Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231362e302f32332d3233203d3e20323633383233.roa
File:                     3133382e3231392e3231362e302f32332d3233203d3e20323633383233.roa (raw, json)
Hash identifier:          hwcFuu1+kFA28czkIOtmo2jED/lM305rAsVBe4lDmU4=
Subject key identifier:   1F:94:58:32:3A:82:2D:A1:F5:C7:01:FC:49:EC:6B:51:82:C0:DA:CA
Certificate issuer:       /CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Certificate serial:       729FAADD87E8CA521A6E2B505F7303DC68DCC878
Authority key identifier: EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231362e302f32332d3233203d3e20323633383233.roa
Signing time:             Tue 05 Mar 2024 17:48:46 +0000
ROA not before:           Tue 05 Mar 2024 17:43:46 +0000
ROA not after:            Tue 04 Mar 2025 17:48:46 +0000
asID:                     263823
IP address blocks:        138.219.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9f:aa:dd:87:e8:ca:52:1a:6e:2b:50:5f:73:03:dc:68:dc:c8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
        Validity
            Not Before: Mar  5 17:43:46 2024 GMT
            Not After : Mar  4 17:48:46 2025 GMT
        Subject: CN=1F9458323A822DA1F5C701FC49EC6B5182C0DACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:cf:98:a6:9e:e6:0b:ac:f8:a5:8d:10:57:
                    ea:b3:41:52:bf:3c:5c:2a:61:a3:9a:a4:4b:c0:dd:
                    e9:de:87:0a:2b:95:b4:f5:d1:66:ba:6e:a7:b4:7e:
                    38:98:22:86:47:ce:4e:07:e0:94:b6:af:ea:6f:44:
                    11:4f:c2:53:32:33:31:04:d8:5a:dc:d7:d1:a9:16:
                    44:34:a0:b1:f4:70:7d:26:32:85:75:18:8d:cd:34:
                    4a:37:08:b9:bc:5d:b2:7d:6a:c1:a9:ce:3c:1c:03:
                    aa:7c:9f:e2:90:ee:69:e6:fb:32:52:ce:d4:fb:fd:
                    f1:09:60:da:14:a6:13:26:86:ff:98:d5:b7:df:f3:
                    59:15:2d:45:c7:06:48:dc:d9:4e:f1:f2:3c:4a:1c:
                    dd:d3:8e:bb:38:3f:9f:1c:69:80:3b:ec:27:e6:b4:
                    dd:18:a8:d5:67:7c:5e:3d:73:3d:a3:64:05:1c:6e:
                    79:1b:4c:a3:00:34:d0:51:fd:30:a5:43:d1:5d:49:
                    bd:75:0f:6c:c1:02:f0:ef:57:a9:36:c5:0f:ce:30:
                    40:1e:45:b4:e6:60:e7:90:c3:0e:c8:ef:b4:3c:5d:
                    7c:e7:e8:01:67:e7:c5:a8:c5:98:6e:f9:ed:20:2f:
                    83:19:07:73:d8:b8:ce:34:80:5b:ca:c2:68:7d:14:
                    ba:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:94:58:32:3A:82:2D:A1:F5:C7:01:FC:49:EC:6B:51:82:C0:DA:CA
            X509v3 Authority Key Identifier:
                keyid:EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231362e302f32332d3233203d3e20323633383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:4c:75:4c:73:5c:b7:4d:6f:2e:64:ac:2f:e9:51:dc:fe:c2:
         b9:5d:fe:f4:fd:bf:48:cf:02:b4:60:97:0e:8c:d2:fd:2a:8a:
         dc:83:79:e9:47:59:64:1f:b3:e8:59:a9:8e:4a:ad:7d:34:24:
         96:f8:9b:f6:9f:6f:62:53:61:cc:99:88:fc:50:2f:b2:bc:d0:
         31:2c:41:0b:0b:cc:d8:99:3a:c6:f0:08:a6:bf:e9:b3:f4:9d:
         69:91:0e:08:b7:a8:8a:7b:be:12:44:9a:72:dc:75:0c:58:d1:
         c1:e4:9b:07:43:41:cf:1c:b2:36:a8:b7:db:7a:14:b1:c1:2e:
         85:8d:f9:b9:08:26:f1:24:42:69:db:36:f6:6b:87:43:ca:11:
         fb:a3:1e:30:6c:ec:09:77:24:cd:68:93:5d:d2:0a:b6:b6:3f:
         4e:02:1b:3f:67:e8:5c:94:d4:9c:13:fc:74:1d:91:3c:66:a9:
         6c:07:1c:e6:98:ea:be:d8:55:2e:88:e5:98:65:29:ee:ba:b8:
         49:31:44:5c:37:94:0c:d1:b9:92:af:da:5b:32:50:b0:bf:74:
         6d:41:aa:be:90:9d:c6:55:e1:3d:5c:c6:90:09:73:c3:eb:fd:
         3a:55:a4:e1:be:4e:cc:28:6b:df:b7:b8:5e:e8:b4:f2:22:6f:
         62:0e:91:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org