Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234352e302f32342d3234203d3e203631353034.roa
File:                     3133382e3230342e3234352e302f32342d3234203d3e203631353034.roa (raw, json)
Hash identifier:          AZC5GAuw00Qwfk2nWl5dnOVXFCePPuSZu7lIOgk4/3w=
Subject key identifier:   9A:04:FC:1D:CA:B3:21:14:34:3F:5C:0C:6A:5F:1D:40:36:30:37:70
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       50B071D7C636BA8B6A53F187172DB37D64CF2B88
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234352e302f32342d3234203d3e203631353034.roa
Signing time:             Tue 05 Mar 2024 18:16:07 +0000
ROA not before:           Tue 05 Mar 2024 18:11:07 +0000
ROA not after:            Tue 04 Mar 2025 18:16:07 +0000
asID:                     61504
IP address blocks:        138.204.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b0:71:d7:c6:36:ba:8b:6a:53:f1:87:17:2d:b3:7d:64:cf:2b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:11:07 2024 GMT
            Not After : Mar  4 18:16:07 2025 GMT
        Subject: CN=9A04FC1DCAB32114343F5C0C6A5F1D4036303770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1d:95:57:d2:99:8d:d7:5d:38:37:68:ae:01:
                    0b:57:e4:d0:7b:2a:fd:ca:e8:29:eb:2e:c9:ff:f2:
                    ed:f0:4a:74:07:f9:d1:7e:36:e3:4d:bf:ff:70:30:
                    75:fe:f9:ea:2a:15:da:b2:28:82:7f:2f:c8:08:23:
                    ba:2a:8c:a1:b5:bd:b5:51:ee:83:7f:f6:fd:08:ff:
                    5b:14:5c:1a:a0:a6:4c:f5:46:3d:a7:a2:91:b6:54:
                    7f:de:8c:b2:91:f7:35:09:81:0a:9c:84:07:ad:66:
                    7c:ff:55:43:ab:e3:67:d6:5e:26:ff:5f:16:80:86:
                    02:5e:bc:4e:05:12:9a:29:a5:83:7e:62:37:2b:da:
                    f8:e4:c4:a4:4e:4a:ac:b2:f2:c8:57:13:67:8f:04:
                    dc:19:1c:48:25:a5:60:4a:fa:40:c9:b1:de:5a:62:
                    b1:1b:93:1f:a7:97:68:c2:13:f3:fc:f1:11:8b:96:
                    1a:e1:c2:59:fc:01:37:bb:14:30:99:72:3b:20:c5:
                    25:fd:2b:94:21:3d:35:30:1f:13:f3:26:da:d3:51:
                    51:da:ef:e4:66:db:58:8b:db:50:f1:67:35:7c:29:
                    ab:30:d9:89:c4:43:a7:33:a3:ca:8b:63:a2:67:7e:
                    b6:42:e5:a0:a4:bf:0a:50:d9:bd:ba:29:34:0c:6e:
                    24:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:04:FC:1D:CA:B3:21:14:34:3F:5C:0C:6A:5F:1D:40:36:30:37:70
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234352e302f32342d3234203d3e203631353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:99:7d:e6:84:10:7b:6d:64:c8:34:32:84:99:8d:38:8a:fd:
         82:43:ee:c4:6a:22:a6:f7:66:da:5d:c8:e9:51:c6:73:f2:ad:
         b4:7f:80:d3:b0:6d:a5:1f:b4:37:a5:03:e2:15:eb:2d:cb:b8:
         87:a3:20:79:07:a3:80:06:60:df:6d:97:65:c3:29:bf:3d:37:
         a2:d5:ef:d0:a5:10:01:ab:58:8b:28:40:39:99:17:59:61:81:
         11:b7:35:86:cc:1e:d6:90:0a:7e:ae:db:ae:48:f8:2f:2c:e6:
         a2:68:14:50:7f:cf:f8:c3:0b:6c:58:f9:b6:d2:7d:8b:90:ed:
         b7:24:7e:84:ad:38:d2:c6:26:75:f6:a0:b5:17:b5:7d:b0:ea:
         45:9a:9f:e7:4b:9e:c7:87:d1:78:36:80:cb:df:0f:6c:1b:31:
         07:8f:47:ee:25:01:98:9c:11:73:f6:45:2c:0c:e2:bb:20:bc:
         af:c1:25:35:31:ad:5b:3c:19:8b:67:5b:14:ea:21:ca:91:70:
         53:b4:50:72:23:e5:cd:b9:23:56:3c:21:0b:a9:84:63:97:20:
         63:3b:1e:e1:0a:c8:da:1c:d9:13:35:eb:32:fa:a5:73:5c:65:
         2b:20:12:5a:1d:39:f7:b4:2f:66:26:d4:03:72:e8:aa:f2:b7:
         7a:72:d2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org