Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/3133382e3235352e3131382e302f32342d3234203d3e20323635353031.roa
File:                     3133382e3235352e3131382e302f32342d3234203d3e20323635353031.roa (raw, json)
Hash identifier:          BDaUGH7elVhxNCnV59Fh5fiYDHHARLXjL+YBOktkShc=
Subject key identifier:   FA:3F:73:A6:9F:4A:0C:40:B2:98:2E:63:E7:8B:B5:3D:F4:A5:C9:B8
Certificate issuer:       /CN=35D619733A3D3A776B2D5FB84305186B942E249A
Certificate serial:       58C751BC57FE2202B0802D30104E7E6E907E9869
Authority key identifier: 35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/3133382e3235352e3131382e302f32342d3234203d3e20323635353031.roa
Signing time:             Tue 05 Mar 2024 18:00:44 +0000
ROA not before:           Tue 05 Mar 2024 17:55:44 +0000
ROA not after:            Tue 04 Mar 2025 18:00:44 +0000
asID:                     265501
IP address blocks:        138.255.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c7:51:bc:57:fe:22:02:b0:80:2d:30:10:4e:7e:6e:90:7e:98:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35D619733A3D3A776B2D5FB84305186B942E249A
        Validity
            Not Before: Mar  5 17:55:44 2024 GMT
            Not After : Mar  4 18:00:44 2025 GMT
        Subject: CN=FA3F73A69F4A0C40B2982E63E78BB53DF4A5C9B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:3b:8d:32:82:e2:45:73:2c:04:aa:fc:c9:
                    79:2d:2d:be:39:1b:77:2c:55:02:19:40:4e:9a:c5:
                    71:5e:37:70:ce:d4:58:87:ff:c8:3b:e2:37:92:e5:
                    7f:ff:22:0e:fb:9d:9a:72:66:34:6b:22:a7:d0:98:
                    07:66:3c:7a:5e:6c:30:fd:02:7d:0b:4d:29:6d:4f:
                    d0:39:e9:cb:28:ea:33:54:6c:a1:02:be:8f:08:3d:
                    a8:c5:14:41:e3:ce:2a:88:f7:5b:31:eb:81:20:fa:
                    54:32:94:c7:d5:3c:63:58:9b:ca:05:db:d6:fb:09:
                    0f:9a:3b:6c:96:cf:74:50:7c:58:d2:2e:82:81:dd:
                    e5:5c:28:b0:2d:cf:7d:88:c8:1e:bf:93:84:7a:36:
                    b0:06:a4:df:c9:ad:bb:ea:8b:6b:49:72:94:6d:98:
                    1c:65:99:b1:c7:ed:e5:59:3a:8e:6e:8d:9b:83:b7:
                    2f:3c:48:27:88:5e:49:0e:86:8f:c4:6d:65:56:d0:
                    93:d1:99:93:58:32:ab:1b:f8:10:d5:db:fb:79:7f:
                    ee:69:4e:a4:51:4c:1a:4f:de:89:8a:39:2b:fc:ba:
                    4a:1e:7d:36:99:bd:53:5a:f7:06:ec:bd:5a:04:16:
                    cd:e6:3a:5c:3e:7e:61:d9:e8:a5:3e:d6:62:12:88:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3F:73:A6:9F:4A:0C:40:B2:98:2E:63:E7:8B:B5:3D:F4:A5:C9:B8
            X509v3 Authority Key Identifier:
                keyid:35:D6:19:73:3A:3D:3A:77:6B:2D:5F:B8:43:05:18:6B:94:2E:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/35D619733A3D3A776B2D5FB84305186B942E249A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35D619733A3D3A776B2D5FB84305186B942E249A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9B0DC05AFAB7ECB3A379DDC6D51C548D3A711D9C10462F2B6ABC1E75E1019/0/3133382e3235352e3131382e302f32342d3234203d3e20323635353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:3b:f7:4a:dc:23:a7:5e:5f:4d:f4:9a:42:9a:75:ef:ff:a9:
         ce:96:60:98:fc:1a:5b:41:c1:dc:9a:c8:98:5c:16:22:cb:69:
         99:b4:ce:97:79:ad:56:ed:b3:a2:2a:5c:15:5a:16:51:9e:04:
         3b:54:c4:53:58:34:dd:9b:72:ba:8c:97:a1:4e:c5:63:c9:dd:
         83:d1:24:c4:7f:c6:32:26:b2:e2:57:f9:aa:a9:ae:94:57:94:
         0e:30:11:be:18:30:ca:c7:46:0b:9c:46:2b:16:f7:99:5f:67:
         1f:44:10:6d:7e:46:0e:40:fc:18:14:15:f7:03:1e:4f:38:d3:
         e0:cd:69:57:6b:75:61:c2:7a:06:33:97:1b:12:e7:b0:c8:b0:
         c0:0b:56:6c:b8:c3:f2:7c:1b:13:5b:e6:35:00:36:78:c5:dd:
         8b:35:dd:b7:d4:aa:f0:3b:fd:34:a9:49:8a:65:df:6d:82:08:
         7e:3a:af:46:e4:31:19:27:41:95:8b:a6:24:c1:47:4c:2a:05:
         15:56:74:87:46:ff:e2:14:09:66:64:c9:a7:95:9b:e5:a9:9f:
         c6:aa:8b:c4:f4:e1:e4:88:72:31:34:6c:ae:a3:0f:fe:73:2c:
         5c:75:94:a9:4f:81:15:b1:12:c9:bb:f8:b1:7a:43:09:74:a1:
         10:68:f1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org