Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3133382e302e3234302e302f32322d3232203d3e20323634383530.roa
File:                     3133382e302e3234302e302f32322d3232203d3e20323634383530.roa (raw, json)
Hash identifier:          yxTbREQYNctvMKQwU54UGjDy7nhm8CHmLHqEfIcDcsU=
Subject key identifier:   AF:94:19:A8:FF:19:72:00:83:4A:8E:BB:5E:49:9D:9C:00:68:C8:ED
Certificate issuer:       /CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Certificate serial:       4C39FD3CC5D089D713579FF795C2CF189E6AB2BC
Authority key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3133382e302e3234302e302f32322d3232203d3e20323634383530.roa
Signing time:             Tue 05 Mar 2024 17:59:11 +0000
ROA not before:           Tue 05 Mar 2024 17:54:11 +0000
ROA not after:            Tue 04 Mar 2025 17:59:11 +0000
asID:                     264850
IP address blocks:        138.0.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:39:fd:3c:c5:d0:89:d7:13:57:9f:f7:95:c2:cf:18:9e:6a:b2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
        Validity
            Not Before: Mar  5 17:54:11 2024 GMT
            Not After : Mar  4 17:59:11 2025 GMT
        Subject: CN=AF9419A8FF197200834A8EBB5E499D9C0068C8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:d9:bb:f4:84:4e:d2:e0:9d:81:84:c0:86:
                    da:33:b8:b4:2e:62:ef:61:6c:8a:a6:c0:f9:c8:3e:
                    57:87:cc:b5:21:a1:63:0a:32:60:e8:03:2c:14:56:
                    31:c4:b7:85:7e:0f:a2:d4:a5:7b:94:45:25:43:62:
                    c3:50:d1:ed:d7:cf:a8:f6:11:33:3f:1f:c7:ec:9c:
                    d7:1b:87:e4:11:b3:47:6d:b7:e6:af:50:64:3a:79:
                    60:13:d2:d5:1a:19:56:71:d9:91:83:84:69:bd:9b:
                    f3:41:89:45:2a:75:28:74:52:e3:ce:47:16:d8:b3:
                    69:ae:9e:1e:4e:3d:34:97:02:45:92:a1:dd:38:6c:
                    6c:b9:69:cf:4b:3a:82:fa:08:ac:60:6d:7c:b6:8d:
                    1f:e8:f3:37:6f:ac:91:a5:ae:00:ce:5a:25:1b:62:
                    ab:de:f0:52:ff:0b:06:34:df:6e:1a:d6:50:dd:f3:
                    b0:41:9f:21:05:1f:9d:29:04:c7:86:de:d1:a2:09:
                    a8:0c:9b:14:20:e6:9e:02:f2:3f:e3:97:67:9c:74:
                    6c:e3:9d:24:0f:57:cb:ce:62:1e:f2:8a:2f:1c:65:
                    af:f5:ef:eb:d1:d4:85:e6:cc:c1:c1:92:22:3c:fa:
                    b1:cb:fb:8e:bd:b4:d6:51:47:64:6b:b1:d3:12:d6:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:94:19:A8:FF:19:72:00:83:4A:8E:BB:5E:49:9D:9C:00:68:C8:ED
            X509v3 Authority Key Identifier:
                keyid:FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3133382e302e3234302e302f32322d3232203d3e20323634383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:f3:f1:27:9b:58:7d:f1:08:91:19:7e:3e:cd:eb:87:b9:
         47:0b:53:be:d4:dc:6e:99:51:67:ba:38:39:f3:22:ca:ca:9f:
         a0:19:0f:8c:24:47:e1:9f:54:49:49:91:48:18:2c:c3:c4:59:
         14:8d:a9:cf:cf:d3:2c:38:13:ff:90:b5:11:1d:46:c1:92:1c:
         13:4f:cf:24:5e:74:38:02:a6:4f:0b:2c:aa:d9:ca:cd:f2:f6:
         7a:1a:47:05:35:0c:93:be:b8:5b:8a:ea:b5:c5:a1:84:f9:3b:
         72:55:39:bb:d4:a6:fe:a2:c4:2b:fb:88:55:80:6f:e6:a6:1f:
         8a:32:ad:d6:49:9b:7f:1d:0d:d3:05:c2:1a:a3:90:05:8f:19:
         a9:23:d4:e5:79:55:35:ec:d1:96:0c:d7:67:c0:76:52:87:aa:
         69:88:08:ee:c8:7a:65:a4:0b:dd:b2:4c:2a:5c:b4:1d:09:1d:
         af:80:d0:71:8b:de:fc:82:de:71:14:21:d8:46:20:a2:41:1b:
         e9:b9:26:2a:e6:23:4a:02:8f:24:67:e4:d2:ed:ac:67:67:09:
         89:77:04:10:a5:14:96:1a:7d:b8:c8:88:30:38:e9:52:c3:5e:
         93:2c:05:c4:b2:ad:82:be:57:f1:e1:b8:f6:58:a8:c3:7c:e8:
         97:db:6b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 04:12:54 2024 by rpki-client on console-fra.rpki-client.org