Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3133382e35392e3136382e302f32322d3234203d3e203532323638.roa
File:                     3133382e35392e3136382e302f32322d3234203d3e203532323638.roa (raw, json)
Hash identifier:          ROOLk5dOvMBy3yGGqc8hlo7OXSBs0hxPVsSkianpevs=
Subject key identifier:   FD:D3:CD:22:BF:AC:23:84:57:80:91:B9:04:5C:79:F3:47:99:2B:41
Certificate issuer:       /CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
Certificate serial:       3FEDCC595C2ACF393BAE340A70EEDACF391A14B2
Authority key identifier: A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3133382e35392e3136382e302f32322d3234203d3e203532323638.roa
Signing time:             Tue 05 Mar 2024 18:19:14 +0000
ROA not before:           Tue 05 Mar 2024 18:14:14 +0000
ROA not after:            Tue 04 Mar 2025 18:19:14 +0000
asID:                     52268
IP address blocks:        138.59.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ed:cc:59:5c:2a:cf:39:3b:ae:34:0a:70:ee:da:cf:39:1a:14:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79979549298C107B25C6C7E7FC2C7DBB295FC02
        Validity
            Not Before: Mar  5 18:14:14 2024 GMT
            Not After : Mar  4 18:19:14 2025 GMT
        Subject: CN=FDD3CD22BFAC2384578091B9045C79F347992B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3a:cc:d4:62:02:99:1c:90:c9:a4:da:e8:6f:
                    ed:cd:54:11:b8:80:6a:02:aa:b0:62:50:f5:0b:c8:
                    62:77:6b:e7:ef:20:b7:fe:d1:77:69:22:0a:97:31:
                    ca:7d:cf:f5:37:df:b2:f6:f5:e3:57:c7:ab:71:8f:
                    d9:da:fd:7d:6a:ff:46:f5:c4:83:3b:4f:88:0e:14:
                    d0:79:ea:f1:a7:95:6b:88:7d:a0:9f:7b:23:c9:91:
                    07:53:34:10:27:bf:08:35:e1:3a:bc:2d:e1:b0:41:
                    0a:8f:22:b2:61:6d:55:21:36:14:ee:81:c2:d3:98:
                    12:40:06:cc:74:77:7c:0e:1d:3d:ed:f8:5f:6b:d7:
                    e8:84:22:53:82:11:8b:b7:ff:a1:05:09:48:13:14:
                    aa:78:e4:ce:46:7b:07:ad:68:9f:4b:10:9a:94:64:
                    7b:6e:4a:38:37:97:b9:a8:7d:87:b4:4e:00:3a:74:
                    bb:0b:8b:60:0a:6d:5c:03:1c:cd:e3:b6:1a:8e:5e:
                    a5:84:03:7e:b1:d7:d8:4c:a3:c6:21:d3:31:f7:fe:
                    3c:5c:ea:4f:10:c0:ef:35:c6:4e:73:4e:9d:f3:69:
                    7d:8e:9d:e9:08:d8:82:de:9f:ce:c7:e7:a6:cd:ad:
                    1a:ac:32:a4:ec:ed:27:97:fb:4c:6d:0c:d7:9b:8e:
                    a5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D3:CD:22:BF:AC:23:84:57:80:91:B9:04:5C:79:F3:47:99:2B:41
            X509v3 Authority Key Identifier:
                keyid:A7:99:79:54:92:98:C1:07:B2:5C:6C:7E:7F:C2:C7:DB:B2:95:FC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A79979549298C107B25C6C7E7FC2C7DBB295FC02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F75C5DD42F618DE30876EDFECA2D3910CEF8D1AF22AF4EC460290515F1A8887/0/3133382e35392e3136382e302f32322d3234203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:94:88:bf:29:c5:c8:d3:ee:50:f8:0b:ba:0e:fe:3d:71:53:
         e2:13:20:29:f0:03:e0:cf:f6:7c:8e:3e:65:4a:83:0f:88:7f:
         d0:1c:64:d7:7c:c6:80:54:26:6b:5c:da:2e:d6:7c:0e:b4:93:
         c1:ee:0f:25:88:fa:09:b6:3f:2c:c3:64:1c:47:58:79:72:d1:
         ac:e7:76:48:b9:92:19:87:c6:7c:28:c5:70:3d:65:16:bb:3d:
         5b:bb:45:2f:15:a4:33:79:67:f5:52:67:46:37:22:7d:b8:70:
         33:cc:46:c0:ae:b1:eb:5f:90:dc:4d:ec:e4:26:67:2b:1d:d0:
         5d:fc:22:6b:d2:df:1d:cc:9d:e1:eb:ca:f1:c3:59:f8:bd:ab:
         00:8f:3d:a4:2f:69:14:36:bb:0a:eb:6c:22:1d:ae:69:fa:f4:
         36:52:22:0a:8a:5f:e3:99:e7:03:69:d0:cd:12:28:a5:8c:0f:
         b6:c0:24:60:0a:28:e1:c3:be:6c:24:9e:7b:b0:2d:da:6d:76:
         89:02:e1:3b:3c:ff:77:82:e0:28:69:dd:47:e5:f8:81:61:a2:
         cf:fd:f5:9a:a5:d6:d2:c3:af:24:1c:f4:21:b5:43:71:b6:9b:
         44:b1:34:eb:8b:de:38:70:34:60:7d:e9:b9:17:8c:09:df:db:
         e6:c4:17:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:17 2024 by rpki-client on console-ams.rpki-client.org