Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31322e302f32322d3234203d3e203532343339.roa
File:                     3133382e3138352e31322e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier:          UaGIehrdmq413m4cRpYD1yYpZfY291qSP8F7drfVwuo=
Subject key identifier:   FF:8A:EC:A3:F9:FA:21:35:1F:F3:D9:84:3A:EC:87:AA:14:8D:CE:C4
Certificate issuer:       /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial:       3C294D0044EA08E791C768CA61EB97A7FC6BB6A4
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31322e302f32322d3234203d3e203532343339.roa
Signing time:             Tue 05 Mar 2024 18:08:23 +0000
ROA not before:           Tue 05 Mar 2024 18:03:23 +0000
ROA not after:            Tue 04 Mar 2025 18:08:23 +0000
asID:                     52439
IP address blocks:        138.185.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:29:4d:00:44:ea:08:e7:91:c7:68:ca:61:eb:97:a7:fc:6b:b6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
        Validity
            Not Before: Mar  5 18:03:23 2024 GMT
            Not After : Mar  4 18:08:23 2025 GMT
        Subject: CN=FF8AECA3F9FA21351FF3D9843AEC87AA148DCEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5c:15:39:f1:23:7a:a1:fd:a8:ec:6c:af:42:
                    cb:32:10:d4:2e:a2:b2:40:46:ca:80:72:44:aa:56:
                    2e:bd:24:0c:28:74:0f:2f:07:58:52:99:c5:0c:e6:
                    81:88:2e:f8:30:ae:ae:db:f1:67:ce:d9:09:01:51:
                    13:a4:63:40:3d:e7:e9:21:f5:b2:ac:bd:5b:21:f4:
                    24:1e:61:e2:b7:56:45:ef:d9:89:b6:6d:21:9c:26:
                    39:7b:4c:72:9e:2b:f9:1d:60:4a:d8:49:6f:6d:6a:
                    21:a1:b2:e2:d1:08:82:18:2d:06:fe:87:07:91:ef:
                    1b:4d:4d:be:8f:d5:89:97:22:42:60:3d:29:72:b0:
                    a8:b2:b0:92:63:be:72:af:e2:7b:6f:2d:86:07:3e:
                    fb:39:13:c9:3e:f2:30:7e:de:51:80:f2:06:55:55:
                    e6:7b:8d:7b:55:22:65:d8:69:ac:e5:9a:34:e6:fd:
                    76:5e:e9:d2:8a:15:c2:eb:e9:4a:b1:1b:69:bf:af:
                    46:bb:64:49:5f:3c:45:e7:95:90:2a:10:52:66:3f:
                    12:62:1d:c5:72:a1:80:75:33:59:78:fd:91:36:ea:
                    20:1f:d2:d0:27:92:96:ff:04:51:39:70:82:8a:18:
                    64:cb:a4:2e:27:bb:fc:f7:3a:db:36:a8:7d:d7:35:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8A:EC:A3:F9:FA:21:35:1F:F3:D9:84:3A:EC:87:AA:14:8D:CE:C4
            X509v3 Authority Key Identifier:
                keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31322e302f32322d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:e9:c1:9a:4a:3b:ab:dc:60:2c:65:73:b7:41:23:70:cc:25:
         3d:6f:dd:3d:93:a1:fe:97:b1:a0:00:93:df:00:45:4a:a2:ac:
         c7:08:65:47:08:02:6c:81:78:26:4a:4f:55:6b:e9:ef:ff:29:
         8c:19:2c:76:68:bb:9d:f9:f6:74:e5:50:ec:91:0f:58:a2:1e:
         0e:45:f0:35:a5:7b:0c:1f:e6:f5:58:41:12:06:51:02:74:9d:
         8f:cc:66:16:24:4f:06:86:6b:5e:c9:e6:f7:70:de:7e:18:de:
         57:2c:ca:cd:fc:01:2f:ab:d4:d7:67:85:22:40:ce:0b:50:33:
         ef:64:b3:73:67:bb:98:9b:ba:7e:0f:c5:33:89:c5:d5:7c:79:
         a8:9c:d5:2e:d1:54:08:2d:58:b1:00:67:53:76:61:f6:22:24:
         76:c1:0c:af:98:d7:22:d8:f9:98:b7:ce:a7:fe:7d:73:34:64:
         61:25:9e:7a:bf:ea:f0:92:77:39:2e:01:aa:61:4d:44:df:dd:
         09:53:e5:6c:dc:b5:0b:e2:e0:1b:5c:c2:7e:85:5d:a3:8a:44:
         70:21:0c:38:b2:de:71:b1:25:3f:d2:8f:e3:5a:ce:ae:fd:f9:
         f5:47:48:be:5d:9f:6a:e4:dc:73:85:58:d2:96:1d:f3:f8:fc:
         92:b9:3c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:31:47 2024 by rpki-client on console-fra.rpki-client.org