Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3133382e3138352e38302e302f32322d3234203d3e203532333634.roa
File:                     3133382e3138352e38302e302f32322d3234203d3e203532333634.roa (raw, json)
Hash identifier:          GrpO0CIP0poeLphyXp2hN619UDE4dlQcSnNXA163qZc=
Subject key identifier:   F3:82:2B:FB:0F:BB:28:77:65:83:45:63:36:10:51:A9:9E:64:40:0C
Certificate issuer:       /CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
Certificate serial:       5630CCC1CD633952702E323C8E849CA516164DF8
Authority key identifier: EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3133382e3138352e38302e302f32322d3234203d3e203532333634.roa
Signing time:             Tue 05 Mar 2024 17:52:29 +0000
ROA not before:           Tue 05 Mar 2024 17:47:29 +0000
ROA not after:            Tue 04 Mar 2025 17:52:29 +0000
asID:                     52364
IP address blocks:        138.185.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:30:cc:c1:cd:63:39:52:70:2e:32:3c:8e:84:9c:a5:16:16:4d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
        Validity
            Not Before: Mar  5 17:47:29 2024 GMT
            Not After : Mar  4 17:52:29 2025 GMT
        Subject: CN=F3822BFB0FBB287765834563361051A99E64400C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:13:6f:5c:b5:15:62:94:83:81:8a:9c:75:
                    3d:93:98:4f:b8:a2:6f:66:a7:e8:1c:74:a5:82:67:
                    b3:c0:22:c0:d3:cd:58:01:ea:20:22:a5:4b:35:ff:
                    46:56:8e:37:3f:36:08:d7:2c:9b:b7:59:a8:ec:27:
                    36:05:30:6e:70:20:db:57:45:f3:89:44:22:4d:49:
                    85:d5:fc:10:d7:2f:32:f3:7c:ab:2d:50:90:12:58:
                    52:2c:bc:e6:91:a1:ff:97:b5:35:98:0b:d5:ae:07:
                    40:32:5c:38:dd:54:e5:99:45:cd:17:70:3c:cc:42:
                    66:b5:1d:0f:77:11:9b:81:1b:9a:02:29:ff:6c:40:
                    7d:40:53:d8:20:d2:5a:a6:c4:2e:56:db:80:48:21:
                    21:74:c6:5c:e5:c4:50:fe:f4:4a:2f:24:7b:a8:94:
                    bb:41:25:1f:6a:f5:bc:1f:b9:39:0c:f9:05:bd:b3:
                    e5:72:cd:bc:97:95:36:5b:c4:e6:6a:cb:7c:55:f8:
                    5b:14:0c:7b:99:32:d3:6b:0b:00:96:32:cc:9f:cc:
                    8b:2f:e6:05:24:9d:8f:04:fc:d6:e6:0e:c3:44:17:
                    8b:b3:93:b9:cb:66:68:c4:fd:52:e6:83:30:d4:fa:
                    81:90:8a:08:98:f5:fe:20:d0:82:be:4f:b6:7e:f2:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:82:2B:FB:0F:BB:28:77:65:83:45:63:36:10:51:A9:9E:64:40:0C
            X509v3 Authority Key Identifier:
                keyid:EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3133382e3138352e38302e302f32322d3234203d3e203532333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:4c:a6:be:a5:00:81:be:85:f6:45:5a:75:88:20:e1:22:00:
