Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/3133382e3138352e3230382e302f32322d3234203d3e203238313034.roa
File:                     3133382e3138352e3230382e302f32322d3234203d3e203238313034.roa (raw, json)
Hash identifier:          iG3pTMXHUBfDIuUuhhJv64F89QkJZN8FmJFOTsQgUsY=
Subject key identifier:   F3:1D:87:E5:90:D0:05:53:E9:2D:28:67:0B:B9:5F:D9:6F:26:81:44
Certificate issuer:       /CN=07B279A78014BD804AEF302752B00CB986444A33
Certificate serial:       218DEC98B05AD684EFBCDE1D58C02BBD49C8DA87
Authority key identifier: 07:B2:79:A7:80:14:BD:80:4A:EF:30:27:52:B0:0C:B9:86:44:4A:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07B279A78014BD804AEF302752B00CB986444A33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/3133382e3138352e3230382e302f32322d3234203d3e203238313034.roa
Signing time:             Thu 22 Aug 2024 14:30:00 +0000
ROA not before:           Thu 22 Aug 2024 14:25:00 +0000
ROA not after:            Thu 21 Aug 2025 14:30:00 +0000
asID:                     28104
IP address blocks:        138.185.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/07B279A78014BD804AEF302752B00CB986444A33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/07B279A78014BD804AEF302752B00CB986444A33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07B279A78014BD804AEF302752B00CB986444A33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8d:ec:98:b0:5a:d6:84:ef:bc:de:1d:58:c0:2b:bd:49:c8:da:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07B279A78014BD804AEF302752B00CB986444A33
        Validity
            Not Before: Aug 22 14:25:00 2024 GMT
            Not After : Aug 21 14:30:00 2025 GMT
        Subject: CN=F31D87E590D00553E92D28670BB95FD96F268144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:c8:36:f6:4f:56:ac:6a:7c:f3:92:a5:d5:
                    ef:4b:b7:9b:e7:80:a1:b7:92:85:42:d2:8c:15:48:
                    92:93:12:08:5c:da:0f:4f:03:67:70:48:c1:34:36:
                    d6:69:4a:f8:5d:4e:21:00:04:bb:61:f8:eb:b5:13:
                    a3:0c:db:84:0e:95:1a:52:b7:93:f8:85:77:21:64:
                    9e:54:d1:59:8f:60:29:99:6a:14:72:32:3e:57:da:
                    a6:a4:e2:e2:3f:06:92:e3:73:f5:92:6d:32:ae:e2:
                    02:6f:94:ab:1a:81:cf:7b:65:20:98:05:ee:e2:a5:
                    05:87:1d:c7:c2:a9:9d:e6:f5:94:c5:06:10:78:a7:
                    7b:0f:f9:c8:3e:30:1d:c2:8f:dd:33:65:b1:09:91:
                    17:05:9e:1e:d6:e4:a7:f2:97:46:29:19:87:83:18:
                    53:14:b9:dd:83:c4:51:99:1d:9c:81:90:33:79:62:
                    b6:31:5f:c7:c3:f0:d9:db:a6:3a:9e:20:8a:b8:1d:
                    52:20:52:b5:e0:60:0d:ce:2a:c3:38:e0:9f:f6:6a:
                    6f:bf:cc:20:ce:6f:3a:ea:1f:f8:c9:a6:66:78:1d:
                    91:54:c5:70:95:64:bd:ee:5d:e2:04:dc:28:8b:9e:
                    29:f8:2c:9f:58:c5:7d:bb:61:5d:08:b0:93:11:f6:
                    ab:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1D:87:E5:90:D0:05:53:E9:2D:28:67:0B:B9:5F:D9:6F:26:81:44
            X509v3 Authority Key Identifier:
                keyid:07:B2:79:A7:80:14:BD:80:4A:EF:30:27:52:B0:0C:B9:86:44:4A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/07B279A78014BD804AEF302752B00CB986444A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07B279A78014BD804AEF302752B00CB986444A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F99FF5801B2459EEC31A6FFF2D986852EF2EF686382661B869B9A371D6DF6E1/0/3133382e3138352e3230382e302f32322d3234203d3e203238313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:a5:d3:f0:15:2f:50:7f:dc:55:f1:90:ae:c1:03:dc:95:0c:
         b2:3e:83:78:0c:47:1c:4d:c1:b0:9e:7d:76:d9:e9:ba:89:95:
         df:5d:0d:39:d5:d9:5c:0e:a8:70:3a:d4:ca:96:32:48:63:33:
         ce:ea:02:2e:55:99:0c:6e:f2:66:39:ea:54:43:47:b0:f3:16:
         ef:d0:c7:2b:bc:db:de:93:28:fb:d8:00:04:4d:13:a1:79:c4:
         80:d1:af:8a:e4:de:b7:53:b6:c3:cd:47:8c:da:3c:33:58:ae:
         ef:50:ec:43:cd:f5:cf:0f:72:16:fe:53:8b:37:90:a7:15:7f:
         2f:95:ce:2b:5a:50:29:27:ea:0e:64:44:43:2c:54:ae:11:0e:
         23:fe:d1:e3:c2:a4:76:af:ca:09:40:f7:5b:95:a8:87:34:cd:
         d5:60:e6:88:ba:49:11:95:e7:4f:6a:e1:bc:91:29:13:f3:8a:
         37:84:55:4f:0c:2d:95:7c:fb:32:93:7a:e1:6a:e6:9b:fc:c6:
         cb:7a:60:d6:61:c9:d6:16:ed:66:66:8b:cf:79:5e:25:65:c4:
         06:f2:c8:40:b1:1c:55:59:10:8e:76:26:0b:35:c5:08:cd:21:
         9d:16:7d:65:08:8f:55:96:19:68:7d:29:20:0c:09:8c:64:3c:
         32:00:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 18:40:56 2024 by rpki-client on console-ams.rpki-client.org