Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3133382e3235352e36302e302f32322d3234203d3e203238333934.roa
File:                     3133382e3235352e36302e302f32322d3234203d3e203238333934.roa (raw, json)
Hash identifier:          cPN7+j0qv4LQ/177DtmCovXMjfVafK/0vlO0Z5p4dAA=
Subject key identifier:   17:B4:89:FC:15:80:47:D1:E7:89:60:70:5F:0C:42:18:30:4E:A8:3C
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       317F964CDE1141FA62CBC7B674B608804CA0110F
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3133382e3235352e36302e302f32322d3234203d3e203238333934.roa
Signing time:             Mon 19 Aug 2024 18:40:00 +0000
ROA not before:           Mon 19 Aug 2024 18:35:00 +0000
ROA not after:            Mon 18 Aug 2025 18:40:00 +0000
asID:                     28394
IP address blocks:        138.255.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7f:96:4c:de:11:41:fa:62:cb:c7:b6:74:b6:08:80:4c:a0:11:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Aug 19 18:35:00 2024 GMT
            Not After : Aug 18 18:40:00 2025 GMT
        Subject: CN=17B489FC158047D1E78960705F0C4218304EA83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:d8:93:02:93:51:a9:33:76:42:8d:0a:ab:
                    e4:38:af:2c:63:12:d9:0d:8e:f0:e7:2a:b9:6f:7e:
                    5b:9e:4d:15:b5:91:58:b0:98:c2:d6:12:5e:be:bf:
                    e6:5b:1a:8b:bb:95:c0:0f:cf:d6:a2:df:5d:0e:f8:
                    2b:54:01:ac:06:8b:63:17:21:6f:cf:6c:1c:74:04:
                    2b:5b:4d:db:c9:29:97:2f:ae:df:f5:7e:e4:a5:9a:
                    1d:1a:4f:54:0c:1b:ec:e9:0b:0b:de:69:32:05:f5:
                    9f:c2:a2:dc:45:c1:73:3f:ec:01:07:56:ac:9f:10:
                    ab:a6:40:47:66:64:ab:5e:93:f8:da:29:45:34:fa:
                    68:0a:e6:a8:1e:e8:9a:0d:a9:70:f8:6e:e3:12:43:
                    9a:27:f4:ed:de:e1:b0:78:c7:85:1b:7b:3e:06:01:
                    17:b6:41:34:78:e9:be:ad:9d:79:ec:fc:2a:98:bf:
                    e2:d2:26:4e:c6:17:cc:09:b1:d9:05:46:05:f6:3d:
                    50:fd:7b:12:11:57:f7:c4:c8:f1:9c:1b:2d:c6:8c:
                    a8:47:7a:c9:87:33:8e:91:60:17:ee:d1:10:57:44:
                    3f:4a:4e:1f:8f:cc:ec:be:28:2f:58:67:07:fb:4e:
                    09:37:f3:8a:c3:20:64:32:dd:29:73:05:ba:43:e3:
                    e0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B4:89:FC:15:80:47:D1:E7:89:60:70:5F:0C:42:18:30:4E:A8:3C
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3133382e3235352e36302e302f32322d3234203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:2b:5f:42:ea:88:e7:77:5b:fc:cf:70:a7:63:77:46:58:a1:
         68:d9:23:0f:1a:08:b7:2c:43:16:4e:3d:47:92:ab:28:3b:95:
         1e:c9:92:cf:8e:2e:51:e5:9c:fb:9f:f7:8e:67:5d:1b:97:90:
         84:d9:0d:a1:c1:5c:b2:05:6e:50:ca:7c:3d:e6:d3:c8:b6:d2:
         91:19:a4:6f:c9:9e:6c:6b:0c:db:f4:66:09:04:23:76:98:68:
         ca:eb:1f:75:63:2f:72:35:54:53:5b:62:04:b2:c0:17:3c:20:
         c3:1d:d5:49:1e:dc:44:42:86:66:0b:a0:39:cd:e1:89:9b:a3:
         c7:b6:63:ab:f0:52:5d:bd:22:40:db:2c:f2:cf:69:35:0c:d3:
         68:4e:89:6d:ff:a4:e9:04:10:96:09:be:ab:cc:4f:ef:9f:28:
         99:ef:cb:fc:9f:5a:69:84:e8:7d:03:6e:7e:d1:15:5d:7d:72:
         16:c5:82:e9:9c:2f:e3:99:4a:3e:08:98:91:4c:6e:b3:8a:b7:
         ec:e1:b7:74:82:f7:af:22:17:2d:88:51:fc:24:fb:8d:a2:ae:
         5b:f4:e3:7d:82:e1:5f:54:4b:bc:90:6a:1e:69:20:01:85:62:
         50:78:18:1a:40:0d:c0:c0:bd:cf:02:72:46:07:1d:78:43:1c:
         2c:3e:a0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org