Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3133382e3132322e3134342e302f32322d3234203d3e203138373334.roa
File:                     3133382e3132322e3134342e302f32322d3234203d3e203138373334.roa (raw, json)
Hash identifier:          YkdhpUDoM9JpT5Ih/Zb9Rr4KPXj/W28jqv+HSKFhOdE=
Subject key identifier:   7A:EA:95:54:9C:EE:89:5C:78:F2:E4:E1:57:1C:41:B5:35:1B:C3:25
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       1E388A1B0433EA45A02655BE372115F0F07EDD23
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3133382e3132322e3134342e302f32322d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:42 +0000
ROA not before:           Tue 05 Mar 2024 17:45:42 +0000
ROA not after:            Tue 04 Mar 2025 17:50:42 +0000
asID:                     18734
IP address blocks:        138.122.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:38:8a:1b:04:33:ea:45:a0:26:55:be:37:21:15:f0:f0:7e:dd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:42 2024 GMT
            Not After : Mar  4 17:50:42 2025 GMT
        Subject: CN=7AEA95549CEE895C78F2E4E1571C41B5351BC325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c2:e5:de:98:34:f9:93:ef:fb:49:80:f9:3b:
                    9a:8c:21:c5:ef:6c:15:3a:93:17:f4:16:07:f9:8a:
                    33:0a:94:d2:2f:6b:50:02:f7:83:88:0e:b3:53:bf:
                    14:c3:8c:be:87:a5:26:5d:1f:da:42:ce:29:21:ec:
                    a6:b6:e2:72:6c:87:80:1d:50:46:ea:a4:b9:be:75:
                    b9:8a:55:2d:56:33:9a:80:39:98:ae:68:11:51:df:
                    5a:cc:35:e0:29:f3:06:2e:df:5f:00:40:ea:52:be:
                    9b:9c:3b:a1:53:a1:c1:ef:05:e8:d0:d0:f0:43:cf:
                    85:98:ce:57:af:10:d6:f1:46:38:16:87:da:c3:c7:
                    d3:a3:6d:a1:4d:29:e5:04:12:e0:f2:10:3c:d8:db:
                    c8:9f:9f:3b:c1:1a:d1:04:d9:00:3f:94:18:c1:a6:
                    f2:2e:a0:48:1f:71:e6:aa:09:fb:9a:71:60:a1:22:
                    6d:a8:cb:33:91:c0:68:22:b8:dd:6d:31:3b:bc:ea:
                    cc:92:11:cd:2f:2f:f6:36:7e:a1:f2:4c:3b:91:1d:
                    ed:54:ea:66:a1:e0:b5:67:79:4f:47:a0:76:5b:80:
                    8a:3e:01:67:98:bc:6f:46:08:6f:b0:68:9f:d8:91:
                    a5:06:9b:66:36:a5:42:7d:79:49:02:23:bb:60:c8:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EA:95:54:9C:EE:89:5C:78:F2:E4:E1:57:1C:41:B5:35:1B:C3:25
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3133382e3132322e3134342e302f32322d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:af:99:0f:bb:07:e3:4b:30:f5:81:56:a1:88:7d:a3:35:de:
         7f:3d:e8:e4:5e:e0:dc:53:45:f4:ee:bf:c2:80:cf:a8:6f:55:
         00:4d:89:e1:a2:66:fd:72:c8:26:1b:b7:6d:b7:1a:b5:a9:c0:
         4e:6d:a5:b9:93:1e:7b:11:b0:ef:3b:f6:dd:bf:e1:5f:ad:8b:
         76:c3:40:9d:4c:a8:a6:1d:1c:35:7b:70:b5:bb:f6:af:8c:2d:
         e6:ab:8e:8a:9b:1b:94:87:14:20:fd:b6:27:25:41:3a:78:14:
         dc:4e:66:19:7c:1b:ea:e0:02:a9:6c:a7:ea:7e:02:3d:db:bb:
         26:3f:65:a2:66:cd:d9:f5:18:90:40:3a:71:c9:2f:81:da:7c:
         3e:66:50:85:bb:f9:67:e6:9b:1a:f8:fc:a5:51:25:2f:84:bb:
         ca:be:2d:b7:93:d9:48:94:6a:c8:60:89:da:99:82:1e:bb:ba:
         6b:2e:37:8b:83:ac:fd:d6:32:bf:23:5b:24:9c:76:b2:5a:cb:
         47:11:fa:c7:8f:06:52:a6:33:f9:29:cc:20:29:0e:0f:9e:36:
         de:9f:d8:84:89:47:2b:80:1d:7f:08:b6:23:e5:ae:08:38:1f:
         5b:11:20:ea:5f:08:3f:50:a9:31:27:e9:78:fd:a5:d7:eb:84:
         d5:7d:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org