Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/3133382e3138352e3230362e302f32342d3234203d3e20323633373034.roa
File:                     3133382e3138352e3230362e302f32342d3234203d3e20323633373034.roa (raw, json)
Hash identifier:          MwwsKdxgGBy0QeNniwx/UbrX39QmTRbS0k+V3dy2T+A=
Subject key identifier:   EA:1B:FF:63:B5:2E:FD:A2:0C:75:29:EA:50:F9:00:CE:44:AA:AA:7D
Certificate issuer:       /CN=D6D506245328F9A3F0499B715D40967C3D5A3303
Certificate serial:       4FF349A2CFF966C75B3636A68EEA8E32B5C26B14
Authority key identifier: D6:D5:06:24:53:28:F9:A3:F0:49:9B:71:5D:40:96:7C:3D:5A:33:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D506245328F9A3F0499B715D40967C3D5A3303.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/3133382e3138352e3230362e302f32342d3234203d3e20323633373034.roa
Signing time:             Tue 05 Mar 2024 17:41:44 +0000
ROA not before:           Tue 05 Mar 2024 17:36:44 +0000
ROA not after:            Tue 04 Mar 2025 17:41:44 +0000
asID:                     263704
IP address blocks:        138.185.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/D6D506245328F9A3F0499B715D40967C3D5A3303.crl
                          rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/D6D506245328F9A3F0499B715D40967C3D5A3303.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D506245328F9A3F0499B715D40967C3D5A3303.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f3:49:a2:cf:f9:66:c7:5b:36:36:a6:8e:ea:8e:32:b5:c2:6b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D506245328F9A3F0499B715D40967C3D5A3303
        Validity
            Not Before: Mar  5 17:36:44 2024 GMT
            Not After : Mar  4 17:41:44 2025 GMT
        Subject: CN=EA1BFF63B52EFDA20C7529EA50F900CE44AAAA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:33:c4:bd:97:78:75:94:c8:7c:04:cd:c3:
                    22:86:9a:bc:bc:07:b9:43:d2:1a:fd:0f:f1:5d:ba:
                    cd:9d:58:92:04:7a:6d:ac:f9:bb:c8:ad:92:62:a4:
                    d8:dd:f3:c2:4c:62:50:ff:be:b4:f4:ad:34:ee:8f:
                    64:c8:f9:eb:0a:39:81:77:f9:66:41:78:51:34:25:
                    45:ed:1b:05:63:85:5f:6e:25:a2:b1:25:f8:0b:35:
                    dd:e8:ee:10:6c:1e:e8:e8:a9:c5:e1:5f:fa:24:38:
                    0c:46:3f:3f:6d:1f:06:9d:92:48:0a:53:3a:3a:41:
                    ef:ce:0a:9b:a3:c8:93:71:42:3c:a2:ad:0c:98:80:
                    99:81:16:c1:f4:b9:e0:2c:68:e3:68:a5:e7:ea:1a:
                    e6:62:94:d1:a9:b2:5a:b8:c5:b1:4c:de:23:b2:e7:
                    3b:15:3c:04:b4:1f:ce:71:b6:17:8b:8a:d6:23:3a:
                    fa:95:9b:13:3f:51:55:11:63:c4:02:21:00:2a:a7:
                    6b:96:7f:4d:d5:de:f4:02:53:8d:37:dc:c1:2c:df:
                    d6:6a:13:29:7e:d9:67:21:b5:0b:e6:80:8a:32:81:
                    07:8e:93:fd:3c:b7:09:ff:d3:56:8f:80:99:24:eb:
                    2e:83:ac:d3:95:16:22:78:15:6c:0a:04:e3:37:8f:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1B:FF:63:B5:2E:FD:A2:0C:75:29:EA:50:F9:00:CE:44:AA:AA:7D
            X509v3 Authority Key Identifier:
                keyid:D6:D5:06:24:53:28:F9:A3:F0:49:9B:71:5D:40:96:7C:3D:5A:33:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/D6D506245328F9A3F0499B715D40967C3D5A3303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D506245328F9A3F0499B715D40967C3D5A3303.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/3133382e3138352e3230362e302f32342d3234203d3e20323633373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:3a:83:ce:9d:87:cf:f7:d7:45:71:7c:fe:a3:f2:66:ac:db:
         d0:94:ad:60:a7:9d:f7:e2:d3:d2:9f:59:62:c1:1b:a9:de:0c:
         6c:59:5d:85:70:1d:f2:a1:be:fa:f1:2e:b2:5d:87:8b:5c:ee:
         56:3c:7e:85:2e:ff:1b:8a:a0:dd:04:93:8e:d2:66:ab:36:95:
         95:9e:eb:77:fa:6e:27:f3:cc:f0:3d:f9:3e:90:f5:35:fe:73:
         2a:95:e2:a0:bf:36:3c:b5:24:8d:18:8e:85:f7:d6:1b:cb:11:
         4b:b3:5e:52:cb:b9:f2:30:39:cd:d5:4d:46:cc:16:57:49:3d:
         ce:9c:0c:40:44:b8:ed:4b:94:c2:cd:36:d4:89:e0:40:78:3a:
         94:96:5d:5b:61:2d:ec:6a:51:f1:65:c0:29:d4:24:3f:07:14:
         07:0b:7a:c5:2c:0d:bc:70:a9:b6:8c:0e:af:50:6c:da:35:8e:
         6a:82:51:d7:60:62:1b:41:3e:e5:f9:be:af:07:af:ee:87:af:
         be:b2:4e:7d:89:82:81:dd:b2:07:6a:ca:a0:54:8a:d9:a2:db:
         eb:35:66:a9:61:ae:9a:30:2d:07:44:6d:ed:66:17:27:87:a1:
         28:55:fd:c7:84:00:c1:b2:e1:2f:27:c1:16:a7:a5:3b:a5:d5:
         9a:db:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 08:46:50 2024 by rpki-client on console-fra.rpki-client.org