Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/245447BDA6793C98FB5F0548ACCA3E78899B4B1860031A0C60493FE26A33E79E/0/3133382e3231392e31362e302f32322d3234203d3e20323633383134.roa
File:                     3133382e3231392e31362e302f32322d3234203d3e20323633383134.roa (raw, json)
Hash identifier:          F+Z24esTGbHQoHaeQ2TdQHm5gNfrCEMHHlIaU1w3dqs=
Subject key identifier:   64:57:5B:8E:EB:2B:A6:F5:FF:9D:27:67:C9:26:18:60:BC:B6:AB:D3
Certificate issuer:       /CN=A7B0C2F534B2AADD905600204A56AB4703774303
Certificate serial:       0F9DBFA6432B133FD5F0BC1AFAB67EDA38C33E4C
Authority key identifier: A7:B0:C2:F5:34:B2:AA:DD:90:56:00:20:4A:56:AB:47:03:77:43:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B0C2F534B2AADD905600204A56AB4703774303.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/245447BDA6793C98FB5F0548ACCA3E78899B4B1860031A0C60493FE26A33E79E/0/3133382e3231392e31362e302f32322d3234203d3e20323633383134.roa
Signing time:             Tue 05 Mar 2024 17:45:03 +0000
ROA not before:           Tue 05 Mar 2024 17:40:03 +0000
ROA not after:            Tue 04 Mar 2025 17:45:03 +0000
asID:                     263814
IP address blocks:        138.219.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/245447BDA6793C98FB5F0548ACCA3E78899B4B1860031A0C60493FE26A33E79E/0/A7B0C2F534B2AADD905600204A56AB4703774303.crl
                          rsync://repository.lacnic.net/rpki/lacnic/245447BDA6793C98FB5F0548ACCA3E78899B4B1860031A0C60493FE26A33E79E/0/A7B0C2F534B2AADD905600204A56AB4703774303.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B0C2F534B2AADD905600204A56AB4703774303.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9d:bf:a6:43:2b:13:3f:d5:f0:bc:1a:fa:b6:7e:da:38:c3:3e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7B0C2F534B2AADD905600204A56AB4703774303
        Validity
            Not Before: Mar  5 17:40:03 2024 GMT
            Not After : Mar  4 17:45:03 2025 GMT
        Subject: CN=64575B8EEB2BA6F5FF9D2767C9261860BCB6ABD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:c1:a7:93:b9:30:a8:28:80:3c:19:23:e4:
                    b5:e9:74:60:8a:6e:e8:60:43:ae:9a:e6:4f:c2:5c:
                    2a:03:91:a5:b5:5d:32:46:99:6e:37:0c:1d:34:22:
                    70:95:cf:9f:25:89:3b:6b:8b:25:9c:dc:26:1c:9b:
                    29:9a:00:1f:c4:b2:9a:fb:92:69:4e:b2:d1:ba:c1:
                    4d:04:c5:96:32:18:45:f0:42:c4:af:58:15:ed:6e:
                    4b:60:01:54:0b:83:4e:a2:6e:88:40:94:18:47:b1:
                    f6:ad:1e:e9:f9:23:76:ce:91:33:1d:1f:f9:69:fe:
                    b0:73:c2:58:65:e4:b9:1d:bc:ef:39:94:92:a9:0c:
                    82:f5:f2:91:8e:bb:16:56:b8:4f:a5:f2:25:7b:1b:
                    6d:f3:fb:d4:83:a7:46:b5:d0:e7:8d:e5:d5:a0:bc:
                    10:b9:f0:85:14:9b:e1:ec:b4:a5:10:f9:3a:85:58:
                    5a:d4:74:e2:9b:a1:1b:bf:7d:53:37:73:d2:51:78:
                    37:04:84:ba:40:57:98:9c:16:3f:06:af:f4:e4:60:
                    96:70:b0:eb:08:81:09:8f:6e:aa:5e:32:87:78:03:
                    01:70:65:8e:58:ad:d6:c0:86:87:d8:ee:e7:48:e8:
                    f2:b9:1c:a3:16:15:0f:6f:7e:2b:d8:a3:e9:0d:5f:
                    d1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:57:5B:8E:EB:2B:A6:F5:FF:9D:27:67:C9:26:18:60:BC:B6:AB:D3
            X509v3 Authority Key Identifier:
                keyid:A7:B0:C2:F5:34:B2:AA:DD:90:56:00:20:4A:56:AB:47:03:77:43:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/245447BDA6793C98FB5F0548ACCA3E78899B4B1860031A0C60493FE26A33E79E/0/A7B0C2F534B2AADD905600204A56AB4703774303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7B0C2F534B2AADD905600204A56AB4703774303.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/245447BDA6793C98FB5F0548ACCA3E78899B4B1860031A0C60493FE26A33E79E/0/3133382e3231392e31362e302f32322d3234203d3e20323633383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:df:6d:d9:3b:ff:55:49:96:10:77:dc:0d:16:4e:f3:b9:29:
         d1:d6:e7:c9:69:fe:2b:f7:df:63:ae:f9:32:19:db:85:7b:37:
         d0:1c:2c:d4:ad:4c:15:be:a7:43:5d:4c:c8:11:b9:2e:04:70:
         2d:12:d5:69:6d:b7:3e:b1:60:3d:2a:e3:8d:c4:22:14:71:d2:
         e8:20:bc:a5:55:a0:3b:bc:74:63:e4:ee:6b:7d:7e:b7:2c:f9:
         37:56:4e:dc:e4:31:70:c1:b8:61:d4:bd:b9:8d:29:99:49:80:
         90:a7:7c:7b:36:6b:b8:2a:35:b9:d4:d7:fb:42:e1:cc:b4:a1:
         eb:2d:43:62:72:40:ba:41:37:2e:69:ce:79:47:52:0a:bf:cf:
         e6:23:95:f6:f7:24:cf:cd:31:0e:3f:a7:5d:ba:3c:16:73:d7:
         f3:72:dd:62:b4:c6:58:e9:c9:51:7e:01:ee:c4:dd:1a:b2:a9:
         73:41:a4:b0:0a:eb:76:3b:9d:25:72:dd:81:35:8f:cb:e4:d5:
         93:4c:a5:33:ca:df:39:1d:46:8a:90:05:77:92:11:5b:8e:13:
         36:1c:dc:c1:5c:41:7f:8e:1f:dc:78:f2:e3:46:94:30:a4:31:
         5c:65:d3:9f:6a:0a:64:89:0f:71:9b:b4:be:a7:ea:2d:04:71:
         e0:2d:de:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org