Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3658AF925DEAE29C95924D43328E552C69019A2FBD4196F2DB65F3EB23A671F1/0/3133382e3131372e3133362e302f32322d3234203d3e203631343938.roa
File:                     3133382e3131372e3133362e302f32322d3234203d3e203631343938.roa (raw, json)
Hash identifier:          yglYuX35/s9RLfoCFqtKEWmdNQN9XrT5SbFDD7PXAqg=
Subject key identifier:   8B:6C:C5:59:5C:9D:A6:43:21:2E:0F:90:50:F4:05:D2:FF:4E:34:94
Certificate issuer:       /CN=6B1C7B3FD8C9E73A35C17F47E51163234F403702
Certificate serial:       58136927EB9D01F96BB95E3963A6786A26ADABFD
Authority key identifier: 6B:1C:7B:3F:D8:C9:E7:3A:35:C1:7F:47:E5:11:63:23:4F:40:37:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B1C7B3FD8C9E73A35C17F47E51163234F403702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3658AF925DEAE29C95924D43328E552C69019A2FBD4196F2DB65F3EB23A671F1/0/3133382e3131372e3133362e302f32322d3234203d3e203631343938.roa
Signing time:             Tue 05 Mar 2024 17:53:35 +0000
ROA not before:           Tue 05 Mar 2024 17:48:35 +0000
ROA not after:            Tue 04 Mar 2025 17:53:35 +0000
asID:                     61498
IP address blocks:        138.117.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3658AF925DEAE29C95924D43328E552C69019A2FBD4196F2DB65F3EB23A671F1/0/6B1C7B3FD8C9E73A35C17F47E51163234F403702.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3658AF925DEAE29C95924D43328E552C69019A2FBD4196F2DB65F3EB23A671F1/0/6B1C7B3FD8C9E73A35C17F47E51163234F403702.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B1C7B3FD8C9E73A35C17F47E51163234F403702.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:13:69:27:eb:9d:01:f9:6b:b9:5e:39:63:a6:78:6a:26:ad:ab:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B1C7B3FD8C9E73A35C17F47E51163234F403702
        Validity
            Not Before: Mar  5 17:48:35 2024 GMT
            Not After : Mar  4 17:53:35 2025 GMT
        Subject: CN=8B6CC5595C9DA643212E0F9050F405D2FF4E3494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:0c:5c:2e:a3:a9:eb:2e:55:ab:0b:f7:a7:
                    f8:6a:d3:a6:bc:36:fb:08:ec:5d:68:5f:7b:77:64:
                    b6:09:f0:c3:98:40:5e:23:35:df:59:a7:59:c8:55:
                    09:eb:27:35:5e:24:bc:7b:4a:3a:b1:df:cb:5d:2f:
                    56:24:ea:62:be:d9:77:cc:5c:be:26:c1:0e:40:0e:
                    66:8b:90:63:8a:d2:34:68:19:40:49:d5:8a:01:25:
                    3b:dd:29:67:d9:96:49:f9:28:43:b0:3e:83:9f:04:
                    31:60:7d:b9:88:22:36:f3:b8:66:c2:b1:44:30:14:
                    49:38:e1:e8:c4:b5:6a:32:a6:35:69:69:e0:3f:cd:
                    29:e1:f1:47:f3:17:0d:b8:9c:ba:1f:8d:9d:11:5a:
                    05:e9:44:63:d8:36:04:5f:15:f8:f5:99:6f:fa:74:
                    01:6d:82:cb:dd:61:71:88:5f:9a:e5:35:5e:a1:c8:
                    45:a4:19:59:63:f3:29:4b:1c:ff:62:06:82:ca:87:
                    73:41:72:89:a0:fa:2e:c1:34:a9:d7:8f:c3:6e:47:
                    fb:9d:e0:a8:68:2c:d8:89:64:09:d5:fb:a0:78:df:
                    a9:18:b3:f9:12:1e:72:40:81:c3:6e:36:7a:2f:68:
                    38:7f:0f:93:14:e8:18:09:4e:db:c5:dd:59:27:b3:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6C:C5:59:5C:9D:A6:43:21:2E:0F:90:50:F4:05:D2:FF:4E:34:94
            X509v3 Authority Key Identifier:
                keyid:6B:1C:7B:3F:D8:C9:E7:3A:35:C1:7F:47:E5:11:63:23:4F:40:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3658AF925DEAE29C95924D43328E552C69019A2FBD4196F2DB65F3EB23A671F1/0/6B1C7B3FD8C9E73A35C17F47E51163234F403702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B1C7B3FD8C9E73A35C17F47E51163234F403702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3658AF925DEAE29C95924D43328E552C69019A2FBD4196F2DB65F3EB23A671F1/0/3133382e3131372e3133362e302f32322d3234203d3e203631343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:fe:8c:eb:03:ea:f2:ca:ed:e4:ea:8c:86:eb:94:ac:a9:70:
         ea:b7:af:19:f2:1e:c8:ea:74:1b:5b:f8:83:f6:59:40:ce:c6:
         3d:2d:87:0d:53:40:94:5a:8b:40:58:5f:7c:6b:be:eb:50:01:
         c4:66:13:0b:dd:ab:26:cf:ce:ab:30:1c:dd:f8:a6:50:e4:71:
         0d:1a:52:2f:99:c5:59:39:2e:5f:88:52:5c:a5:05:10:d3:7e:
         30:0d:13:a4:03:49:69:ab:0e:3d:79:46:96:d4:91:e4:fa:6d:
         19:e7:da:b8:5a:a2:3c:8f:22:82:d0:fe:8c:1a:d7:f7:21:54:
         af:4a:3d:66:e7:d7:63:19:70:c2:9d:72:9d:4c:5d:1c:04:52:
         7c:34:0d:e2:1f:69:ed:f0:6a:62:d8:8d:1e:6c:a1:9d:f4:fe:
         a3:19:6f:ae:6b:6c:96:c1:74:f0:da:a1:86:ae:30:04:c3:9e:
         55:ba:98:43:ec:ec:6c:01:f0:c6:d6:2a:9a:f4:7e:04:a2:f4:
         e2:10:c6:42:03:f3:3e:b3:80:08:58:84:f0:68:aa:84:18:ce:
         a9:3a:97:dd:59:17:bd:6d:60:dc:53:f7:70:47:b6:07:c5:80:
         cc:30:a9:02:72:cc:4d:53:3f:97:d7:dc:58:c8:1a:85:e2:bb:
         b2:4b:ac:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org