Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231382e302f32342d3234203d3e20323633383233.roa
File:                     3133382e3231392e3231382e302f32342d3234203d3e20323633383233.roa (raw, json)
Hash identifier:          l0/CluGEpVd6jMNadMOKuC9M2J59+9QQwqocDoS4T28=
Subject key identifier:   2C:09:A9:E9:35:D9:42:A7:88:83:40:BA:7A:46:F6:46:4B:E9:6A:60
Certificate issuer:       /CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Certificate serial:       3E7C55884FB2D0B30F6A06B94B84636EFA6BE739
Authority key identifier: EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231382e302f32342d3234203d3e20323633383233.roa
Signing time:             Tue 05 Mar 2024 17:48:45 +0000
ROA not before:           Tue 05 Mar 2024 17:43:45 +0000
ROA not after:            Tue 04 Mar 2025 17:48:45 +0000
asID:                     263823
IP address blocks:        138.219.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7c:55:88:4f:b2:d0:b3:0f:6a:06:b9:4b:84:63:6e:fa:6b:e7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
        Validity
            Not Before: Mar  5 17:43:45 2024 GMT
            Not After : Mar  4 17:48:45 2025 GMT
        Subject: CN=2C09A9E935D942A7888340BA7A46F6464BE96A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:98:49:a5:70:8e:07:ad:19:a0:cf:d5:4e:
                    1c:c4:6b:d9:1e:26:67:bf:64:29:f9:b1:b6:94:01:
                    e3:c5:5b:ee:81:8e:0e:ac:c5:f5:15:88:dc:e0:d7:
                    ae:dc:3c:92:76:94:41:ca:4b:45:83:99:b5:1e:90:
                    56:1b:9f:11:3c:f8:fc:d2:c0:3f:62:f3:81:61:99:
                    39:51:d7:a0:3a:c0:f3:12:a6:f9:34:46:ad:90:df:
                    34:7a:40:be:b5:16:c7:9b:6b:2b:22:5f:46:83:b8:
                    c4:29:fb:55:57:3a:47:39:bf:bc:61:7b:7f:bd:07:
                    3b:50:12:56:9e:6e:51:22:2a:44:e7:6a:a8:f4:b7:
                    50:90:37:31:18:d6:07:ab:d1:25:26:65:64:ae:76:
                    44:2f:ec:c5:32:ae:9f:76:1d:48:d5:3e:50:2e:4c:
                    92:49:01:af:7f:68:21:5d:12:0f:20:8c:7c:2f:63:
                    96:97:75:4c:e8:08:c6:3d:14:08:03:dd:be:9a:62:
                    a3:9d:b9:2f:ba:11:6c:59:ac:75:8e:eb:ff:90:fb:
                    ec:d5:17:aa:e4:04:0d:c1:de:7f:a7:07:41:89:2f:
                    0d:63:56:19:a0:f5:d6:ac:15:93:6d:80:5c:42:31:
                    26:ca:fe:c7:c4:9e:bd:48:18:9c:32:af:8e:62:af:
                    19:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:09:A9:E9:35:D9:42:A7:88:83:40:BA:7A:46:F6:46:4B:E9:6A:60
            X509v3 Authority Key Identifier:
                keyid:EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231382e302f32342d3234203d3e20323633383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:3e:37:e6:e5:36:d0:31:78:ef:4c:bf:ac:9f:2e:91:0c:52:
         65:f0:9c:f3:1c:98:f3:62:b5:0e:3f:af:fe:a7:99:19:56:a1:
         07:78:cc:e8:87:da:1d:93:c4:b1:d2:5a:e0:2c:f8:7a:dd:07:
         50:75:7e:4d:00:82:f9:cf:f1:c3:b3:4b:0f:8d:dc:97:93:5a:
         1b:c7:e1:ca:29:c6:11:27:4b:da:24:14:93:39:78:80:82:54:
         cf:33:e0:79:77:1c:7b:f1:24:7f:47:ca:4a:9e:b3:3a:4b:d3:
         f5:10:11:32:4c:35:20:ed:56:ed:49:b9:98:3c:8c:72:43:40:
         72:a6:76:e5:2c:d2:d6:7f:11:f6:bb:1d:5f:ce:05:10:5b:1e:
         5b:97:c8:6a:68:3f:16:c6:00:0c:98:90:7e:c3:55:b2:a5:0d:
         d4:e5:c5:02:4a:57:08:20:6c:eb:cb:fa:e9:d1:84:09:4f:77:
         30:d0:be:bc:aa:01:8b:93:6d:26:8b:a8:b6:9a:13:cc:88:3c:
         c7:7f:5a:9a:b9:d1:a7:b5:1d:f2:1c:c7:4c:bc:3a:d8:40:df:
         dc:d8:bb:0d:8c:35:ab:cd:d6:c7:6e:17:b7:99:b1:7c:fd:46:
         b2:18:b9:21:48:05:cc:99:b7:4e:7c:e4:00:1a:33:d7:73:40:
         40:5d:27:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:16:38 2024 by rpki-client on console-fra.rpki-client.org