Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/3133382e3132312e38382e302f32322d3234203d3e20323633383334.roa
File:                     3133382e3132312e38382e302f32322d3234203d3e20323633383334.roa (raw, json)
Hash identifier:          Dv+G/RP6nPHBRIx2dUlC/5hs742ozbJbxcxX/O/14PA=
Subject key identifier:   F3:40:68:64:7B:E6:0F:9C:E7:A6:02:53:ED:BF:D3:3C:25:7F:CD:70
Certificate issuer:       /CN=E699A4077A87114A3532FD22E5C0F78AD30312E4
Certificate serial:       0AEB848878A4213DDDD46ABF842B542606D1625D
Authority key identifier: E6:99:A4:07:7A:87:11:4A:35:32:FD:22:E5:C0:F7:8A:D3:03:12:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/3133382e3132312e38382e302f32322d3234203d3e20323633383334.roa
Signing time:             Tue 05 Mar 2024 17:56:47 +0000
ROA not before:           Tue 05 Mar 2024 17:51:47 +0000
ROA not after:            Tue 04 Mar 2025 17:56:47 +0000
asID:                     263834
IP address blocks:        138.121.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:eb:84:88:78:a4:21:3d:dd:d4:6a:bf:84:2b:54:26:06:d1:62:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E699A4077A87114A3532FD22E5C0F78AD30312E4
        Validity
            Not Before: Mar  5 17:51:47 2024 GMT
            Not After : Mar  4 17:56:47 2025 GMT
        Subject: CN=F34068647BE60F9CE7A60253EDBFD33C257FCD70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:ff:2a:0e:65:87:46:c6:04:db:a5:09:08:
                    91:57:83:ce:3b:ef:e2:3f:33:1e:c7:d1:67:36:a0:
                    4d:4b:05:ff:bb:de:52:7f:40:bc:29:db:c2:42:15:
                    af:00:dd:fa:1b:1f:bd:51:78:4f:e0:06:a0:c7:6a:
                    9c:34:89:77:9a:4d:bf:2b:43:e8:0a:c4:00:f4:7c:
                    c3:9b:2d:5b:83:6d:94:19:41:74:b6:03:3e:9d:c9:
                    d6:5b:e5:47:c1:7e:85:d4:15:7b:77:a2:29:ff:99:
                    0e:56:69:35:83:9e:9f:09:49:84:a3:23:7a:98:27:
                    8a:d4:ef:83:0f:ea:4e:86:68:20:4e:7c:a0:64:9c:
                    59:5c:73:54:9a:0d:6f:75:fd:a8:37:b9:7b:7a:d8:
                    6b:f1:f7:49:ad:f4:80:cf:92:7e:56:27:b2:2e:60:
                    cc:9f:42:83:5c:2c:13:3a:45:f4:90:d0:df:b1:a0:
                    84:d2:d1:11:89:00:ad:76:0e:5f:e6:8e:73:bc:6e:
                    15:5f:fe:12:1e:53:f9:de:90:73:35:90:9e:96:07:
                    d5:6f:53:9c:65:a4:02:e6:a4:dc:ef:96:b2:0a:02:
                    30:3a:24:c6:d1:33:69:65:d9:95:cb:60:be:9f:85:
                    4b:77:0d:97:a5:01:39:3d:e8:66:48:0b:e6:09:38:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:40:68:64:7B:E6:0F:9C:E7:A6:02:53:ED:BF:D3:3C:25:7F:CD:70
            X509v3 Authority Key Identifier:
                keyid:E6:99:A4:07:7A:87:11:4A:35:32:FD:22:E5:C0:F7:8A:D3:03:12:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/3133382e3132312e38382e302f32322d3234203d3e20323633383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:6b:6e:12:7f:86:f9:ae:b5:70:a6:be:b6:2e:7a:63:d8:d0:
         7e:93:86:16:5a:c8:bd:06:fe:e1:68:26:66:78:07:d2:40:0d:
         e8:35:19:1a:de:7f:77:8a:23:26:12:a9:a0:b7:3d:80:66:5a:
         0f:86:67:62:73:ea:36:5b:c7:5e:c8:58:f3:a5:dd:bb:f7:91:
         59:f8:a7:8d:f2:5a:ef:6c:e3:10:84:f5:75:d8:a5:1d:26:09:
         3d:a6:8b:df:fb:4f:77:01:0b:c4:07:48:20:67:8b:7e:bb:82:
         8b:76:68:f6:a0:de:31:dc:37:f0:90:c4:50:7e:29:4f:80:a9:
         60:7d:63:3e:1d:50:51:26:d5:40:dd:c0:23:5e:2d:e3:47:bf:
         de:08:d8:b5:24:71:2b:7d:ab:14:38:dd:db:77:18:b2:cd:8c:
         f5:4f:c4:a2:6a:86:fe:5c:65:88:78:e0:40:aa:9f:6c:a9:0f:
         e4:53:ee:9b:dd:a7:fa:e7:34:2a:5f:cb:17:31:a3:9a:29:bd:
         b7:30:ef:89:e6:95:4f:45:7b:d4:28:9e:d0:ee:64:1f:f0:c9:
         95:92:84:22:01:43:01:61:bb:62:aa:7a:98:97:aa:5c:61:75:
         72:8b:4b:d3:75:0c:98:49:83:4c:38:9d:6a:94:24:e8:76:17:
         26:80:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org