         f7:4d:8f:45:64:48:b5:73:12:eb:e3:2e:94:ed:8f:2d:2b:24:
         b8:8a:4a:57:e0:cb:25:57:04:d6:c0:3f:e9:26:fd:69:b6:48:
         bb:fe:15:f8:c5:c3:b4:78:12:b0:6d:2a:6b:3f:a9:09:c7:fc:
         29:81:ec:38:45:dc:82:72:64:56:a1:65:09:e1:f6:72:a9:9e:
         cf:5a:40:18:1e:15:1e:bc:c7:c7:b5:7f:dc:6f:d4:c1:12:43:
         02:e2:86:6b:3f:96:8a:51:59:4b:f1:14:66:c7:34:a9:51:cb:
         c2:cd:58:29:47:de:f3:63:db:38:45:b9:8d:27:34:19:47:23:
         e9:e1:5f:66:04:f9:5a:f1:89:c5:a8:b2:91:89:94:e7:14:cf:
         21:ca:07:25:99:1d:d7:41:7d:a1:ce:a6:d0:fd:ba:3a:13:c6:
         51:a4:a3:4d:00:b8:66:7c:ec:81:7b:00:1c:71:22:c5:69:b3:
         d1:32:56:7d:3e:b0:a9:f3:4a:e1:9d:04:3f:f3:65:e1:24:f3:
         84:b9:2b:68:e5:1f:76:86:34:dc:04:bc:78:38:c7:51:56:40:
         47:4d:3b:83:f6:56:fb:5f:b4:12:a6:53:bc:c7:46:90:72:a2:
         77:79:84:68
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVjDMwc1jOVJwLjI8joScpRYWTfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZENDQ5QUY4NDc0QUY1NjNGRTM3OUFEQkQ0RjcyRUFG
MkNBMURCMDAeFw0yNDAzMDUxNzQ3MjlaFw0yNTAzMDQxNzUyMjlaMDMxMTAvBgNV
BAMTKEYzODIyQkZCMEZCQjI4Nzc2NTgzNDU2MzM2MTA1MUE5OUU2NDQwMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpBNvXLUVYpSDgYqcdT2TmE+4
om9mp+gcdKWCZ7PAIsDTzVgB6iAipUs1/0ZWjjc/NgjXLJu3WajsJzYFMG5wINtX
RfOJRCJNSYXV/BDXLzLzfKstUJASWFIsvOaRof+XtTWYC9WuB0AyXDjdVOWZRc0X
cDzMQma1HQ93EZuBG5oCKf9sQH1AU9gg0lqmxC5W24BIISF0xlzlxFD+9EovJHuo
lLtBJR9q9bwfuTkM+QW9s+VyzbyXlTZbxOZqy3xV+FsUDHuZMtNrCwCWMsyfzIsv
5gUknY8E/NbmDsNEF4uzk7nLZmjE/VLmgzDU+oGQigiY9f4g0IK+T7Z+8ih3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU84Ir+w+7KHdlg0VjNhBRqZ5kQAwwHwYDVR0j
BBgwFoAU79RJr4R0r1Y/43mtvU9y6vLKHbAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjMzMTE5OTAxQzA4NjU4QUQ0NEMwQzdDODlBMTk5MUJC
NTI3OTZCM0IzM0Q2NzlFMzQzOThFQkI5QjUwQjcyLzAvRUZENDQ5QUY4NDc0QUY1
NjNGRTM3OUFEQkQ0RjcyRUFGMkNBMURCMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRkQ0NDlBRjg0NzRBRjU2M0ZF
Mzc5QURCRDRGNzJFQUYyQ0ExREIwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYzMzExOTkwMUMwODY1OEFENDRDMEM3Qzg5QTE5OTFCQjUyNzk2QjNC
MzNENjc5RTM0Mzk4RUJCOUI1MEI3Mi8wLzMxMzMzODJlMzEzODM1MmUzODMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjMzMzYzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoq5UDAN
BgkqhkiG9w0BAQsFAAOCAQEAAkymvqUAgb6F9kVadYgg4SIA902PRWRItXMS6+Mu
lO2PLSskuIpKV+DLJVcE1sA/6Sb9abZIu/4V+MXDtHgSsG0qaz+pCcf8KYHsOEXc
gnJkVqFlCeH2cqmez1pAGB4VHrzHx7V/3G/UwRJDAuKGaz+WilFZS/EUZsc0qVHL
ws1YKUfe82PbOEW5jSc0GUcj6eFfZgT5WvGJxaiykYmU5xTPIcoHJZkd10F9oc6m
0P26OhPGUaSjTQC4ZnzsgXsAHHEixWmz0TJWfT6wqfNK4Z0EP/Nl4STzhLkraOUf
doY03AS8eDjHUVZAR007g/ZW+1+0EqZTvMdGkHKid3mEaA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org