Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/3133382e3138362e37362e302f32322d3234203d3e20323730303736.roa
File:                     3133382e3138362e37362e302f32322d3234203d3e20323730303736.roa (raw, json)
Hash identifier:          y+AVtw+PmA5/qq8+b/MNW8mM15IvIcBYr38mspZBMcc=
Subject key identifier:   05:37:EA:87:EB:C3:36:07:9F:E6:61:86:BE:B8:4A:41:D2:BF:C8:F8
Certificate issuer:       /CN=CA031C4B7AEACDEFD1937A04646041A208257DB5
Certificate serial:       5EDB43829D3FF522B100DA1E6F27FD9CF759C59F
Authority key identifier: CA:03:1C:4B:7A:EA:CD:EF:D1:93:7A:04:64:60:41:A2:08:25:7D:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/3133382e3138362e37362e302f32322d3234203d3e20323730303736.roa
Signing time:             Tue 05 Mar 2024 18:07:23 +0000
ROA not before:           Tue 05 Mar 2024 18:02:23 +0000
ROA not after:            Tue 04 Mar 2025 18:07:23 +0000
asID:                     270076
IP address blocks:        138.186.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:db:43:82:9d:3f:f5:22:b1:00:da:1e:6f:27:fd:9c:f7:59:c5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA031C4B7AEACDEFD1937A04646041A208257DB5
        Validity
            Not Before: Mar  5 18:02:23 2024 GMT
            Not After : Mar  4 18:07:23 2025 GMT
        Subject: CN=0537EA87EBC336079FE66186BEB84A41D2BFC8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:fe:bb:db:80:31:ae:8f:c9:69:34:b3:b0:
                    83:da:2b:0f:7d:19:4e:f8:f8:bb:0a:4f:05:cc:bf:
                    78:75:1b:48:dc:0a:87:8b:2e:fc:ee:5d:11:4f:cf:
                    50:33:9d:0f:58:ed:81:8f:21:34:ec:42:6d:43:56:
                    f8:27:3f:97:62:22:fb:c7:31:cb:b4:75:50:58:d8:
                    b1:12:77:65:cf:3b:cc:ff:8b:58:1a:5e:fb:f3:29:
                    f5:37:ec:29:74:f4:ba:6b:05:61:5a:48:40:ea:99:
                    9a:c7:ce:e9:e6:4f:01:18:76:23:39:bd:ba:c0:67:
                    5d:d0:ac:c3:eb:d1:e0:71:3d:7d:3c:88:90:1a:b1:
                    84:9e:09:0b:81:af:99:5c:b4:52:ab:8b:37:0c:ee:
                    8a:4b:72:9a:d2:0c:f5:08:6c:9e:1f:17:1f:3d:b5:
                    a8:de:a5:0a:57:ae:b7:c7:0d:7d:71:41:a6:29:43:
                    50:ca:cb:89:d7:18:fb:47:52:2a:4a:5a:f0:9a:52:
                    fc:46:62:78:6f:95:de:24:0b:29:cc:d4:90:72:66:
                    95:fd:54:88:a3:7b:f8:73:41:db:c6:23:a6:d8:7d:
                    9d:02:51:0b:02:a5:66:39:2e:d3:00:42:b4:a1:6a:
                    f5:94:06:ef:5f:ac:40:23:40:89:63:e6:00:1a:52:
                    03:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:37:EA:87:EB:C3:36:07:9F:E6:61:86:BE:B8:4A:41:D2:BF:C8:F8
            X509v3 Authority Key Identifier:
                keyid:CA:03:1C:4B:7A:EA:CD:EF:D1:93:7A:04:64:60:41:A2:08:25:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/3133382e3138362e37362e302f32322d3234203d3e20323730303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:f3:8e:5c:fa:41:e9:30:30:43:69:56:d4:79:e6:08:b6:0d:
         40:39:3b:16:b8:19:5e:24:ae:d4:78:1d:43:7f:46:fc:14:b1:
         3e:02:cc:59:34:81:9a:a1:05:d3:4c:ba:95:90:ed:b2:df:f9:
         73:f9:73:8b:80:80:48:46:98:1b:23:2b:8f:89:c1:6a:9d:19:
         40:ac:1d:5a:5d:14:36:c5:a4:5c:e5:ef:5d:56:97:74:79:34:
         33:ea:db:8c:40:e2:2a:61:84:90:46:6d:7e:de:25:3a:a7:e3:
         ef:f7:95:fa:99:cb:2e:1a:01:4e:08:2b:7f:79:17:bc:d6:73:
         85:86:49:ac:f5:0d:a6:64:42:f5:30:a4:c1:ad:ba:1a:3e:95:
         b7:01:5f:9a:53:15:c4:12:bc:e9:a7:d8:31:ff:2a:de:e2:9f:
         27:45:30:7b:a8:b4:21:f0:5a:49:a9:3e:db:f5:be:24:06:11:
         63:2a:1f:71:14:21:0e:44:bd:f1:a5:e2:93:58:c0:e0:97:b0:
         4e:39:89:4a:12:f4:3c:8d:b1:a8:2a:94:e4:8f:0e:28:97:59:
         17:c5:9a:ca:4a:4d:1d:47:b8:eb:af:e3:86:5a:a7:f5:fe:79:
         4a:45:ee:27:3e:3e:5b:09:12:2b:17:51:e0:40:b0:3e:68:1b:
         98:36:09:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org