Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234392e302f32342d3234203d3e203631353230.roa
File:                     3133382e3230342e3234392e302f32342d3234203d3e203631353230.roa (raw, json)
Hash identifier:          aOrXOLENNz/eOBWiemS4XFoaRVjGcxcsx/j9fDlCqrA=
Subject key identifier:   FA:D9:B5:EC:B0:D7:31:23:A1:FB:2A:0B:B2:6A:4D:16:83:B2:09:DC
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       0BD18B2B3BC414EFD1AB0F5F3E193438A2246526
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234392e302f32342d3234203d3e203631353230.roa
Signing time:             Tue 05 Mar 2024 18:15:52 +0000
ROA not before:           Tue 05 Mar 2024 18:10:52 +0000
ROA not after:            Tue 04 Mar 2025 18:15:52 +0000
asID:                     61520
IP address blocks:        138.204.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d1:8b:2b:3b:c4:14:ef:d1:ab:0f:5f:3e:19:34:38:a2:24:65:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:52 2024 GMT
            Not After : Mar  4 18:15:52 2025 GMT
        Subject: CN=FAD9B5ECB0D73123A1FB2A0BB26A4D1683B209DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:f8:6c:91:d6:ee:fc:d2:d6:0a:ef:0b:26:
                    dc:8d:e3:f0:0e:f9:60:63:26:0b:d9:5c:1b:53:a0:
                    d1:2a:64:a9:8c:79:d7:6f:4c:48:32:ca:e4:18:e1:
                    43:26:56:a0:00:a3:00:e7:2a:1a:69:57:4c:8d:a7:
                    80:91:b4:41:9d:a0:70:16:8e:50:07:cd:6f:0e:9b:
                    c7:12:6e:5a:a6:41:2a:33:72:6d:37:a3:9f:51:c7:
                    06:64:96:5c:17:d6:68:a4:97:44:41:ee:02:56:a5:
                    ce:04:72:a7:3c:36:2c:56:ca:1d:a7:de:3a:f4:a2:
                    21:07:3d:09:17:49:ef:f2:26:66:2a:fd:7c:ab:7f:
                    fb:c5:cb:c1:09:35:88:34:c7:3b:4d:20:8c:20:2a:
                    f9:3a:2c:67:6d:1b:dc:fd:a3:a9:15:05:45:2f:28:
                    48:ec:78:49:c0:bc:3a:0c:6c:a0:c7:41:47:18:a7:
                    3a:b2:b7:3f:ba:e8:8f:d6:c1:0f:50:e6:13:e3:f5:
                    fb:e0:eb:22:ee:4f:39:fc:b2:3f:95:8b:c7:9b:eb:
                    6e:8e:ad:db:2a:33:d5:c8:69:8d:2a:95:0e:51:09:
                    b0:77:43:17:c7:da:5e:33:46:46:7e:f4:9d:e8:af:
                    b3:dd:26:db:32:db:8e:40:e7:ae:6d:b8:6c:6f:d1:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D9:B5:EC:B0:D7:31:23:A1:FB:2A:0B:B2:6A:4D:16:83:B2:09:DC
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3234392e302f32342d3234203d3e203631353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:fa:6d:20:b5:3e:32:29:f1:8b:7a:9f:5a:1c:a2:24:0f:52:
         9f:9b:1a:14:57:35:b3:aa:a4:34:67:8b:c4:b1:53:40:86:2c:
         62:2f:89:f8:59:61:16:10:6b:60:7c:37:bc:21:9e:f3:3f:9e:
