Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa
File:                     3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa (raw, json)
Hash identifier:          WBlX9nV5KZOo5LN5isYrIK+uFqgXNN6Dtda/9CqAUQc=
Subject key identifier:   3B:40:A2:C2:27:1E:40:10:A4:C9:8A:0E:30:44:39:F5:11:5D:FE:DA
Certificate issuer:       /CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
Certificate serial:       460F039407D1ED3913697CD9C95371DC4B92C6CB
Authority key identifier: 11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa
Signing time:             Tue 23 Jul 2024 15:50:03 +0000
ROA not before:           Tue 23 Jul 2024 15:45:03 +0000
ROA not after:            Tue 22 Jul 2025 15:50:03 +0000
asID:                     264645
IP address blocks:        138.255.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0f:03:94:07:d1:ed:39:13:69:7c:d9:c9:53:71:dc:4b:92:c6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
        Validity
            Not Before: Jul 23 15:45:03 2024 GMT
            Not After : Jul 22 15:50:03 2025 GMT
        Subject: CN=3B40A2C2271E4010A4C98A0E304439F5115DFEDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:14:59:3e:dc:71:21:1c:e0:86:5f:22:25:
                    02:32:ca:ea:f0:85:f6:10:ee:07:0c:b9:9d:c0:f5:
                    2e:09:37:75:4b:69:37:c6:90:c9:dc:25:5f:bb:a7:
                    0e:df:53:8a:1b:95:ed:27:95:be:a5:36:40:26:c0:
                    a0:f5:2e:a9:91:9c:00:c3:69:94:11:e3:54:23:1e:
                    82:db:d6:e0:9d:94:3c:6a:47:8e:8f:bc:03:c2:b1:
                    f8:38:ff:f1:63:be:77:61:69:2a:ba:92:80:9e:88:
                    a8:79:57:cf:3e:6b:1e:43:e0:46:cf:35:a3:04:31:
                    09:94:18:fd:81:ea:0e:3f:13:23:b1:81:d8:fa:18:
                    53:2c:40:f7:8e:65:6e:c9:02:32:9e:88:67:08:9c:
                    e4:93:b6:5d:ca:6e:4b:b4:ab:a9:a5:8d:ef:8d:a4:
                    0e:a3:ea:b7:fb:31:3c:1c:1c:3b:36:46:a7:db:13:
                    11:25:01:0e:74:46:9c:7c:3c:d4:54:fa:6f:d6:98:
                    8a:9c:fd:42:8c:e5:a9:55:a0:c0:b9:6f:9b:a2:12:
                    cd:85:40:03:6a:7c:5e:a4:ee:e5:25:6f:42:c4:4c:
                    fd:e8:c5:e3:9b:f4:c4:fe:83:07:d2:0a:43:d1:c6:
                    c4:e1:54:12:03:d6:1d:b1:1a:2d:5f:6f:ea:27:0e:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:40:A2:C2:27:1E:40:10:A4:C9:8A:0E:30:44:39:F5:11:5D:FE:DA
            X509v3 Authority Key Identifier:
                keyid:11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:73:3f:3e:0d:33:53:08:91:7d:92:b4:2b:fb:10:31:91:af:
         1f:b2:28:6f:4c:95:6f:46:91:b6:43:70:1b:2e:d3:62:53:2d:
         79:0a:d2:51:c7:02:cd:0c:84:55:1a:16:da:56:eb:5d:6c:e0:
         92:d8:4a:a0:89:70:9b:92:a3:be:81:99:65:04:8e:ea:45:85:
         4a:c0:c8:e1:86:5c:9d:99:97:4b:aa:c9:98:89:dd:92:49:bc:
         bd:99:fe:8e:6d:79:5b:f7:71:05:39:09:6b:68:53:52:40:5f:
         b7:61:69:fb:9a:c2:fd:70:cd:f3:89:e7:b1:7c:91:cc:64:8a:
         b4:40:4a:32:39:45:f0:28:09:1e:58:c0:02:b9:6c:33:bf:81:
         4c:16:f3:41:8e:17:af:ba:e3:28:b5:9d:0e:5c:a4:da:47:7c:
         71:3e:f5:08:da:ba:a1:45:6d:96:a9:2b:25:b6:ef:3a:45:50:
         b0:c2:e2:20:3f:49:ac:11:36:ea:d1:b8:93:30:0c:4f:e8:8b:
         80:e8:10:48:fa:a8:88:99:b8:48:8e:7f:96:ac:29:e1:b1:2d:
         cf:7b:60:8b:d2:68:45:9d:3b:d6:68:42:53:a2:07:dc:dd:3a:
         82:16:fc:1a:88:5d:75:c3:3d:85:4e:cd:ac:7e:21:1a:96:cb:
         49:80:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org