Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235352e302f32342d3234203d3e203631353533.roa
File:                     3133382e3230342e3235352e302f32342d3234203d3e203631353533.roa (raw, json)
Hash identifier:          4jJUNfT5MzSeHGFY0IYkQMhitorqT8tjmJ9EPLxUbwc=
Subject key identifier:   70:FD:B5:70:65:B2:D7:DD:16:F0:A6:25:75:13:C7:53:A6:66:5D:A4
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       23754FCE36ECE9607E30E0852FDD5D82EA793BB3
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235352e302f32342d3234203d3e203631353533.roa
Signing time:             Tue 05 Mar 2024 18:15:52 +0000
ROA not before:           Tue 05 Mar 2024 18:10:52 +0000
ROA not after:            Tue 04 Mar 2025 18:15:52 +0000
asID:                     61553
IP address blocks:        138.204.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 01:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:75:4f:ce:36:ec:e9:60:7e:30:e0:85:2f:dd:5d:82:ea:79:3b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:52 2024 GMT
            Not After : Mar  4 18:15:52 2025 GMT
        Subject: CN=70FDB57065B2D7DD16F0A6257513C753A6665DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:da:67:82:c2:fe:65:73:21:0e:17:e7:1c:
                    d7:52:84:ed:3c:4d:cd:50:f0:62:60:d5:4e:35:13:
                    b4:48:05:8f:e6:23:a2:dd:35:af:bc:9b:8d:d5:ef:
                    fe:e9:4d:7b:30:dc:d4:3a:a5:37:58:52:b9:5d:2f:
                    df:30:fc:27:f6:ca:72:3e:1b:17:27:d4:1f:ff:8b:
                    ca:fc:9a:4f:6c:66:ce:fa:88:1a:cc:f7:07:c9:f4:
                    fd:f7:a9:9d:3e:2e:ec:39:e9:54:39:61:07:32:16:
                    5f:7c:46:6a:af:aa:b7:f1:8c:29:e6:93:c9:88:13:
                    9a:47:42:45:df:3e:0c:bd:de:03:25:73:ae:d6:8e:
                    48:5f:43:29:d1:d6:cd:b4:d2:54:cd:7b:bb:9b:51:
                    29:71:db:00:7e:ab:77:40:93:04:7d:ca:54:72:40:
                    fa:41:40:e7:75:2c:cc:98:a4:a4:dd:8c:34:d1:6d:
                    6c:4c:65:5b:dd:75:dc:14:75:f3:1a:03:6e:90:0b:
                    6d:4c:41:69:94:7c:be:4b:07:43:15:32:a9:85:93:
                    96:6b:95:21:82:11:18:14:42:30:fb:1e:4c:95:e9:
                    5d:32:8c:fa:db:b2:cb:ec:fd:cb:35:12:20:be:a3:
                    5c:bf:15:c6:7d:54:91:d7:c5:64:95:75:39:8e:23:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FD:B5:70:65:B2:D7:DD:16:F0:A6:25:75:13:C7:53:A6:66:5D:A4
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3133382e3230342e3235352e302f32342d3234203d3e203631353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:5f:3f:55:b1:af:72:0e:3c:e7:82:cc:1c:95:7f:cd:a2:ce:
         58:68:4b:79:25:d0:b9:1d:ec:e8:c8:92:0a:b7:0c:77:60:6f:
         86:51:ff:87:a5:8d:1c:07:41:93:85:99:15:8a:26:b0:85:54:
         14:c0:7b:d4:64:5d:44:83:b4:0a:b9:77:95:e4:1f:fc:3c:d5:
         3e:5d:7b:de:e3:21:00:fe:3f:59:fd:00:53:6c:d3:c7:3d:39:
         aa:97:55:13:d6:9f:49:16:3b:82:d2:0f:6e:72:6f:39:7b:c1:
         d9:c8:84:ff:fb:18:71:7f:30:12:a8:5b:66:7e:32:09:c1:43:
         d5:30:be:58:46:56:f0:f9:e5:75:d9:fa:f1:b4:6a:0c:01:f2:
         b0:e6:33:c7:ba:66:df:89:95:2b:c9:99:e3:4f:25:98:a9:8c:
         15:e1:ed:e8:8f:15:0d:6b:56:97:9f:1c:ac:1c:67:f9:69:d8:
         2a:dd:8f:bc:8a:7b:26:02:e2:ba:af:4d:66:c8:c7:52:9b:6d:
         e1:34:b5:75:4c:31:83:85:29:b3:0c:2e:b6:6b:ba:ce:2d:c5:
         6a:13:4d:78:7a:54:79:1d:95:7b:13:f8:86:d9:7f:3d:3d:9f:
         4b:c1:31:1f:06:25:57:11:ce:5c:7f:3d:5f:a8:f2:11:8c:1a:
         ef:a2:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:45 2024 by rpki-client on console-fra.rpki-client.org