Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/3133382e35392e3134302e302f32322d3234203d3e20323633373337.roa
File:                     3133382e35392e3134302e302f32322d3234203d3e20323633373337.roa (raw, json)
Hash identifier:          EidXBeAO22Rl1oLpgrHCMAp6vaVl2ZJBHRkumzFPKq0=
Subject key identifier:   E0:7D:6B:03:B1:82:D2:7E:34:70:C4:0B:A9:72:EE:27:16:5B:F2:A1
Certificate issuer:       /CN=869E74EC658810B8C74561739A32C426E77C2A2F
Certificate serial:       77D00F3271327351B34A2D1837D6AC5AC85F79E3
Authority key identifier: 86:9E:74:EC:65:88:10:B8:C7:45:61:73:9A:32:C4:26:E7:7C:2A:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/869E74EC658810B8C74561739A32C426E77C2A2F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/3133382e35392e3134302e302f32322d3234203d3e20323633373337.roa
Signing time:             Tue 05 Mar 2024 18:14:05 +0000
ROA not before:           Tue 05 Mar 2024 18:09:05 +0000
ROA not after:            Tue 04 Mar 2025 18:14:05 +0000
asID:                     263737
IP address blocks:        138.59.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/869E74EC658810B8C74561739A32C426E77C2A2F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/869E74EC658810B8C74561739A32C426E77C2A2F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/869E74EC658810B8C74561739A32C426E77C2A2F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d0:0f:32:71:32:73:51:b3:4a:2d:18:37:d6:ac:5a:c8:5f:79:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869E74EC658810B8C74561739A32C426E77C2A2F
        Validity
            Not Before: Mar  5 18:09:05 2024 GMT
            Not After : Mar  4 18:14:05 2025 GMT
        Subject: CN=E07D6B03B182D27E3470C40BA972EE27165BF2A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:c8:4e:a0:3a:fc:42:78:24:1b:a0:13:28:
                    82:fd:54:b3:6f:cd:0e:4f:72:37:f7:39:c0:fe:8c:
                    f0:13:af:74:de:7f:cb:ce:b5:66:76:5e:35:f7:68:
                    a3:d5:c8:b8:98:a2:a5:ff:38:57:cc:d9:eb:c1:9a:
                    a3:2d:30:b0:9d:fa:a6:6a:de:6f:9c:6d:17:19:01:
                    9c:d7:29:45:07:69:74:23:40:c5:ab:de:47:78:d7:
                    63:b1:d8:1d:29:4b:17:22:0d:7d:d7:47:99:03:62:
                    9e:19:9b:0b:96:f4:c3:56:f1:8a:0d:7d:b7:8b:7b:
                    63:94:53:e7:25:60:da:72:e8:2c:fc:5b:39:9f:af:
                    03:0e:4a:2e:b1:3c:88:5e:e4:4a:c0:cf:39:50:6d:
                    91:49:2b:47:5f:61:a2:03:59:56:4e:45:c5:ed:05:
                    7a:5b:d4:e8:0d:e8:31:1f:61:77:6d:6d:eb:0f:6a:
                    c8:eb:cf:02:88:96:1a:21:7b:22:df:49:aa:02:40:
                    d5:96:ec:c1:ee:df:95:2f:59:29:fe:ad:20:44:18:
                    76:b7:0e:27:5c:31:38:4c:de:6a:e8:82:0d:48:01:
                    64:37:9c:d5:3c:23:94:14:41:59:83:30:98:a3:8e:
                    77:c1:38:0b:37:1a:db:6a:ab:f9:b0:51:42:cf:57:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7D:6B:03:B1:82:D2:7E:34:70:C4:0B:A9:72:EE:27:16:5B:F2:A1
            X509v3 Authority Key Identifier:
                keyid:86:9E:74:EC:65:88:10:B8:C7:45:61:73:9A:32:C4:26:E7:7C:2A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/869E74EC658810B8C74561739A32C426E77C2A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/869E74EC658810B8C74561739A32C426E77C2A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/3133382e35392e3134302e302f32322d3234203d3e20323633373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:8c:d1:7d:85:2d:e5:a8:64:95:85:40:7c:ce:e3:24:1f:5d:
         d9:6f:d4:b7:a8:be:9c:df:ec:ca:f1:5e:f9:1c:9b:1a:2a:c0:
         ae:f8:43:fa:bd:7e:70:3a:96:c7:93:5f:a2:72:e2:e9:b6:f5:
         e8:72:0b:d7:01:80:11:22:ca:58:38:9d:01:df:ce:a9:4e:ed:
         72:57:36:50:91:56:72:21:98:5f:49:88:97:0c:3d:1a:06:7c:
         b0:13:a3:b9:2d:38:74:64:9c:01:a7:ef:43:b2:da:27:4a:5b:
         37:36:e5:08:2d:5b:0e:8a:37:ad:22:8d:1b:a4:5a:ad:9e:77:
         0a:75:c9:a4:a6:96:db:7e:52:eb:e6:a3:ad:82:81:62:bd:37:
         30:8b:d8:4e:5c:11:13:8f:2f:e1:df:d3:d1:2b:b8:f5:6d:62:
         9f:5a:55:f5:b8:b8:1f:7f:2a:ee:4e:2b:b9:52:d1:ae:c7:4d:
         29:c7:a4:c3:b4:da:da:09:81:15:0c:23:ee:4d:d4:e0:6d:ce:
         42:bf:04:72:71:11:4b:9f:70:7b:47:f3:0d:85:0a:01:85:e1:
         ad:c5:ff:1d:c6:12:37:c1:d7:87:59:a5:83:30:1e:39:b2:50:
         70:21:35:19:a3:05:1c:27:a5:1c:e9:62:9e:fb:06:98:20:88:
         91:ce:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 10:26:12 2024 by rpki-client on console-ams.rpki-client.org