Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234352e302f32342d3234203d3e203136393036.roa
File:                     3133382e39342e3234352e302f32342d3234203d3e203136393036.roa (raw, json)
Hash identifier:          nk01n4ZStp1hY6s3NzjNnJva98ijFBeZQmE8/PjEISg=
Subject key identifier:   8A:B2:0C:C2:D5:1C:A6:82:38:47:D2:C9:CB:FC:BB:35:17:83:70:7F
Certificate issuer:       /CN=715132E5B211C0DCD956A35200F9D107D5463F64
Certificate serial:       3055B060DFB4F35D03B96281E3FCFB559860EAFC
Authority key identifier: 71:51:32:E5:B2:11:C0:DC:D9:56:A3:52:00:F9:D1:07:D5:46:3F:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234352e302f32342d3234203d3e203136393036.roa
Signing time:             Tue 05 Mar 2024 18:17:30 +0000
ROA not before:           Tue 05 Mar 2024 18:12:30 +0000
ROA not after:            Tue 04 Mar 2025 18:17:30 +0000
asID:                     16906
IP address blocks:        138.94.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:55:b0:60:df:b4:f3:5d:03:b9:62:81:e3:fc:fb:55:98:60:ea:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715132E5B211C0DCD956A35200F9D107D5463F64
        Validity
            Not Before: Mar  5 18:12:30 2024 GMT
            Not After : Mar  4 18:17:30 2025 GMT
        Subject: CN=8AB20CC2D51CA6823847D2C9CBFCBB351783707F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:35:92:24:97:77:cd:02:40:8e:2e:d9:43:99:
                    6d:04:6f:8a:3b:f9:43:93:62:ca:6b:7d:9d:b5:14:
                    47:23:03:9a:3b:a7:25:5f:66:c3:64:e9:d7:7e:f8:
                    b6:36:2b:55:d0:15:f7:10:76:bf:c9:50:00:0c:81:
                    db:f1:5e:98:83:22:36:82:aa:0f:88:1f:4c:2c:18:
                    79:e0:81:17:96:40:cc:40:0c:57:33:47:4d:60:39:
                    6d:bb:35:f9:87:5e:57:b8:35:28:bc:9e:ba:ef:ac:
                    65:ef:0b:e5:65:82:00:13:f9:38:b7:4b:16:5f:4f:
                    74:1e:3f:65:ba:33:9a:68:9e:95:8c:e4:f6:9b:48:
                    d0:0a:76:7c:56:30:93:58:12:3a:8a:7e:e5:21:cd:
                    2f:ba:5b:ac:73:51:f0:dd:bb:6a:de:08:91:b3:47:
                    e1:82:14:d9:83:85:29:44:94:bb:59:e6:8a:a2:93:
                    07:04:9a:cc:85:19:f2:60:88:8b:b1:67:a5:a2:7f:
                    f3:7d:8b:7b:d4:92:5e:60:75:22:b8:ec:99:fd:6f:
                    c1:91:88:54:62:1d:43:9f:d2:ac:a3:ae:73:24:96:
                    63:c0:3e:7a:28:69:94:4f:77:28:21:2f:45:54:8d:
                    f0:4d:20:9a:2d:f2:18:5e:4c:e9:08:e0:bd:76:f9:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B2:0C:C2:D5:1C:A6:82:38:47:D2:C9:CB:FC:BB:35:17:83:70:7F
            X509v3 Authority Key Identifier:
                keyid:71:51:32:E5:B2:11:C0:DC:D9:56:A3:52:00:F9:D1:07:D5:46:3F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234352e302f32342d3234203d3e203136393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d9:b2:e2:56:cd:b5:7d:3c:24:83:df:5b:fb:39:7f:78:26:
         74:95:42:3a:bc:cc:69:0f:61:a8:c5:2d:aa:7d:3a:33:d4:18:
         c1:88:32:79:1b:f5:da:e5:e7:35:ce:5a:05:fc:c6:6b:97:89:
         59:95:94:2e:32:a7:f2:f0:96:c3:52:08:ca:0e:f3:9a:a6:be:
         a8:3a:98:be:ca:ed:ed:6c:b2:65:75:eb:fd:a4:de:c1:ab:b2:
         39:13:ee:a2:6f:98:64:a2:6a:67:73:b9:cc:05:d0:3d:40:8b:
         91:b9:66:2e:ef:44:e0:f0:28:35:4e:85:32:61:69:26:f3:0d:
         4b:4d:8d:e5:0c:2c:70:cd:41:e5:00:80:6f:ca:ce:74:2c:81:
         e0:a3:7b:7e:79:c8:d0:f7:ff:91:e1:5e:fa:9c:d4:97:70:3b:
         85:03:f2:bf:72:34:be:f3:37:8c:ae:b1:9b:8e:dd:b7:50:c4:
         7b:de:c0:2d:62:78:e8:fa:c9:fd:9e:17:7d:82:4c:80:87:1c:
         6a:1e:8e:cf:f7:0b:a2:3b:ec:de:56:5c:76:ff:a3:f5:f8:34:
         6b:8b:06:a8:ca:23:fe:c9:43:fc:54:75:d5:51:64:9c:49:7d:
         5d:09:61:2c:a0:b5:7f:db:53:02:fd:b4:07:2d:5e:45:91:af:
         c1:55:0d:e7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMFWwYN+0810DuWKB4/z7VZhg6vwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE1MTMyRTVCMjExQzBEQ0Q5NTZBMzUyMDBGOUQxMDdE
NTQ2M0Y2NDAeFw0yNDAzMDUxODEyMzBaFw0yNTAzMDQxODE3MzBaMDMxMTAvBgNV
BAMTKDhBQjIwQ0MyRDUxQ0E2ODIzODQ3RDJDOUNCRkNCQjM1MTc4MzcwN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMNZIkl3fNAkCOLtlDmW0Eb4o7
+UOTYsprfZ21FEcjA5o7pyVfZsNk6dd++LY2K1XQFfcQdr/JUAAMgdvxXpiDIjaC
qg+IH0wsGHnggReWQMxADFczR01gOW27NfmHXle4NSi8nrrvrGXvC+VlggAT+Ti3
SxZfT3QeP2W6M5ponpWM5PabSNAKdnxWMJNYEjqKfuUhzS+6W6xzUfDdu2reCJGz
R+GCFNmDhSlElLtZ5oqikwcEmsyFGfJgiIuxZ6Wif/N9i3vUkl5gdSK47Jn9b8GR
iFRiHUOf0qyjrnMklmPAPnooaZRPdyghL0VUjfBNIJot8hheTOkI4L12+Ub7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUirIMwtUcpoI4R9LJy/y7NReDcH8wHwYDVR0j
BBgwFoAUcVEy5bIRwNzZVqNSAPnRB9VGP2QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MzMwNEZDQTgxMDQ5NEU0MDE5Q0YzNUU4M0M4OTNBQ0VF
QTg0Q0ZFMjFBNjkyNEJGRTU0MEVDMTdCMTdERDg2LzAvNzE1MTMyRTVCMjExQzBE
Q0Q5NTZBMzUyMDBGOUQxMDdENTQ2M0Y2NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MTUxMzJFNUIyMTFDMERDRDk1
NkEzNTIwMEY5RDEwN0Q1NDYzRjY0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDMzMDRGQ0E4MTA0OTRFNDAxOUNGMzVFODNDODkzQUNFRUE4NENGRTIx
QTY5MjRCRkU1NDBFQzE3QjE3REQ4Ni8wLzMxMzMzODJlMzkzNDJlMzIzNDM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjM5MzAzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIpe9TAN
BgkqhkiG9w0BAQsFAAOCAQEAT9my4lbNtX08JIPfW/s5f3gmdJVCOrzMaQ9hqMUt
qn06M9QYwYgyeRv12uXnNc5aBfzGa5eJWZWULjKn8vCWw1IIyg7zmqa+qDqYvsrt
7WyyZXXr/aTewauyORPuom+YZKJqZ3O5zAXQPUCLkblmLu9E4PAoNU6FMmFpJvMN
S02N5QwscM1B5QCAb8rOdCyB4KN7fnnI0Pf/keFe+pzUl3A7hQPyv3I0vvM3jK6x
m47dt1DEe97ALWJ46PrJ/Z4XfYJMgIccah6Oz/cLojvs3lZcdv+j9fg0a4sGqMoj
/slD/FR11VFknEl9XQlhLKC1f9tTAv20By1eRZGvwVUN5w==
-----END CERTIFICATE-----
Generated at Wed Jun 26 02:08:08 2024 by rpki-client on console-ams.rpki-client.org