Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/3133382e35392e382e302f32322d3234203d3e20323639373838.roa
File:                     3133382e35392e382e302f32322d3234203d3e20323639373838.roa (raw, json)
Hash identifier:          oG0zL7CpnRdHVYdHRCZSzVvzeFuSqMdCtSjibXlEsJA=
Subject key identifier:   41:9F:C5:28:EC:14:2A:88:34:EB:C3:89:65:69:71:8E:53:4E:19:00
Certificate issuer:       /CN=5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24
Certificate serial:       3D56C27C2C3D3003C9024FFBD7A2AEB40A791823
Authority key identifier: 5D:30:85:84:81:6A:CB:0C:C9:C3:5E:D0:9C:51:D8:BB:4A:A6:CE:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/3133382e35392e382e302f32322d3234203d3e20323639373838.roa
Signing time:             Tue 05 Mar 2024 18:22:50 +0000
ROA not before:           Tue 05 Mar 2024 18:17:50 +0000
ROA not after:            Tue 04 Mar 2025 18:22:50 +0000
asID:                     269788
IP address blocks:        138.59.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:56:c2:7c:2c:3d:30:03:c9:02:4f:fb:d7:a2:ae:b4:0a:79:18:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24
        Validity
            Not Before: Mar  5 18:17:50 2024 GMT
            Not After : Mar  4 18:22:50 2025 GMT
        Subject: CN=419FC528EC142A8834EBC3896569718E534E1900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:51:6d:f4:a4:89:97:de:92:a2:2d:f4:51:
                    0b:d2:6d:b2:1a:76:ee:70:95:8b:95:e6:28:dd:da:
                    a8:60:4a:5a:10:2f:b6:e3:bd:62:a5:47:69:3c:95:
                    19:13:61:8c:c3:19:64:90:e2:46:d3:47:49:34:8d:
                    4e:b7:b2:d7:d6:8f:a9:90:0c:33:be:7a:f1:13:c3:
                    25:8d:18:64:50:06:ef:71:10:cf:00:aa:96:97:47:
                    f6:db:3d:1a:61:ab:39:f5:5f:98:95:14:0c:80:7d:
                    39:0f:67:ee:1e:0c:c8:5d:b2:99:ed:78:9c:4c:09:
                    5a:21:59:9d:ae:9f:be:fa:27:b7:9c:23:64:c6:44:
                    1d:bc:30:09:3a:ba:6d:b6:7e:70:a8:70:ac:8c:ce:
                    a0:26:36:cb:30:2e:0f:11:75:d1:8e:a6:1e:b5:9e:
                    14:7e:e8:7f:d6:7b:97:bb:7a:4f:2c:da:06:1b:8f:
                    ac:04:22:92:07:4b:fb:7a:c4:49:0f:b8:1b:af:5f:
                    5d:c5:e7:2d:21:f3:b2:a2:36:08:9d:54:1e:d9:05:
                    0a:ad:e4:18:1d:77:a1:60:f0:f1:2f:f5:09:e1:1b:
                    d6:92:f1:9c:e0:3d:b8:04:c3:c6:42:5c:5f:0d:87:
                    8d:3c:24:6a:c6:d4:f2:6b:1a:bb:bc:a9:ee:88:6e:
                    47:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9F:C5:28:EC:14:2A:88:34:EB:C3:89:65:69:71:8E:53:4E:19:00
            X509v3 Authority Key Identifier:
                keyid:5D:30:85:84:81:6A:CB:0C:C9:C3:5E:D0:9C:51:D8:BB:4A:A6:CE:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/3133382e35392e382e302f32322d3234203d3e20323639373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:eb:9f:59:c3:e2:ee:7d:77:bf:93:e0:d4:1b:82:30:68:ef:
