Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3133382e3131372e37362e3234302f32392d3239203d3e20323733393432.roa
File:                     3133382e3131372e37362e3234302f32392d3239203d3e20323733393432.roa (raw, json)
Hash identifier:          VwVbiiU6xQ3HQz6Rxg8q0I3YbxtRTczAzu6zlf4MfGU=
Subject key identifier:   71:21:0D:A0:17:81:1B:E2:CB:A7:AB:02:2A:15:3A:FE:2E:B2:89:F4
Certificate issuer:       /CN=4B7687F569E5893215BAF86B72C4274237504316
Certificate serial:       625D6CB03AF780DAE4BD350E07BA6B95B2E67A1B
Authority key identifier: 4B:76:87:F5:69:E5:89:32:15:BA:F8:6B:72:C4:27:42:37:50:43:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3133382e3131372e37362e3234302f32392d3239203d3e20323733393432.roa
Signing time:             Wed 20 Nov 2024 18:40:00 +0000
ROA not before:           Wed 20 Nov 2024 18:35:00 +0000
ROA not after:            Wed 19 Nov 2025 18:40:00 +0000
asID:                     273942
IP address blocks:        138.117.76.240/29 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.crl
                          rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5d:6c:b0:3a:f7:80:da:e4:bd:35:0e:07:ba:6b:95:b2:e6:7a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7687F569E5893215BAF86B72C4274237504316
        Validity
            Not Before: Nov 20 18:35:00 2024 GMT
            Not After : Nov 19 18:40:00 2025 GMT
        Subject: CN=71210DA017811BE2CBA7AB022A153AFE2EB289F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:82:7d:d2:36:53:30:85:bf:b5:b0:e2:54:35:
                    0d:59:b7:aa:48:97:5f:af:3c:fd:a9:f4:11:58:c5:
                    d2:db:e5:ed:cf:7c:22:14:df:c5:1f:b0:3a:78:c8:
                    62:4c:8c:96:59:89:f8:c1:56:b3:57:e4:6f:2c:51:
                    22:e9:d1:be:bc:08:45:17:53:4e:59:99:0b:81:f8:
                    44:61:da:50:62:ea:dd:14:3d:9d:61:3c:99:b9:79:
                    2d:2a:1e:2e:bc:00:57:7e:e7:1c:bd:c5:e1:20:a8:
                    50:ac:82:84:c4:cc:66:f1:50:4e:32:58:8c:bd:f8:
                    85:f1:95:be:15:ee:b8:83:2d:36:e6:bf:4e:92:64:
                    0f:56:e0:09:45:8f:bf:e1:06:62:e6:15:be:f5:1e:
                    51:b5:7b:75:bc:6d:ac:ba:38:d6:b0:a9:5e:d0:98:
                    d2:3d:b0:52:38:30:ef:ad:e6:90:da:4d:c0:cb:7b:
                    ef:a4:77:b4:7d:63:8f:4f:4b:0d:19:cf:69:8e:95:
                    9b:0a:f9:bd:6b:d7:4f:45:5d:a2:bd:52:27:c1:d0:
                    ab:fd:c8:60:b7:e4:8b:6b:0d:e6:74:82:5b:c7:a0:
                    49:b7:6d:ed:53:5d:55:f7:6a:3f:3e:16:4c:bc:59:
                    d4:d9:67:22:88:32:8f:11:ee:77:f4:d9:09:e2:d2:
                    8a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:21:0D:A0:17:81:1B:E2:CB:A7:AB:02:2A:15:3A:FE:2E:B2:89:F4
            X509v3 Authority Key Identifier:
                keyid:4B:76:87:F5:69:E5:89:32:15:BA:F8:6B:72:C4:27:42:37:50:43:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3133382e3131372e37362e3234302f32392d3239203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.76.240/29

    Signature Algorithm: sha256WithRSAEncryption
         b7:64:7d:dd:9f:ce:08:61:51:0d:b5:f5:8e:55:a1:37:82:c3:
         b9:13:18:e5:32:a6:6b:b0:ae:16:e5:0c:53:ba:3c:d7:9c:c9:
         fd:2d:58:36:68:90:fb:ad:cf:40:2d:a2:17:de:68:9b:29:94:
         71:84:fe:c7:28:fb:be:b1:81:7c:5f:1e:fa:28:28:f6:05:38:
         c8:6e:b2:e5:62:18:af:aa:53:39:8a:36:ea:f2:55:7b:63:84:
         19:f6:e0:0a:f3:50:0d:e2:9c:51:cf:22:8b:e7:30:6d:2c:f9:
         b8:99:ab:24:d9:b9:61:93:ac:6b:43:ed:4d:19:85:1c:63:df:
         e2:32:80:98:7d:19:c3:f3:96:2f:85:73:36:da:e4:f5:5f:8e:
         08:ba:e7:8a:c8:8a:88:bc:24:62:54:48:1a:f3:4b:9a:e6:96:
         a3:f9:41:66:94:1e:8e:ba:ea:8f:94:20:6c:23:c0:10:cb:6d:
         af:53:fc:17:44:0a:31:54:c7:d9:40:83:ed:4b:81:fe:66:03:
         24:e7:30:58:84:04:3e:a3:a4:31:54:e5:d4:0e:cc:65:70:40:
         67:4c:41:3d:cf:41:d6:74:30:20:e9:19:0b:e4:fd:2a:6d:41:
         20:38:3f:57:c2:14:49:db:55:d8:b0:86:d2:37:f0:d8:d5:64:
         be:ed:f6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org