         dd:7d:53:ec:3b:79:86:b1:2d:69:bb:59:2b:d4:2a:b7:de:68:
         17:69:c0:25:11:26:ca:d9:90:62:a7:42:10:59:f1:fe:10:b7:
         d4:e1:96:6f:42:5c:39:2f:b1:3f:27:08:1a:69:e5:9e:d2:df:
         00:41:21:ab:db:c7:04:b1:6d:69:21:14:54:9a:0c:20:77:eb:
         00:04:62:e4:68:e8:42:dc:d2:1a:08:94:41:ea:fe:74:08:d5:
         b7:6c:43:44:6c:af:a8:a4:85:b6:ed:7b:b1:77:98:4d:53:c5:
         62:14:13:a3:e3:c2:bf:92:6d:3a:c9:d1:aa:67:51:89:0a:59:
         f7:3e:94:1b:cd:61:e8:a5:da:a6:67:db:1f:39:4d:8d:01:ee:
         ce:bd:29:f0:e7:cc:b2:cf:83:f8:71:db:4c:51:bb:c5:0f:6a:
         e0:4c:5c:a0:32:10:6b:2f:3d:75:ba:13:d2:47:bb:60:69:fb:
         96:44:45:c7:1a:89:1d:48:ee:86:46:9f:a0:6b:9e:8c:d9:42:
         5a:ed:07:4d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUC9GLKzvEFO/Rqw9fPhk0OKIkZSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgxQjM4NzY4ODBGNjNENUY5QkE2RDc2M0Q3RTY2M0U5
REIzNjlGQzAeFw0yNDAzMDUxODEwNTJaFw0yNTAzMDQxODE1NTJaMDMxMTAvBgNV
BAMTKEZBRDlCNUVDQjBENzMxMjNBMUZCMkEwQkIyNkE0RDE2ODNCMjA5REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe7vhskdbu/NLWCu8LJtyN4/AO
+WBjJgvZXBtToNEqZKmMeddvTEgyyuQY4UMmVqAAowDnKhppV0yNp4CRtEGdoHAW
jlAHzW8Om8cSblqmQSozcm03o59RxwZkllwX1mikl0RB7gJWpc4Ecqc8NixWyh2n
3jr0oiEHPQkXSe/yJmYq/Xyrf/vFy8EJNYg0xztNIIwgKvk6LGdtG9z9o6kVBUUv
KEjseEnAvDoMbKDHQUcYpzqytz+66I/WwQ9Q5hPj9fvg6yLuTzn8sj+Vi8eb626O
rdsqM9XIaY0qlQ5RCbB3QxfH2l4zRkZ+9J3or7PdJtsy245A565tuGxv0Zt7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU+tm17LDXMSOh+yoLsmpNFoOyCdwwHwYDVR0j
BBgwFoAUSBs4dogPY9X5um12PX5mPp2zafwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRjgyMDVBNUJCOTcyMDFFOTkwRDMzNzJCN0FGOTQxNTVE
N0YxODYzRUUyRTc5QjQ0NzQwNkYwNTQwRDlCMDAyLzAvNDgxQjM4NzY4ODBGNjNE
NUY5QkE2RDc2M0Q3RTY2M0U5REIzNjlGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80ODFCMzg3Njg4MEY2M0Q1RjlC
QTZENzYzRDdFNjYzRTlEQjM2OUZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUY4MjA1QTVCQjk3MjAxRTk5MEQzMzcyQjdBRjk0MTU1RDdGMTg2M0VF
MkU3OUI0NDc0MDZGMDU0MEQ5QjAwMi8wLzMxMzMzODJlMzIzMDM0MmUzMjM0Mzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzUzMjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAisz5
MA0GCSqGSIb3DQEBCwUAA4IBAQCs+m0gtT4yKfGLep9aHKIkD1KfmxoUVzWzqqQ0
Z4vEsVNAhixiL4n4WWEWEGtgfDe8IZ7zP57dfVPsO3mGsS1pu1kr1Cq33mgXacAl
ESbK2ZBip0IQWfH+ELfU4ZZvQlw5L7E/JwgaaeWe0t8AQSGr28cEsW1pIRRUmgwg
d+sABGLkaOhC3NIaCJRB6v50CNW3bENEbK+opIW27Xuxd5hNU8ViFBOj48K/km06
ydGqZ1GJCln3PpQbzWHopdqmZ9sfOU2NAe7OvSnw58yyz4P4cdtMUbvFD2rgTFyg
MhBrLz11uhPSR7tgafuWREXHGokdSO6GRp+ga56M2UJa7QdN
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:59:21 2024 by rpki-client on console-fra.rpki-client.org