Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31342e302f32342d3234203d3e20323639383632.roa
File:                     3133382e3138352e31342e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier:          AGR15W5YS6TKp3Cojz76eXtmy9i7yHAtm+TH2/oTxiw=
Subject key identifier:   18:F6:09:9B:50:64:AF:25:E1:CD:5F:90:1A:EF:F3:74:4A:76:D2:F8
Certificate issuer:       /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial:       617391A403EB9907F9D2925F2B610CF2F4597E7F
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31342e302f32342d3234203d3e20323639383632.roa
Signing time:             Tue 05 Mar 2024 18:08:21 +0000
ROA not before:           Tue 05 Mar 2024 18:03:21 +0000
ROA not after:            Tue 04 Mar 2025 18:08:21 +0000
asID:                     269862
IP address blocks:        138.185.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:73:91:a4:03:eb:99:07:f9:d2:92:5f:2b:61:0c:f2:f4:59:7e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
        Validity
            Not Before: Mar  5 18:03:21 2024 GMT
            Not After : Mar  4 18:08:21 2025 GMT
        Subject: CN=18F6099B5064AF25E1CD5F901AEFF3744A76D2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:5f:51:bf:4d:ba:90:43:bc:72:5f:ba:00:
                    50:74:82:8f:0e:b1:95:08:fd:cf:02:e1:a5:72:89:
                    b1:1d:cb:8c:aa:fd:8b:03:df:da:43:ab:ab:09:d9:
                    ae:ba:7e:ff:aa:1d:07:c4:7a:72:c8:9a:01:67:d9:
                    e3:bc:59:61:e8:f0:03:ea:7f:9e:fe:68:11:ba:17:
                    20:b7:8c:2c:7a:cc:f6:36:b3:3c:8d:c6:c0:ce:4a:
                    91:b6:e3:a7:88:6b:78:50:b6:43:39:21:26:33:22:
                    7d:a8:f7:35:5c:88:b6:59:55:1a:0b:aa:97:dd:af:
                    b1:3c:f1:a8:84:75:db:20:a1:00:28:75:d7:8a:24:
                    f9:8c:d1:53:f5:23:fe:01:e8:50:8a:51:23:c7:86:
                    96:10:67:8d:66:4f:00:27:ff:d5:33:c4:a4:97:39:
                    fc:03:b5:88:b9:fe:3b:51:e4:91:73:95:ca:be:3d:
                    6e:f0:77:7d:c9:8e:64:32:87:a6:5e:4e:a8:89:73:
                    5e:b2:87:5a:75:3a:eb:51:dd:a3:18:b8:c6:43:2d:
                    90:ff:f0:3e:b4:0d:26:dd:ca:06:8f:51:07:15:b0:
                    7f:55:b9:d6:4f:fc:c3:e5:19:fc:fd:8a:d0:eb:cc:
                    9d:50:50:3f:18:e3:15:6c:34:d4:a8:a5:e6:7e:01:
                    2d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F6:09:9B:50:64:AF:25:E1:CD:5F:90:1A:EF:F3:74:4A:76:D2:F8
            X509v3 Authority Key Identifier:
                keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133382e3138352e31342e302f32342d3234203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:3e:65:78:9f:15:c2:81:ab:47:4b:a4:e3:24:b2:47:e5:
         8c:1f:67:3a:17:ef:9f:eb:de:6b:60:23:22:6e:88:c6:bd:46:
         e5:0b:53:32:55:da:0e:ad:f7:14:15:e7:a8:11:d2:d8:8b:3c:
         8c:c0:85:bc:e5:25:01:4d:d8:f2:60:12:d5:60:75:6c:10:83:
         5d:03:fe:7b:a5:ac:71:6b:5e:6f:29:54:10:e2:d6:3f:f8:4a:
         e7:96:ab:d3:2c:64:60:c1:06:5c:8e:02:a9:6b:dc:e1:a5:f5:
         e2:bf:68:b4:9e:14:03:c5:08:23:b6:86:eb:c3:2b:e4:6b:90:
         bc:dc:98:ae:e0:08:e5:22:30:e3:d2:01:56:be:88:9d:93:16:
         8c:f4:0f:1a:82:8a:0a:45:d8:85:9b:9b:97:df:69:84:c1:e8:
         b8:7d:09:22:c0:8a:df:64:00:4a:a6:e0:cf:d7:ec:73:7c:24:
         61:8f:e8:46:65:0c:ae:68:c7:ee:84:45:eb:66:69:34:f0:cf:
         ab:16:78:f4:5f:7d:cb:c6:6c:d1:f6:f1:ad:b2:c4:fa:e4:e2:
         56:a9:cc:24:7a:da:b2:61:af:60:30:e5:11:e7:30:a2:87:45:
         7d:e2:d2:99:f6:72:d6:73:16:99:4f:65:0f:77:e7:db:91:3d:
         0a:0c:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org