Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234342e302f32322d3232203d3e203136393036.roa
File:                     3133382e39342e3234342e302f32322d3232203d3e203136393036.roa (raw, json)
Hash identifier:          kdovV7AIywzyFmByrAdp8rnUVIY+G4TCyQupKLsx2+Q=
Subject key identifier:   91:CD:2B:BE:2F:1B:3F:B2:A3:8F:9F:A8:D4:30:52:96:F0:C9:1A:28
Certificate issuer:       /CN=715132E5B211C0DCD956A35200F9D107D5463F64
Certificate serial:       2535ABD8139DD00D7BAADBAE1B97BA9D4BF35D25
Authority key identifier: 71:51:32:E5:B2:11:C0:DC:D9:56:A3:52:00:F9:D1:07:D5:46:3F:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234342e302f32322d3232203d3e203136393036.roa
Signing time:             Tue 05 Mar 2024 18:17:30 +0000
ROA not before:           Tue 05 Mar 2024 18:12:30 +0000
ROA not after:            Tue 04 Mar 2025 18:17:30 +0000
asID:                     16906
IP address blocks:        138.94.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:35:ab:d8:13:9d:d0:0d:7b:aa:db:ae:1b:97:ba:9d:4b:f3:5d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715132E5B211C0DCD956A35200F9D107D5463F64
        Validity
            Not Before: Mar  5 18:12:30 2024 GMT
            Not After : Mar  4 18:17:30 2025 GMT
        Subject: CN=91CD2BBE2F1B3FB2A38F9FA8D4305296F0C91A28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d8:e4:d8:76:e8:d1:01:c8:2e:a9:ad:a8:0c:
                    1b:6c:ff:4a:ef:02:e3:c1:9b:17:95:ca:37:73:be:
                    49:dd:8a:4b:cc:99:be:ed:f1:cf:e2:63:1b:b6:d2:
                    6c:fa:4a:0b:91:33:5c:ce:e4:50:13:a1:06:86:fe:
                    64:6f:8d:b2:f3:c4:06:c3:6f:34:86:b5:3c:85:46:
                    67:47:04:f0:d3:d6:d4:28:18:3a:86:eb:6e:2b:4c:
                    a9:70:50:11:64:82:53:5c:72:83:bf:e8:8d:22:29:
                    07:e2:ad:80:06:af:a9:70:c7:5c:23:cd:52:3e:cf:
                    a3:1d:26:9b:33:e4:4a:d5:a4:10:17:29:13:37:9c:
                    be:00:eb:5d:01:4b:ef:c0:cc:d3:44:fe:88:b7:57:
                    ed:d1:c1:b4:12:b9:e0:06:5a:eb:9f:52:89:2a:11:
                    00:40:b8:2a:14:5d:3c:91:98:c4:d5:e2:1f:5a:0e:
                    0f:ca:b0:34:0e:66:87:5f:92:fb:7a:9e:66:45:62:
                    87:dc:1d:80:20:33:1f:7c:24:1e:0b:d4:4d:9a:57:
                    ba:24:61:a2:c2:d7:54:f1:e2:f8:02:9a:12:0f:19:
                    ea:cc:11:c3:3d:a7:af:3f:b6:7d:da:62:fd:2a:1c:
                    f5:f7:cc:62:43:f2:34:63:39:12:56:d9:8c:87:7f:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CD:2B:BE:2F:1B:3F:B2:A3:8F:9F:A8:D4:30:52:96:F0:C9:1A:28
            X509v3 Authority Key Identifier:
                keyid:71:51:32:E5:B2:11:C0:DC:D9:56:A3:52:00:F9:D1:07:D5:46:3F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234342e302f32322d3232203d3e203136393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:6f:3c:02:bb:a6:53:ba:18:3c:ec:34:be:87:37:c7:e6:32:
