Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235332e302f32342d3234203d3e203634313034.roa
File:                     3133382e3230342e3235332e302f32342d3234203d3e203634313034.roa (raw, json)
Hash identifier:          iAyK98n9c35sjYPRwQVKq1knLjq2A23OENmS1BBZGBo=
Subject key identifier:   E7:DE:D5:FA:97:95:04:B0:5A:A0:82:4C:D8:A5:CB:C8:8F:92:48:5F
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       7EFDF855F7A637FBBDC1527FA250F611382B3551
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235332e302f32342d3234203d3e203634313034.roa
Signing time:             Tue 05 Mar 2024 18:15:56 +0000
ROA not before:           Tue 05 Mar 2024 18:10:56 +0000
ROA not after:            Tue 04 Mar 2025 18:15:56 +0000
asID:                     64104
IP address blocks:        138.204.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fd:f8:55:f7:a6:37:fb:bd:c1:52:7f:a2:50:f6:11:38:2b:35:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:56 2024 GMT
            Not After : Mar  4 18:15:56 2025 GMT
        Subject: CN=E7DED5FA979504B05AA0824CD8A5CBC88F92485F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:57:28:e9:cd:74:aa:f1:54:52:51:9a:b5:
                    74:b5:ee:2c:05:4b:4c:3b:af:09:13:d5:b8:a4:0d:
                    a9:46:33:3c:c8:33:11:f8:ed:0d:19:96:39:25:36:
                    f6:ee:f1:6b:f2:cd:98:5a:13:39:7f:c0:eb:32:31:
                    15:18:d9:1f:b9:dd:fd:30:53:00:a1:ad:83:78:57:
                    95:67:87:e4:d5:fd:21:6a:3f:d8:d8:25:8a:9e:ba:
                    16:8b:6b:b2:77:5e:26:65:8c:11:b0:c2:98:83:9d:
                    cd:42:2c:d9:20:fe:79:8f:cf:30:2a:ef:56:15:42:
                    ce:af:ef:f2:0e:54:ee:98:2f:90:d1:0c:d5:0b:17:
                    4c:eb:88:ea:39:68:7a:24:ab:7f:47:9f:1e:cb:27:
                    78:d0:e1:e5:88:54:fc:62:ab:3f:21:c1:a6:a9:bf:
                    36:68:06:e2:c1:3b:25:29:47:df:15:ee:32:7d:f6:
                    80:17:16:6c:53:b3:63:96:84:6c:82:e5:99:b5:5b:
                    b1:70:d7:be:84:0b:d0:17:8d:86:d7:94:cf:56:16:
                    b6:25:97:5b:ef:58:15:2d:d1:59:b7:d6:5b:d2:7a:
                    77:1a:e0:86:fb:c8:59:8d:33:74:98:df:2d:bf:5f:
                    0a:5b:7c:91:c8:2b:69:b1:9c:7f:6f:be:8e:a9:49:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DE:D5:FA:97:95:04:B0:5A:A0:82:4C:D8:A5:CB:C8:8F:92:48:5F
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235332e302f32342d3234203d3e203634313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:e3:ae:eb:4a:25:51:de:19:70:54:15:86:b4:b4:ae:d2:76:
         1a:33:41:dd:bf:42:cc:b4:85:c2:87:bb:88:d5:84:99:22:2a:
         66:ad:b5:22:a7:40:03:b6:30:f8:93:82:f9:51:3a:a3:48:bf:
         03:c7:fb:31:2c:ee:1f:da:f2:c7:ed:84:df:d5:34:ee:7a:57:
         1f:c1:4a:ea:7b:4c:4f:71:d5:d4:b2:15:7d:cc:e9:54:94:6e:
         a8:63:5c:0e:58:37:1c:7a:07:6a:47:0b:c5:5f:80:8d:f5:c6:
         7f:f8:36:a3:69:b4:44:62:50:a8:08:25:c0:26:fc:95:e8:39:
         a7:58:f2:ed:70:c1:0b:b3:35:60:bd:3f:8e:28:f9:9e:a3:05:
         f6:f4:07:2d:3a:7e:e6:76:a4:6d:fd:60:22:36:d7:b6:d8:ad:
         6e:c2:cd:95:00:8a:1e:92:48:b8:a6:77:50:d7:90:3b:c3:93:
         8a:49:02:ec:8d:2c:82:6d:39:8c:00:c5:c2:96:17:ed:41:52:
         30:20:17:8f:f9:75:84:61:89:5d:df:25:db:3f:6c:e8:a6:3a:
         64:d7:e7:90:cd:13:ff:e8:d0:7d:03:a2:c7:ca:d4:76:dc:3b:
         c7:bf:2a:0a:55:fd:d0:44:24:67:4e:6f:da:6f:8f:34:d2:93:
         3b:40:93:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:02 2024 by rpki-client on console-ams.rpki-client.org