         e5:c4:c9:53:ea:38:ec:0c:00:c4:2b:57:21:63:90:62:40:4d:
         64:f6:40:2d:3b:16:7a:b3:cd:c5:2d:59:3f:91:54:32:05:6e:
         3d:9a:dc:05:29:fc:15:0a:ba:44:1d:7a:97:c3:aa:88:72:d5:
         23:61:5d:a8:37:7e:14:a9:01:e9:aa:09:8d:2c:29:81:47:20:
         ff:bb:d9:8f:3e:43:d5:be:9a:1e:c3:26:67:d2:ab:02:e6:88:
         5a:49:12:58:fa:d0:17:c7:65:0e:9e:6f:9a:7a:93:9d:88:76:
         5b:16:6b:6d:28:53:d3:78:76:dd:bb:ae:92:4b:e8:74:1d:4c:
         ca:81:58:0b:a6:d6:05:06:24:8b:8c:d3:c7:6d:94:de:3b:ea:
         50:ea:c9:55:66:f5:e8:1e:d9:3d:c8:72:7c:66:df:07:28:a2:
         a3:dc:5e:43:77:eb:ac:e3:62:be:5b:9f:e6:9a:73:07:a5:83:
         32:d1:53:3c:57:d8:7f:c4:4f:47:af:9f:b8:97:0f:21:8b:a4:
         e5:31:ee:ee:9f:71:b6:6a:f5:88:f5:5d:5f:2e:ab:2d:12:61:
         cb:65:38:d0:04:4d:19:e5:77:b7:cb:b7:ef:14:b6:49:1a:45:
         06:9e:10:e4
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUPVbCfCw9MAPJAk/716KutAp5GCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQzMDg1ODQ4MTZBQ0IwQ0M5QzM1RUQwOUM1MUQ4QkI0
QUE2Q0UyNDAeFw0yNDAzMDUxODE3NTBaFw0yNTAzMDQxODIyNTBaMDMxMTAvBgNV
BAMTKDQxOUZDNTI4RUMxNDJBODgzNEVCQzM4OTY1Njk3MThFNTM0RTE5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2OlFt9KSJl96Soi30UQvSbbIa
du5wlYuV5ijd2qhgSloQL7bjvWKlR2k8lRkTYYzDGWSQ4kbTR0k0jU63stfWj6mQ
DDO+evETwyWNGGRQBu9xEM8AqpaXR/bbPRphqzn1X5iVFAyAfTkPZ+4eDMhdspnt
eJxMCVohWZ2un776J7ecI2TGRB28MAk6um22fnCocKyMzqAmNsswLg8RddGOph61
nhR+6H/We5e7ek8s2gYbj6wEIpIHS/t6xEkPuBuvX13F5y0h87KiNgidVB7ZBQqt
5Bgdd6Fg8PEv9QnhG9aS8ZzgPbgEw8ZCXF8Nh408JGrG1PJrGru8qe6IbkerAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUQZ/FKOwUKog068OJZWlxjlNOGQAwHwYDVR0j
BBgwFoAUXTCFhIFqywzJw17QnFHYu0qmziQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjdGMEVGMTJERTdENjM0RDlCQkJDQjc1QUMyNkE3MUU2
OTQxNUY5NzI2OTQ2Q0YwOThBQUMwOUE4MEI2REYxLzAvNUQzMDg1ODQ4MTZBQ0Iw
Q0M5QzM1RUQwOUM1MUQ4QkI0QUE2Q0UyNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RDMwODU4NDgxNkFDQjBDQzlD
MzVFRDA5QzUxRDhCQjRBQTZDRTI0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY3RjBFRjEyREU3RDYzNEQ5QkJCQ0I3NUFDMjZBNzFFNjk0MTVGOTcy
Njk0NkNGMDk4QUFDMDlBODBCNkRGMS8wLzMxMzMzODJlMzUzOTJlMzgyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMjM2MzkzNzM4Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKKOwgwDQYJ
KoZIhvcNAQELBQADggEBAAHrn1nD4u59d7+T4NQbgjBo7+XEyVPqOOwMAMQrVyFj
kGJATWT2QC07FnqzzcUtWT+RVDIFbj2a3AUp/BUKukQdepfDqohy1SNhXag3fhSp
AemqCY0sKYFHIP+72Y8+Q9W+mh7DJmfSqwLmiFpJElj60BfHZQ6eb5p6k52IdlsW
a20oU9N4dt27rpJL6HQdTMqBWAum1gUGJIuM08dtlN476lDqyVVm9ege2T3Icnxm
3wcooqPcXkN366zjYr5bn+aacwelgzLRUzxX2H/ET0evn7iXDyGLpOUx7u6fcbZq
9Yj1XV8uqy0SYctlONAETRnld7fLt+8UtkkaRQaeEOQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org