         c2:3c:2e:9c:8b:9d:b4:15:39:f5:fb:45:c5:94:7b:79:08:cb:
         c0:f6:ab:48:59:37:23:0e:19:29:30:12:78:8c:68:77:20:b4:
         68:c2:79:09:60:95:48:d3:0a:46:02:87:4b:9a:cb:43:fb:cd:
         e1:6f:02:69:45:53:ee:e2:2f:60:0e:58:d7:1a:48:44:a8:d0:
         71:e2:35:18:05:ac:f4:53:62:ec:13:b1:c5:85:c5:18:e3:82:
         f1:8e:f7:97:3f:d9:b0:1c:2e:34:ce:67:bc:a8:78:e8:fb:f5:
         c1:15:c5:5c:22:2f:a5:2f:ff:0d:05:be:35:5f:c0:20:b2:82:
         73:a3:e5:52:96:b1:d1:d1:fb:6d:df:d9:16:4e:f1:1c:2c:5c:
         07:21:38:ee:62:df:e0:50:8f:cd:03:2f:7d:e7:d2:e3:d7:b9:
         7e:0a:ba:fc:c8:fd:12:81:4e:0a:4f:3e:56:91:93:ac:48:14:
         21:f2:09:23:f4:85:63:f9:26:6e:dd:ac:80:f0:ba:7c:53:e8:
         3c:03:5b:4c:50:22:e7:e7:d5:a0:40:30:55:9c:bd:fe:3c:11:
         87:27:c7:ee:49:7f:0c:50:59:81:10:17:bc:e5:c0:a2:f9:1d:
         45:84:cc:36
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJTWr2BOd0A17qtuuG5e6nUvzXSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE1MTMyRTVCMjExQzBEQ0Q5NTZBMzUyMDBGOUQxMDdE
NTQ2M0Y2NDAeFw0yNDAzMDUxODEyMzBaFw0yNTAzMDQxODE3MzBaMDMxMTAvBgNV
BAMTKDkxQ0QyQkJFMkYxQjNGQjJBMzhGOUZBOEQ0MzA1Mjk2RjBDOTFBMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD42OTYdujRAcguqa2oDBts/0rv
AuPBmxeVyjdzvkndikvMmb7t8c/iYxu20mz6SguRM1zO5FAToQaG/mRvjbLzxAbD
bzSGtTyFRmdHBPDT1tQoGDqG624rTKlwUBFkglNccoO/6I0iKQfirYAGr6lwx1wj
zVI+z6MdJpsz5ErVpBAXKRM3nL4A610BS+/AzNNE/oi3V+3RwbQSueAGWuufUokq
EQBAuCoUXTyRmMTV4h9aDg/KsDQOZodfkvt6nmZFYofcHYAgMx98JB4L1E2aV7ok
YaLC11Tx4vgCmhIPGerMEcM9p68/tn3aYv0qHPX3zGJD8jRjORJW2YyHf0jRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUkc0rvi8bP7Kjj5+o1DBSlvDJGigwHwYDVR0j
BBgwFoAUcVEy5bIRwNzZVqNSAPnRB9VGP2QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MzMwNEZDQTgxMDQ5NEU0MDE5Q0YzNUU4M0M4OTNBQ0VF
QTg0Q0ZFMjFBNjkyNEJGRTU0MEVDMTdCMTdERDg2LzAvNzE1MTMyRTVCMjExQzBE
Q0Q5NTZBMzUyMDBGOUQxMDdENTQ2M0Y2NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MTUxMzJFNUIyMTFDMERDRDk1
NkEzNTIwMEY5RDEwN0Q1NDYzRjY0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDMzMDRGQ0E4MTA0OTRFNDAxOUNGMzVFODNDODkzQUNFRUE4NENGRTIx
QTY5MjRCRkU1NDBFQzE3QjE3REQ4Ni8wLzMxMzMzODJlMzkzNDJlMzIzNDM0MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNjM5MzAzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAope9DAN
BgkqhkiG9w0BAQsFAAOCAQEAZG88ArumU7oYPOw0voc3x+YywjwunIudtBU59ftF
xZR7eQjLwParSFk3Iw4ZKTASeIxodyC0aMJ5CWCVSNMKRgKHS5rLQ/vN4W8CaUVT
7uIvYA5Y1xpIRKjQceI1GAWs9FNi7BOxxYXFGOOC8Y73lz/ZsBwuNM5nvKh46Pv1
wRXFXCIvpS//DQW+NV/AILKCc6PlUpax0dH7bd/ZFk7xHCxcByE47mLf4FCPzQMv
fefS49e5fgq6/Mj9EoFOCk8+VpGTrEgUIfIJI/SFY/kmbt2sgPC6fFPoPANbTFAi
5+fVoEAwVZy9/jwRhyfH7kl/DFBZgRAXvOXAovkdRYTMNg==
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:08:08 2024 by rpki-client on console-ams.rpki-client.org