Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/3133382e39372e3230302e302f32322d3234203d3e20323633383030.roa
File:                     3133382e39372e3230302e302f32322d3234203d3e20323633383030.roa (raw, json)
Hash identifier:          8DpbGJIaDnSjzIuMgODeMDbQGKQxhP53bJ8NY1ZakEs=
Subject key identifier:   20:D1:09:00:27:5D:42:C0:F4:8A:32:3D:01:EF:A0:F3:0A:75:79:3B
Certificate issuer:       /CN=F27FE8F5D134BDBCB727C1FA5EA363B4B589267E
Certificate serial:       3A33EB05DE7798C6B684547B6772906400BF18EF
Authority key identifier: F2:7F:E8:F5:D1:34:BD:BC:B7:27:C1:FA:5E:A3:63:B4:B5:89:26:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/3133382e39372e3230302e302f32322d3234203d3e20323633383030.roa
Signing time:             Tue 05 Mar 2024 18:17:23 +0000
ROA not before:           Tue 05 Mar 2024 18:12:23 +0000
ROA not after:            Tue 04 Mar 2025 18:17:23 +0000
asID:                     263800
IP address blocks:        138.97.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:33:eb:05:de:77:98:c6:b6:84:54:7b:67:72:90:64:00:bf:18:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27FE8F5D134BDBCB727C1FA5EA363B4B589267E
        Validity
            Not Before: Mar  5 18:12:23 2024 GMT
            Not After : Mar  4 18:17:23 2025 GMT
        Subject: CN=20D10900275D42C0F48A323D01EFA0F30A75793B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:77:a0:19:d7:72:d3:38:29:6a:0a:ed:c1:
                    5b:14:91:b2:1d:ca:0a:7a:16:7d:ef:03:b4:3e:19:
                    94:2f:69:01:d5:9e:a0:82:3b:e7:63:05:be:aa:a6:
                    41:5a:75:75:3d:74:a2:6c:9c:17:71:c7:0e:0a:bf:
                    fc:ea:cb:ce:b4:82:a8:f1:1f:af:2c:00:4e:33:1e:
                    8e:b2:72:2c:a6:ce:64:4c:5f:e7:45:9a:42:4d:d7:
                    df:b9:70:b5:09:65:26:b4:bf:61:9c:fa:9b:9d:86:
                    2b:20:9c:ac:69:ef:f9:d0:e9:06:8c:b3:cc:28:8a:
                    b8:2b:4a:08:56:be:2a:6b:6a:03:f3:d3:3b:c9:36:
                    77:1d:ac:3f:d2:47:ba:9e:c4:ff:a9:57:f4:6a:c4:
                    c2:ec:c3:73:ca:f5:5b:71:9c:05:66:db:df:9c:b7:
                    0e:50:17:85:63:93:08:ff:10:84:a7:5e:85:13:02:
                    d1:d0:cf:ee:8f:1f:9f:c1:2e:4a:b8:8c:98:74:76:
                    d9:7d:fe:1a:1e:d3:f3:bb:cc:07:1d:6c:21:32:29:
                    6d:05:ef:b0:58:a1:a9:07:84:71:ca:52:c1:a0:66:
                    dc:97:24:bb:ac:8e:08:be:df:9b:1d:5d:98:5e:57:
                    2f:f3:41:3a:53:e4:fe:78:37:42:88:6c:77:88:9f:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D1:09:00:27:5D:42:C0:F4:8A:32:3D:01:EF:A0:F3:0A:75:79:3B
            X509v3 Authority Key Identifier:
                keyid:F2:7F:E8:F5:D1:34:BD:BC:B7:27:C1:FA:5E:A3:63:B4:B5:89:26:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/3133382e39372e3230302e302f32322d3234203d3e20323633383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:13:73:06:eb:43:09:3e:5e:fd:b6:88:39:68:e4:68:26:20:
         dc:ae:b3:ef:4c:0f:cd:00:fb:6d:63:f9:87:4b:78:81:0b:43:
         be:24:50:31:64:6a:0f:ff:ed:95:0f:e5:05:55:dc:d1:aa:d3:
         3f:6f:0f:1c:c0:fb:cf:b9:3a:4c:73:95:6f:7c:42:60:f5:f6:
         29:85:d9:5b:b8:2c:6b:36:6c:ee:78:88:e2:61:89:80:53:6e:
         71:83:d0:51:8a:81:88:c0:3c:f4:3f:43:7d:74:bf:e4:f3:77:
         6f:55:31:e3:a2:f0:99:28:63:c9:bb:08:b3:d0:8c:10:37:8c:
         98:c3:02:75:ec:99:e8:6f:77:1e:23:95:19:3d:e4:ef:a2:b5:
         f3:bb:5e:af:ca:15:8f:8e:f1:de:da:86:fd:d9:bc:ad:cf:b5:
         0b:e1:4a:4b:16:b4:c9:ca:9a:07:72:de:e6:44:78:ff:71:6b:
         d1:61:43:ef:7d:74:a5:62:5d:fb:1a:06:03:8c:b7:72:89:a5:
         b1:4c:11:5a:b8:15:52:ee:0d:24:46:8f:bc:30:0a:b7:ab:cc:
         72:f1:f9:85:ea:f5:01:19:f1:4c:31:e1:23:e0:e8:1c:41:e9:
         2a:4f:08:a9:44:ff:e9:11:3f:9e:f1:7c:56:18:48:a1:f7:f3:
         b0:a3:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:37 2024 by rpki-client on console-ams.rpki-client.org