Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa
File:                     3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa (raw, json)
Hash identifier:          +T3NajB8GnS7xHjPTyFmeqzG18FvcEtp33nQr0KM+3o=
Subject key identifier:   20:38:61:98:01:37:53:3D:82:1A:55:F9:FA:39:B1:0A:6A:FD:CB:96
Certificate issuer:       /CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
Certificate serial:       356EA5167252583829BB8A7CFCE6EDEF27A15CD0
Authority key identifier: 11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa
Signing time:             Tue 23 Jul 2024 15:50:02 +0000
ROA not before:           Tue 23 Jul 2024 15:45:02 +0000
ROA not after:            Tue 22 Jul 2025 15:50:02 +0000
asID:                     27660
IP address blocks:        138.255.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6e:a5:16:72:52:58:38:29:bb:8a:7c:fc:e6:ed:ef:27:a1:5c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
        Validity
            Not Before: Jul 23 15:45:02 2024 GMT
            Not After : Jul 22 15:50:02 2025 GMT
        Subject: CN=203861980137533D821A55F9FA39B10A6AFDCB96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:ec:bf:9a:55:02:9f:be:be:17:f4:96:60:
                    50:f4:c6:6d:92:12:de:92:76:20:cb:c5:76:15:b4:
                    88:ff:b4:5f:c4:4d:7e:51:b8:76:68:ca:7f:44:27:
                    a5:70:c5:31:f7:9c:1a:0a:2c:42:d7:15:c9:35:d6:
                    50:b5:88:14:ec:40:c5:4e:ce:ff:e9:97:6c:61:28:
                    25:39:2d:58:61:1a:8d:fc:95:65:43:b5:3a:0c:4f:
                    5a:a7:1d:28:f5:20:a3:79:a6:c0:2f:32:1f:db:35:
                    a8:9d:eb:f3:65:e0:0d:3a:21:66:c2:a4:40:9e:4b:
                    3a:54:64:14:5a:18:62:9b:a6:f1:e0:ca:33:ab:a2:
                    ff:af:11:ae:34:07:a4:2f:98:af:d8:23:52:2c:61:
                    0a:a5:bc:21:7c:de:8b:cf:6a:fd:58:3a:a7:ab:13:
                    a5:e0:19:e9:88:74:d1:0e:1f:15:c3:b3:24:df:b5:
                    87:c1:a1:7d:dd:12:42:a0:58:9a:d1:65:df:44:4d:
                    08:88:7d:f5:3e:f2:52:16:af:6f:0a:22:37:49:66:
                    73:a3:47:45:e1:a1:55:9c:90:df:e0:d5:80:a2:2b:
                    56:09:d7:f7:55:31:a8:5c:70:5b:2e:46:91:ab:11:
                    f6:f7:6a:bb:83:1f:89:27:f9:ae:56:56:c3:2e:bb:
                    42:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:38:61:98:01:37:53:3D:82:1A:55:F9:FA:39:B1:0A:6A:FD:CB:96
            X509v3 Authority Key Identifier:
                keyid:11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:04:e0:dc:d1:26:be:81:b6:2f:b7:89:7c:1b:8d:ed:1c:
         d1:f7:48:72:50:60:48:9f:d0:a8:ac:e9:82:13:5e:c0:04:d0:
         e6:fa:69:13:4f:d1:74:e4:4b:c8:d3:b6:97:d3:6c:cf:c8:3c:
         56:f6:29:7a:d0:25:74:46:dc:a5:d5:c1:94:70:16:ec:3c:ee:
         56:38:40:8f:0d:d9:bd:10:82:96:22:9f:93:d2:0f:0e:1d:5f:
         af:85:46:77:60:75:95:52:b1:8a:0d:d5:8d:f4:87:e0:b1:b0:
         c3:7e:9c:f4:d7:97:c5:34:4c:35:37:f2:fc:dd:52:59:52:f0:
         e3:b6:ea:7a:bc:11:95:76:66:c5:71:44:f3:eb:02:af:57:5f:
         b6:d1:2a:2f:b2:1c:8c:4f:b6:f2:0f:2b:26:18:d1:97:c3:37:
         25:b3:e6:f6:af:c3:aa:b0:5c:86:67:91:59:58:4a:68:47:d8:
         e7:79:d2:73:d1:06:7a:fb:c7:e7:e0:1a:ca:2f:47:06:b8:2f:
         bc:94:f7:46:8e:11:61:89:59:58:d3:43:ac:3f:15:23:32:f7:
         39:20:e4:55:ce:03:94:d2:e2:0e:66:d0:85:db:d0:5b:8f:bc:
         e7:30:5b:3a:7b:7a:84:25:b5:dd:dd:a4:d4:82:05:a0:fa:1b:
         f8:7e:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 10:53:48 2024 by rpki-client on console-fra.rpki-client.org