Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/3133382e3231392e36302e302f32322d3234203d3e203631353038.roa
File:                     3133382e3231392e36302e302f32322d3234203d3e203631353038.roa (raw, json)
Hash identifier:          7coQsbCgRTxTb9JmA7z7hbbdUnCjy/ZSCQ0ZT7NXP8c=
Subject key identifier:   EF:04:F6:B3:B4:27:A2:0F:AE:1E:12:57:20:76:CB:32:9B:C1:B8:40
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       5952328EA6439EEF5B9ABA08CF98A5DEB948FBA9
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/3133382e3231392e36302e302f32322d3234203d3e203631353038.roa
Signing time:             Tue 05 Mar 2024 17:47:29 +0000
ROA not before:           Tue 05 Mar 2024 17:42:29 +0000
ROA not after:            Tue 04 Mar 2025 17:47:29 +0000
asID:                     61508
IP address blocks:        138.219.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:52:32:8e:a6:43:9e:ef:5b:9a:ba:08:cf:98:a5:de:b9:48:fb:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Mar  5 17:42:29 2024 GMT
            Not After : Mar  4 17:47:29 2025 GMT
        Subject: CN=EF04F6B3B427A20FAE1E12572076CB329BC1B840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6e:a8:46:4a:cb:af:12:76:0c:8e:d4:f0:e0:
                    ac:70:09:40:98:c5:51:9f:ad:d5:62:a3:49:5d:ee:
                    68:71:58:67:af:89:56:7a:07:40:e2:ff:46:6f:5b:
                    d3:8c:0a:f4:da:ef:55:bd:ce:03:90:26:87:f3:73:
                    d3:8c:17:6b:f0:7a:45:86:bc:de:87:2d:bc:04:35:
                    44:42:46:59:a7:31:cc:28:93:e5:71:fb:3a:e3:ac:
                    1b:2c:7b:e1:62:6d:4f:8b:c4:0c:6b:f4:e8:b1:16:
                    ec:32:13:5f:1c:d4:47:04:08:ed:b5:fc:4b:8a:81:
                    dd:34:1b:af:f4:89:46:ff:31:84:f7:ad:c8:9c:eb:
                    1c:3c:bf:8f:65:ef:eb:cf:6a:62:6b:6a:b0:06:5d:
                    9d:d4:37:0e:02:9a:b1:cc:0b:14:e1:96:3f:0b:5c:
                    21:a5:4c:cd:22:17:06:60:1b:1f:9f:15:44:9b:c4:
                    58:7f:37:e4:dc:5e:fb:a7:76:4c:d8:f9:e5:39:e6:
                    bc:be:4e:d9:38:95:88:40:da:16:4b:0b:26:ad:24:
                    cb:8e:ed:29:5f:16:16:b2:25:33:b0:0c:54:47:60:
                    1d:3f:30:25:b4:a1:57:ff:47:0d:d0:61:aa:9d:25:
                    05:35:02:1b:2e:5e:40:dd:80:62:80:8d:fa:29:ca:
                    c9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:04:F6:B3:B4:27:A2:0F:AE:1E:12:57:20:76:CB:32:9B:C1:B8:40
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/3133382e3231392e36302e302f32322d3234203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:f7:54:0b:79:2e:8c:b3:cb:1f:47:95:9d:e4:de:00:3e:
         d6:32:30:a5:94:18:49:03:01:d2:68:b7:bd:c9:ff:8e:c6:2d:
         15:09:da:34:89:ee:e7:f9:04:47:20:e6:67:ad:30:59:29:e9:
         d8:ba:19:6e:d5:e1:b9:ef:6c:f7:75:45:c9:8c:7c:f3:ee:e0:
         78:56:30:bb:87:27:71:c7:c7:3d:a6:ed:82:62:ca:6e:55:55:
         59:ef:2e:b7:58:9f:d2:5c:0d:51:ea:9e:eb:e0:2d:31:c8:14:
         94:8f:e0:f3:39:b3:03:fd:07:2b:80:7c:5c:bf:4a:05:c2:b5:
         57:d2:2d:96:e6:ff:54:24:bc:95:d8:f6:cb:ba:e7:e0:26:d0:
         84:55:88:e3:1f:ff:f7:f3:88:47:2b:2e:03:af:47:82:48:04:
         17:21:d0:e6:0d:9f:69:16:10:c2:7f:da:11:fd:6f:67:2e:d5:
         a7:10:43:13:36:11:2a:44:a9:2e:e3:fa:c2:a0:dc:d3:5f:c5:
         82:53:b7:48:ce:97:4c:d8:5f:36:1d:38:5e:f7:e7:3e:23:23:
         2b:92:5b:c5:d9:18:16:42:09:b7:d2:94:bc:76:12:4d:42:b7:
         fc:1f:d8:05:e6:33:d1:4d:92:a4:50:24:7e:d4:7d:05:6f:c2:
         2b:f7:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org