Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/3133382e3132322e3135362e302f32322d3234203d3e20323633373836.roa
File:                     3133382e3132322e3135362e302f32322d3234203d3e20323633373836.roa (raw, json)
Hash identifier:          U3MzG9PijVdptyBmqpKzBa2x4tP7AdnPG6SxfLmIB5s=
Subject key identifier:   28:75:8B:33:FB:11:0F:A1:F0:7A:61:7B:F7:08:A3:6D:C7:53:10:B9
Certificate issuer:       /CN=6D1C715A5E9078E9C0184B064F0D488E81755860
Certificate serial:       6D435639E9D2DC6AF59B0B63F4C084E1142D6E68
Authority key identifier: 6D:1C:71:5A:5E:90:78:E9:C0:18:4B:06:4F:0D:48:8E:81:75:58:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D1C715A5E9078E9C0184B064F0D488E81755860.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/3133382e3132322e3135362e302f32322d3234203d3e20323633373836.roa
Signing time:             Tue 05 Mar 2024 17:40:49 +0000
ROA not before:           Tue 05 Mar 2024 17:35:49 +0000
ROA not after:            Tue 04 Mar 2025 17:40:49 +0000
asID:                     263786
IP address blocks:        138.122.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/6D1C715A5E9078E9C0184B064F0D488E81755860.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/6D1C715A5E9078E9C0184B064F0D488E81755860.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D1C715A5E9078E9C0184B064F0D488E81755860.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:43:56:39:e9:d2:dc:6a:f5:9b:0b:63:f4:c0:84:e1:14:2d:6e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1C715A5E9078E9C0184B064F0D488E81755860
        Validity
            Not Before: Mar  5 17:35:49 2024 GMT
            Not After : Mar  4 17:40:49 2025 GMT
        Subject: CN=28758B33FB110FA1F07A617BF708A36DC75310B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:7a:5d:58:65:85:c9:f3:25:7f:98:d8:56:
                    d8:27:b8:17:f4:c3:8d:5d:c6:b7:ca:27:85:de:61:
                    0c:53:5f:57:c7:11:0f:1c:b5:3f:b1:e5:f7:48:c3:
                    f9:8f:fd:e8:f8:5b:34:11:a1:c2:d0:12:93:81:66:
                    9d:0d:8a:cc:70:a7:4b:93:70:2b:d0:b7:51:7a:6d:
                    3d:6f:80:f2:c9:8b:13:b7:a5:8a:9e:60:f8:b3:57:
                    a8:a1:26:f4:6a:ac:d7:83:c3:a3:96:31:6c:21:a0:
                    9b:93:37:96:17:4c:79:9f:c3:9a:6d:4b:d7:be:7c:
                    84:6e:31:18:4a:0f:5c:48:5f:2e:4f:89:bd:1a:d2:
                    07:5f:81:ad:eb:e9:08:60:8e:a4:f3:18:e2:d8:3d:
                    1c:23:41:f9:b8:85:01:c8:97:32:da:79:be:c7:29:
                    41:63:4b:aa:e1:1b:a3:b0:e3:c2:35:66:36:c2:63:
                    38:e1:00:ca:3f:24:16:4b:bb:9c:97:e1:0a:dc:cb:
                    e7:f6:85:ec:83:4b:9e:41:98:2d:0f:96:1c:c9:fe:
                    b2:14:76:80:20:50:4f:02:22:c6:96:3c:e8:0b:d1:
                    0d:a1:19:54:04:99:a7:f9:81:ba:f4:56:25:89:6c:
                    f3:a3:0f:fa:0d:f2:d5:57:d1:fc:42:16:75:de:e5:
                    b7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:75:8B:33:FB:11:0F:A1:F0:7A:61:7B:F7:08:A3:6D:C7:53:10:B9
            X509v3 Authority Key Identifier:
                keyid:6D:1C:71:5A:5E:90:78:E9:C0:18:4B:06:4F:0D:48:8E:81:75:58:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/6D1C715A5E9078E9C0184B064F0D488E81755860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D1C715A5E9078E9C0184B064F0D488E81755860.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56E26EC3FF4ED35B6B712BD86FA137974658A189D3CB66720FCC35C839E7E9AB/0/3133382e3132322e3135362e302f32322d3234203d3e20323633373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:9b:69:ca:49:da:66:5f:bb:e9:70:5f:f4:47:01:9f:73:7f:
         26:aa:00:dc:f7:f0:74:14:1f:ee:2a:de:c6:a8:71:54:d1:b9:
         ad:7d:52:87:9a:2f:04:82:72:e7:27:c3:a2:96:b9:9a:19:cf:
         5f:5a:0b:04:94:51:b1:0c:63:48:97:32:c9:5e:29:0b:43:27:
         8a:eb:61:da:54:32:fb:72:87:92:d4:85:a0:ea:e0:8d:77:4c:
         18:b4:ca:54:39:7c:21:a0:c2:5f:77:d9:58:8b:93:4c:95:77:
         7f:19:01:10:56:13:69:f9:8c:ff:09:ce:1b:d9:ca:b8:0d:40:
         9b:79:cf:ff:8f:b3:71:2f:93:08:08:d9:f7:04:78:f0:c2:a9:
         28:30:06:1f:09:e6:f2:ba:e9:41:c8:01:e8:81:4e:70:94:79:
         bc:75:cd:01:9e:39:92:b5:ac:b9:f6:c2:16:75:30:44:c0:88:
         99:1c:cc:9a:b6:d4:b2:9c:8e:38:7d:33:5d:5c:c7:34:6b:26:
         ec:b3:85:69:da:70:ef:93:22:f4:41:2a:fc:a0:43:60:b9:fd:
         97:47:10:02:1f:c5:f2:e4:b7:c2:57:7d:23:14:2c:31:da:a4:
         28:2c:69:1c:57:28:86:4c:bd:13:df:1d:b6:29:2d:65:76:89:
         d4:04:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org