Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3133382e3138352e3232342e302f32322d3234203d3e20323632393434.roa
File:                     3133382e3138352e3232342e302f32322d3234203d3e20323632393434.roa (raw, json)
Hash identifier:          1w92hXx1PjijzN0DUWtqrvvgUoCr26FNnrO3ChuERKU=
Subject key identifier:   D8:D2:13:99:99:78:15:31:0B:E6:27:B5:1A:5C:4C:A0:4B:B4:90:6C
Certificate issuer:       /CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
Certificate serial:       02E99104500DD72C52D40DD0800EA1A4FE0D9147
Authority key identifier: 78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3133382e3138352e3232342e302f32322d3234203d3e20323632393434.roa
Signing time:             Thu 14 Mar 2024 05:20:00 +0000
ROA not before:           Thu 14 Mar 2024 05:15:00 +0000
ROA not after:            Thu 13 Mar 2025 05:20:00 +0000
asID:                     262944
IP address blocks:        138.185.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e9:91:04:50:0d:d7:2c:52:d4:0d:d0:80:0e:a1:a4:fe:0d:91:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7
        Validity
            Not Before: Mar 14 05:15:00 2024 GMT
            Not After : Mar 13 05:20:00 2025 GMT
        Subject: CN=D8D21399997815310BE627B51A5C4CA04BB4906C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:88:6b:5a:96:54:71:33:81:a4:bf:dc:3a:
                    b2:c6:61:98:65:a3:e9:3b:9e:10:31:bb:db:09:28:
                    b5:29:20:70:fe:9a:f3:6d:b4:f3:66:58:9e:cd:2a:
                    61:80:e0:8b:34:d1:46:f6:76:4d:f6:1b:fc:36:9c:
                    e8:08:53:da:0e:e3:a0:f1:b2:0d:c3:e5:75:e9:c6:
                    0d:39:be:c1:de:15:6b:30:a4:78:09:b5:59:cd:86:
                    1f:87:1d:54:6d:11:48:3c:dd:5a:53:b6:b7:7e:42:
                    cf:00:c2:5d:7a:97:4a:53:83:c6:b0:fc:8e:9f:b3:
                    9b:20:3e:7d:e6:6f:3b:5b:b6:50:82:91:05:b0:58:
                    28:6b:07:0f:5f:88:79:53:35:00:8a:79:38:e9:01:
                    00:be:1b:77:c8:54:91:a9:8b:d6:9f:5d:b9:21:51:
                    04:45:56:dd:6f:c8:a4:5b:5c:c8:2c:35:4c:89:f4:
                    ec:29:b3:6a:44:af:2c:db:8b:19:83:95:80:a8:04:
                    ca:3b:b4:07:bd:dc:75:52:21:3f:d7:8c:b9:77:21:
                    ac:92:0a:f6:4d:19:c9:7d:86:4c:e4:84:8b:5f:7e:
                    dd:36:3a:3b:44:77:b4:fe:7e:94:58:04:a2:b3:5c:
                    cb:61:8a:e5:ad:4e:3d:52:63:ab:4c:f7:fd:71:d9:
                    59:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D2:13:99:99:78:15:31:0B:E6:27:B5:1A:5C:4C:A0:4B:B4:90:6C
            X509v3 Authority Key Identifier:
                keyid:78:A6:FD:AE:32:5A:33:5A:2C:C8:9A:8D:2F:CB:2F:98:8B:8A:2C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78A6FDAE325A335A2CC89A8D2FCB2F988B8A2CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/581A89B0731F0AE7F0CD3544EEFBC4759C3DF3326E6BE9AEBF6DBA1D450C1DA2/0/3133382e3138352e3232342e302f32322d3234203d3e20323632393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:aa:38:9a:33:ea:e4:7f:4c:ea:96:ee:8b:99:cd:1d:97:47:
         74:74:60:4f:89:d2:28:ac:f7:af:fb:3e:e7:54:21:b9:56:df:
         0b:f4:16:21:f9:ba:e5:98:76:d5:53:62:75:7c:5b:9c:66:82:
         33:b4:80:fc:d8:f6:10:57:c4:49:82:4f:f4:a0:cc:d9:a1:61:
         72:94:f0:46:a6:93:5a:06:39:8a:fc:6d:96:26:54:2a:ad:f3:
         03:97:3e:d5:04:df:01:eb:77:9a:63:3e:fa:1b:c3:34:a7:5f:
         e1:07:06:5b:8c:a6:68:de:84:31:1c:d5:6b:62:2d:05:75:3b:
         a4:af:cc:a3:01:61:ac:ba:c2:4b:a0:5b:d7:2f:b2:c5:60:26:
         e6:8e:6a:25:db:95:d5:14:e0:25:ed:34:36:83:4a:7c:35:9c:
         13:88:74:b5:47:0b:01:5b:3e:20:36:d2:12:2d:f5:e8:d0:c0:
         d3:c6:bc:1b:c4:39:1f:83:a9:9a:47:c8:80:7e:2a:43:e2:60:
         bb:21:68:9f:44:7e:98:0d:f7:3a:3a:25:57:37:f7:19:4d:0d:
         db:20:31:2e:c5:93:c4:42:79:08:f9:87:43:c7:fa:91:18:ec:
         92:b0:76:17:e5:51:5d:50:b2:40:22:bb:b0:a3:ae:94:22:d0:
         a6:00:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org