a2:85:bd:66:79:
                    c7:5c:c2:54:30:ed:77:30:16:b1:88:2d:d5:6d:96:
                    dc:f0:da:2f:e9:42:82:b1:9e:9b:93:95:08:5d:e5:
                    4a:1a:9c:99:4e:48:49:f2:20:e0:d3:94:cb:f4:56:
                    1a:dd:b3:99:84:09:d6:3d:0d:af:ca:4c:4f:77:67:
                    86:40:70:bb:bf:67:55:72:9b:a9:aa:29:b2:65:05:
                    14:0c:7d:b7:3c:a1:49:43:82:14:24:1e:1f:0a:f4:
                    db:90:6e:26:0d:8c:ce:80:c8:8f:b8:33:7e:09:7e:
                    d0:d5:d4:8d:82:38:f4:ce:ca:8b:bb:eb:c8:9a:5b:
                    66:d2:7b:5c:35:97:cb:9c:44:7a:51:a1:90:1c:c8:
                    f8:f3:27:85:1b:5f:6c:6d:2c:6a:b6:2f:97:da:4b:
                    ce:db:c6:e9:62:79:f6:ae:6d:1b:11:d2:fc:ef:8a:
                    53:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9C:29:75:24:53:CD:5F:DE:D1:EB:54:E8:EF:DE:35:16:74:C3:0C
            X509v3 Authority Key Identifier:
                keyid:64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36352e302f32342d3234203d3e203532343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:53:4f:4e:0d:c6:5a:07:6b:b2:64:1d:9e:a8:f1:e7:d5:3b:
         7e:c1:7f:12:03:f8:95:96:9e:b2:cf:e0:16:51:c2:a5:b1:77:
         8b:ad:fb:c3:93:09:0e:e6:cc:9f:d2:49:70:6a:ec:0a:fa:e5:
         6b:8e:ec:34:22:13:c8:c1:84:a2:00:ac:a8:c2:41:a9:c7:ae:
         b6:58:92:84:a9:7d:2b:86:a0:57:d6:ec:36:48:eb:2e:c7:bd:
         e0:b8:87:01:d1:f6:8a:bb:7e:5f:80:01:51:18:95:89:55:98:
         0c:5f:12:75:73:1f:1c:d6:77:6d:20:25:f3:80:22:0d:96:92:
         f2:90:d9:33:42:ca:be:b3:37:96:1c:2b:d3:bc:19:41:32:f3:
         d5:22:00:28:2a:e1:80:5b:7b:a3:21:42:08:9f:1e:01:eb:f1:
         5c:95:e4:f8:22:a4:4a:c1:f0:33:7d:83:22:e4:6b:9d:4f:7e:
         71:1f:7a:6b:9d:54:f1:56:8f:35:a5:d7:c2:5c:80:72:7f:cf:
         09:4f:fb:bc:c9:89:5d:f2:b5:f5:8c:a9:18:59:06:99:f5:df:
         c2:20:15:e3:22:3f:3c:28:1e:51:8e:ee:ae:0b:ad:7b:86:c0:
         c3:b5:30:9b:e0:86:c5:9c:de:a5:6b:2c:da:ba:aa:32:9c:75:
         b0:fe:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:04 2024 by rpki-client on console-fra.rpki-client.org