Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3133382e3131372e3132392e302f32342d3234203d3e203532333939.roa
File:                     3133382e3131372e3132392e302f32342d3234203d3e203532333939.roa (raw, json)
Hash identifier:          Djlc26+co7wnRmHOAPaJTGPqwbqSLuL83HEzQ1a4BP4=
Subject key identifier:   88:AE:71:EA:C8:05:2D:86:6A:6F:D7:6F:E3:8D:73:35:A6:32:E0:E5
Certificate issuer:       /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial:       3E63C2A760BB9052831E724109130AE981658DBC
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3133382e3131372e3132392e302f32342d3234203d3e203532333939.roa
Signing time:             Tue 05 Mar 2024 17:43:03 +0000
ROA not before:           Tue 05 Mar 2024 17:38:03 +0000
ROA not after:            Tue 04 Mar 2025 17:43:03 +0000
asID:                     52399
IP address blocks:        138.117.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:63:c2:a7:60:bb:90:52:83:1e:72:41:09:13:0a:e9:81:65:8d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
        Validity
            Not Before: Mar  5 17:38:03 2024 GMT
            Not After : Mar  4 17:43:03 2025 GMT
        Subject: CN=88AE71EAC8052D866A6FD76FE38D7335A632E0E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:90:be:84:39:2e:eb:92:1d:09:0c:ab:a3:
                    91:28:09:a5:2b:e9:b7:84:8b:2a:ad:57:c4:c9:e3:
                    70:4d:3a:b9:a1:c2:91:c8:1e:ff:d9:44:23:4c:bb:
                    a7:8f:4f:6d:2a:1d:1c:a5:68:61:db:ba:3a:72:13:
                    d1:ba:50:6f:b4:e4:05:d9:5d:74:1e:84:7e:33:cb:
                    74:27:5a:4a:24:f1:9e:b8:d8:72:82:4a:8d:aa:58:
                    21:f6:0a:f9:43:f1:fa:15:76:61:4a:54:2b:7d:0f:
                    2a:c9:dd:74:32:02:c8:2a:9a:86:32:99:07:c8:75:
                    3f:fa:17:72:7e:79:f5:6e:fb:86:99:93:fe:e8:0b:
                    32:c9:e7:14:80:0b:9e:cf:a5:4e:00:96:60:60:7f:
                    18:43:e5:cd:1f:25:17:a8:67:d6:b8:f8:2a:13:a1:
                    96:68:64:a5:90:67:4d:c3:d0:92:a6:55:34:b6:00:
                    28:11:75:56:f3:78:21:e2:34:8b:b5:a8:10:eb:65:
                    9a:51:5d:3f:92:68:c5:18:3c:14:5f:71:0a:e4:84:
                    cb:4e:34:53:eb:d1:67:5c:d6:b2:2b:d5:4a:2b:1d:
                    f1:b2:2b:34:a6:a5:3a:73:7f:64:40:c1:6e:58:9f:
                    dd:22:56:d0:ec:0d:b5:71:2b:83:de:3f:26:80:7f:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AE:71:EA:C8:05:2D:86:6A:6F:D7:6F:E3:8D:73:35:A6:32:E0:E5
            X509v3 Authority Key Identifier:
                keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/3133382e3131372e3132392e302f32342d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:c5:68:db:f7:a3:2b:bc:18:5a:a2:36:99:6a:45:21:58:3b:
         b5:e0:4f:08:4b:93:41:71:57:57:25:08:ca:50:ed:f9:40:2d:
         77:7f:52:2c:a9:0e:08:11:35:9a:12:f5:e3:97:62:f9:70:c6:
         ae:76:43:17:ef:94:e6:ce:b8:b4:8d:8d:04:69:cc:b5:70:3d:
         51:2a:0c:ae:d7:78:c1:b7:d4:de:f6:b5:82:d1:5c:60:a2:d4:
         b9:dc:2a:97:ee:aa:42:41:85:86:aa:12:46:a0:ae:ae:c7:c1:
         1a:b9:04:26:1f:92:37:d8:a7:fd:04:27:6f:50:34:62:fc:01:
         b2:63:22:50:47:5d:f9:08:0f:17:e6:99:cd:ef:c7:6f:d9:e6:
         e2:07:0e:8d:4a:f5:de:04:c4:bd:31:62:2f:3f:d2:64:9d:47:
         02:44:88:de:2f:a1:c1:1a:65:6c:e9:ff:29:c2:bf:52:39:4b:
         12:7b:aa:9c:29:2f:6b:c3:93:27:e3:00:3c:59:e2:de:c6:d6:
         c9:21:e3:a1:ba:f3:43:89:86:b8:8e:80:f1:5e:dd:d0:89:0f:
         75:1f:8d:86:40:b9:ff:9c:4a:c5:d1:0f:42:d3:b1:d1:aa:c7:
         f4:dd:55:f3:76:f7:5d:56:36:25:58:a7:44:6e:de:95:b6:a7:
         5d:2b:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org