Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234362e302f32342d3234203d3e203136393036.roa
File:                     3133382e39342e3234362e302f32342d3234203d3e203136393036.roa (raw, json)
Hash identifier:          ouOPW3Ps//lk3sJU2+Zou39GzeS3dDMgUmoQQaGTMzs=
Subject key identifier:   C6:AA:02:F5:A4:66:18:34:EA:84:EC:BE:29:B0:B3:E7:44:63:C9:5F
Certificate issuer:       /CN=715132E5B211C0DCD956A35200F9D107D5463F64
Certificate serial:       08A6CF7AEA0D4F4CEC6A4DDAE23C8158EE7BC82A
Authority key identifier: 71:51:32:E5:B2:11:C0:DC:D9:56:A3:52:00:F9:D1:07:D5:46:3F:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234362e302f32342d3234203d3e203136393036.roa
Signing time:             Tue 05 Mar 2024 18:17:30 +0000
ROA not before:           Tue 05 Mar 2024 18:12:30 +0000
ROA not after:            Tue 04 Mar 2025 18:17:30 +0000
asID:                     16906
IP address blocks:        138.94.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a6:cf:7a:ea:0d:4f:4c:ec:6a:4d:da:e2:3c:81:58:ee:7b:c8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715132E5B211C0DCD956A35200F9D107D5463F64
        Validity
            Not Before: Mar  5 18:12:30 2024 GMT
            Not After : Mar  4 18:17:30 2025 GMT
        Subject: CN=C6AA02F5A4661834EA84ECBE29B0B3E74463C95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:e4:a2:9a:ac:a7:28:0e:7d:63:ee:35:4b:
                    8e:8c:d1:ab:8b:9c:88:27:aa:48:dd:f5:f8:6b:73:
                    03:8f:ff:42:fc:ff:f5:44:9b:f4:b5:91:03:84:10:
                    7e:a7:40:78:95:4c:21:b8:11:06:ac:2d:2f:0a:c4:
                    28:1d:31:ee:ad:4c:60:24:84:20:0a:8f:98:a5:03:
                    6f:54:09:ea:03:79:3d:6c:30:f4:7d:c2:97:e8:1e:
                    fe:0d:6c:d2:27:e9:28:29:ea:44:0a:a2:77:61:36:
                    e8:08:b1:a9:1d:b4:d9:5c:39:15:8e:5a:0b:6e:77:
                    9c:b1:18:0a:db:91:d8:49:3c:91:5e:5c:a8:bf:99:
                    84:c5:c2:7a:59:de:c3:c4:95:4f:f2:78:e8:ba:3e:
                    b9:ea:1d:c1:15:cf:83:d5:13:39:c2:7d:2e:4d:21:
                    d5:ec:ea:c2:48:f9:15:07:f2:92:71:15:6c:ce:fe:
                    ee:91:ef:4c:90:a8:82:99:9f:47:e2:52:0e:4c:ce:
                    af:2f:70:d1:9b:e6:2d:3a:3d:46:3d:3b:8d:03:cd:
                    96:97:e8:5a:cf:5d:06:6a:23:94:17:1b:60:3d:8c:
                    88:b1:94:44:e5:45:ae:91:27:c0:2c:62:63:99:e1:
                    8e:18:70:64:1f:09:1d:1f:a0:66:0d:2a:fd:4c:20:
                    e5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AA:02:F5:A4:66:18:34:EA:84:EC:BE:29:B0:B3:E7:44:63:C9:5F
            X509v3 Authority Key Identifier:
                keyid:71:51:32:E5:B2:11:C0:DC:D9:56:A3:52:00:F9:D1:07:D5:46:3F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234362e302f32342d3234203d3e203136393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:28:e0:da:d7:3b:fb:7c:56:7f:b0:b8:71:fd:03:6c:e4:57:
         d1:5c:0a:ab:f5:a7:aa:77:27:a0:a5:d8:b6:59:b7:66:58:8e:
         25:1a:a0:89:84:5a:83:47:86:d1:7e:57:2c:5c:cb:52:36:d6:
         72:bc:77:9f:b8:f0:c7:6e:c0:bc:92:e2:aa:a4:92:85:0b:24:
         8b:ac:a7:ea:54:b6:84:c7:fa:2f:00:07:fa:34:97:8f:7c:a3:
         f9:7f:d3:af:7a:63:fb:41:10:51:f2:9c:96:74:9b:d7:0c:26:
         bb:e3:ce:a7:13:e1:c4:cc:9c:a0:6c:9d:8a:bf:03:a0:cb:45:
         d3:93:97:7c:5a:41:6a:4c:b2:75:f5:ea:16:fa:51:e3:6f:96:
         09:1e:76:9d:25:2a:44:44:99:05:b5:fe:25:e3:47:c5:08:4b:
         d9:4b:a6:db:71:fc:68:d8:64:ce:7e:f9:e5:0c:01:a9:b0:77:
         4c:c2:d6:7b:34:a4:99:1d:10:97:f9:57:de:ec:9f:30:a0:ae:
         05:a1:91:c9:a1:82:cb:d9:e2:1d:4b:44:26:e8:ee:10:ec:f6:
         70:cd:e8:79:48:fc:12:ae:1d:79:30:92:a8:c7:d5:86:f9:37:
         58:2a:9a:a4:d3:8a:04:bd:32:b1:ac:9e:00:e8:b8:84:b1:a5:
         47:43:ee:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:17:08 2024 by rpki-client on console-ams.rpki-client.org