Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33BA438EAA7050EBE2CB08C463FFD3F9E045F78A815296ECAE0408113B6E5327/0/3133382e3231392e382e302f32322d3234203d3e20323633383133.roa
File:                     3133382e3231392e382e302f32322d3234203d3e20323633383133.roa (raw, json)
Hash identifier:          5UrkitC8XSYwMve08MIUd0CSJvOZMU03Ufz97P/Mv68=
Subject key identifier:   C5:5F:21:29:F0:E5:5D:91:BF:68:86:BA:55:BA:54:13:5D:FC:D6:C3
Certificate issuer:       /CN=E47B3858EC0FF56062500DAB192BDFE2F320B543
Certificate serial:       26F9DABF185CF2BCD791BF8D47936B5071001E9B
Authority key identifier: E4:7B:38:58:EC:0F:F5:60:62:50:0D:AB:19:2B:DF:E2:F3:20:B5:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E47B3858EC0FF56062500DAB192BDFE2F320B543.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33BA438EAA7050EBE2CB08C463FFD3F9E045F78A815296ECAE0408113B6E5327/0/3133382e3231392e382e302f32322d3234203d3e20323633383133.roa
Signing time:             Tue 05 Mar 2024 17:45:22 +0000
ROA not before:           Tue 05 Mar 2024 17:40:22 +0000
ROA not after:            Tue 04 Mar 2025 17:45:22 +0000
asID:                     263813
IP address blocks:        138.219.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33BA438EAA7050EBE2CB08C463FFD3F9E045F78A815296ECAE0408113B6E5327/0/E47B3858EC0FF56062500DAB192BDFE2F320B543.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33BA438EAA7050EBE2CB08C463FFD3F9E045F78A815296ECAE0408113B6E5327/0/E47B3858EC0FF56062500DAB192BDFE2F320B543.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E47B3858EC0FF56062500DAB192BDFE2F320B543.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f9:da:bf:18:5c:f2:bc:d7:91:bf:8d:47:93:6b:50:71:00:1e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47B3858EC0FF56062500DAB192BDFE2F320B543
        Validity
            Not Before: Mar  5 17:40:22 2024 GMT
            Not After : Mar  4 17:45:22 2025 GMT
        Subject: CN=C55F2129F0E55D91BF6886BA55BA54135DFCD6C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:4d:8b:20:bd:31:20:e0:38:41:42:49:68:
                    2d:63:2e:c4:26:20:ff:64:e0:0e:26:ec:cf:8b:fe:
                    52:ee:43:c2:8a:c2:f2:5f:09:55:36:27:57:15:79:
                    81:98:a3:f5:b0:61:a9:d6:54:72:eb:ac:8b:ac:c2:
                    8d:3c:51:10:bd:a9:b2:99:b8:66:15:97:af:06:fc:
                    37:40:ac:8d:44:93:dd:5b:04:db:4c:41:1c:3f:79:
                    27:a0:2e:84:1f:ff:96:ec:90:72:06:e2:2f:11:31:
                    50:fe:92:50:57:b0:a4:73:c3:4a:74:a2:2a:83:7b:
                    ff:0f:24:c4:df:37:5d:8e:bc:80:93:fd:dc:12:18:
                    4d:84:dd:71:5c:02:3f:e2:e9:26:56:ca:ba:d5:d2:
                    ef:32:f6:99:98:37:8c:de:f1:cf:a5:e6:54:cb:40:
                    ef:8e:eb:e0:65:c2:ea:56:5f:50:45:2f:c2:1a:68:
                    85:ee:0b:b3:97:f3:cf:b6:d2:e2:ea:36:79:5d:de:
                    f3:df:88:f0:d5:03:ca:6d:99:48:b5:1f:25:22:7a:
                    32:e3:1e:30:4d:f0:6d:a1:16:f1:76:7c:91:59:7f:
                    b6:b1:61:65:e8:92:f2:0f:f8:9b:c0:57:26:31:29:
                    90:7c:c1:f1:5a:63:80:f8:1e:8c:70:6e:d3:38:07:
                    b5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5F:21:29:F0:E5:5D:91:BF:68:86:BA:55:BA:54:13:5D:FC:D6:C3
            X509v3 Authority Key Identifier:
                keyid:E4:7B:38:58:EC:0F:F5:60:62:50:0D:AB:19:2B:DF:E2:F3:20:B5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33BA438EAA7050EBE2CB08C463FFD3F9E045F78A815296ECAE0408113B6E5327/0/E47B3858EC0FF56062500DAB192BDFE2F320B543.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E47B3858EC0FF56062500DAB192BDFE2F320B543.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33BA438EAA7050EBE2CB08C463FFD3F9E045F78A815296ECAE0408113B6E5327/0/3133382e3231392e382e302f32322d3234203d3e20323633383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:99:df:04:13:a3:5c:c9:27:d6:a1:0a:d7:bd:da:04:1c:7a:
         94:09:5a:37:7f:d0:a8:3f:60:01:f3:15:2a:b6:7f:25:44:cf:
         64:dc:15:3c:44:12:c4:38:63:88:ee:4b:bb:38:a8:57:d8:a5:
         91:a4:79:ce:8c:0a:b1:55:a6:dd:7d:e1:c0:40:8d:97:a1:27:
         96:1f:1b:21:df:9a:2b:8e:36:ff:a0:bc:4f:17:ba:f7:df:c8:
         36:bd:e8:4f:5f:1e:cb:46:d3:d2:e3:1a:6e:00:a1:14:67:b2:
         16:62:ff:51:92:51:bd:1d:9a:60:fe:c5:be:39:a1:91:1e:de:
         13:b3:b9:da:d7:59:74:75:fd:2e:65:c5:c9:23:f1:a0:30:60:
         0b:5c:a3:0c:34:98:be:2b:08:06:9e:c0:05:71:7a:73:f0:ca:
         ad:3b:91:5e:e6:67:93:df:c1:17:11:62:b1:0f:a6:7b:cf:93:
         54:70:07:48:3f:e3:a2:d5:bc:11:19:0e:85:0b:87:55:1f:ea:
         1a:44:e5:b7:22:67:da:34:4a:36:ce:78:d7:b9:46:dc:77:8f:
         d4:f5:c1:b2:c8:06:9f:b6:7c:a8:90:32:ed:21:37:ff:c7:fa:
         10:b9:19:b2:a8:65:fa:ab:b0:2c:2c:6e:06:bb:d1:31:33:0c:
         a3:51:2b:09
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJvnavxhc8rzXkb+NR5NrUHEAHpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ3QjM4NThFQzBGRjU2MDYyNTAwREFCMTkyQkRGRTJG
MzIwQjU0MzAeFw0yNDAzMDUxNzQwMjJaFw0yNTAzMDQxNzQ1MjJaMDMxMTAvBgNV
BAMTKEM1NUYyMTI5RjBFNTVEOTFCRjY4ODZCQTU1QkE1NDEzNURGQ0Q2QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzE2LIL0xIOA4QUJJaC1jLsQm
IP9k4A4m7M+L/lLuQ8KKwvJfCVU2J1cVeYGYo/WwYanWVHLrrIuswo08URC9qbKZ
uGYVl68G/DdArI1Ek91bBNtMQRw/eSegLoQf/5bskHIG4i8RMVD+klBXsKRzw0p0
oiqDe/8PJMTfN12OvICT/dwSGE2E3XFcAj/i6SZWyrrV0u8y9pmYN4ze8c+l5lTL
QO+O6+BlwupWX1BFL8IaaIXuC7OX88+20uLqNnld3vPfiPDVA8ptmUi1HyUiejLj
HjBN8G2hFvF2fJFZf7axYWXokvIP+JvAVyYxKZB8wfFaY4D4HoxwbtM4B7WxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUxV8hKfDlXZG/aIa6VbpUE1381sMwHwYDVR0j
BBgwFoAU5Hs4WOwP9WBiUA2rGSvf4vMgtUMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zM0JBNDM4RUFBNzA1MEVCRTJDQjA4QzQ2M0ZGRDNGOUUw
NDVGNzhBODE1Mjk2RUNBRTA0MDgxMTNCNkU1MzI3LzAvRTQ3QjM4NThFQzBGRjU2
MDYyNTAwREFCMTkyQkRGRTJGMzIwQjU0My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNDdCMzg1OEVDMEZGNTYwNjI1
MDBEQUIxOTJCREZFMkYzMjBCNTQzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzNCQTQzOEVBQTcwNTBFQkUyQ0IwOEM0NjNGRkQzRjlFMDQ1Rjc4QTgx
NTI5NkVDQUUwNDA4MTEzQjZFNTMyNy8wLzMxMzMzODJlMzIzMTM5MmUzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMzM4MzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAorbCDAN
BgkqhkiG9w0BAQsFAAOCAQEAgJnfBBOjXMkn1qEK173aBBx6lAlaN3/QqD9gAfMV
KrZ/JUTPZNwVPEQSxDhjiO5LuzioV9ilkaR5zowKsVWm3X3hwECNl6Enlh8bId+a
K442/6C8Txe699/INr3oT18ey0bT0uMabgChFGeyFmL/UZJRvR2aYP7FvjmhkR7e
E7O52tdZdHX9LmXFySPxoDBgC1yjDDSYvisIBp7ABXF6c/DKrTuRXuZnk9/BFxFi
sQ+me8+TVHAHSD/jotW8ERkOhQuHVR/qGkTltyJn2jRKNs5417lG3HeP1PXBssgG
n7Z8qJAy7SE3/8f6ELkZsqhl+quwLCxuBrvRMTMMo1ErCQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org