Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3133382e39342e31322e302f32322d3234203d3e203532333132.roa
File:                     3133382e39342e31322e302f32322d3234203d3e203532333132.roa (raw, json)
Hash identifier:          HZx8YPtptGVY07N/1oREAJd2YcC8PF9qB+P5E95aFNI=
Subject key identifier:   0D:F7:7A:B3:3E:3E:44:73:30:C5:52:33:36:A1:ED:63:D5:87:57:1A
Certificate issuer:       /CN=46B816F254BE102454BE2E382FEA14873A13755C
Certificate serial:       462877EC0B1D7EEBE74795E6F65DEE0CFCF07A69
Authority key identifier: 46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3133382e39342e31322e302f32322d3234203d3e203532333132.roa
Signing time:             Tue 05 Mar 2024 18:12:15 +0000
ROA not before:           Tue 05 Mar 2024 18:07:15 +0000
ROA not after:            Tue 04 Mar 2025 18:12:15 +0000
asID:                     52312
IP address blocks:        138.94.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:28:77:ec:0b:1d:7e:eb:e7:47:95:e6:f6:5d:ee:0c:fc:f0:7a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B816F254BE102454BE2E382FEA14873A13755C
        Validity
            Not Before: Mar  5 18:07:15 2024 GMT
            Not After : Mar  4 18:12:15 2025 GMT
        Subject: CN=0DF77AB33E3E447330C5523336A1ED63D587571A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:ac:85:5b:27:70:1e:c3:34:c2:9d:be:f6:
                    b3:87:00:f5:85:b8:71:71:19:ba:3f:2d:1b:9b:d8:
                    a4:e0:b8:88:f1:23:7d:bb:86:6c:71:0e:17:d7:05:
                    61:47:c3:a3:3c:fa:8a:08:be:a8:71:ad:ef:ef:32:
                    f6:74:31:a2:8a:6c:55:13:d3:ef:9f:6b:8a:c6:3d:
                    b5:d6:a6:1e:89:61:12:03:b6:5d:b4:77:db:d2:66:
                    95:6e:16:4a:93:9c:28:df:7c:ab:d3:f4:5d:91:67:
                    b2:f3:96:0d:cd:db:4c:08:c3:30:a4:36:70:bf:3b:
                    cb:46:f3:75:29:59:08:4d:49:03:f9:df:0e:2c:a8:
                    c6:8c:65:18:8d:26:64:64:b2:f4:5c:7a:65:ce:cf:
                    e4:eb:5b:a0:9e:e9:f5:fe:54:35:fa:69:e0:21:0f:
                    78:bf:1d:0a:4d:6a:0e:6d:2e:2a:15:ba:5c:fe:37:
                    f0:41:e5:24:2e:0c:64:6e:02:dd:f3:fc:26:92:e7:
                    a6:eb:83:d4:5c:50:64:19:65:fd:cf:2e:6d:18:11:
                    83:e0:9e:77:b7:f1:04:b6:d2:ed:e6:ff:76:d5:de:
                    fb:77:de:16:d4:69:4d:d6:f6:df:88:ad:2b:3e:9a:
                    53:2f:71:65:86:1c:39:54:a9:d8:4f:32:9d:69:28:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F7:7A:B3:3E:3E:44:73:30:C5:52:33:36:A1:ED:63:D5:87:57:1A
            X509v3 Authority Key Identifier:
                keyid:46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3133382e39342e31322e302f32322d3234203d3e203532333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:86:f6:2f:9f:5d:98:17:4d:b9:0e:62:ea:00:59:2a:0d:f0:
         34:54:fa:b0:5a:ee:be:74:b2:f0:46:84:ed:9d:90:2e:16:03:
         d3:80:38:61:bc:52:81:ae:9f:9d:f5:37:56:d2:6e:8c:c7:b2:
         6f:6e:17:19:cf:e5:0c:db:03:16:1e:33:f8:45:40:cc:7c:44:
         ac:78:e6:6b:fd:f6:c7:b7:c3:78:1f:ce:45:74:b6:57:7a:40:
         d1:c0:88:16:a1:f8:6a:80:2e:e7:2c:1c:86:a4:76:f2:0f:8e:
         22:d2:b8:a8:a2:b8:fd:be:cc:51:f6:b1:1c:17:96:ad:9d:2d:
         2b:33:8a:4b:38:0f:03:df:87:65:bd:82:7e:81:0d:fe:d5:ec:
         44:8f:f0:6d:a1:40:50:17:d1:cb:0b:87:80:d9:65:42:f9:b7:
         34:71:82:c5:fe:3b:8b:ac:2d:54:ed:85:25:be:7e:26:7c:1a:
         24:d3:f9:aa:de:6a:73:81:af:92:da:b2:e5:05:24:aa:42:a5:
         57:4c:7a:c7:e3:12:0a:51:c5:12:bf:d0:f2:78:41:7a:50:d3:
         14:a1:a2:b5:3f:36:cd:a8:f1:7e:6b:70:f3:b3:3b:52:17:6f:
         63:bf:c0:69:9c:63:5b:3f:f2:84:d2:75:3e:ef:f1:7f:98:bf:
         1d:78:bb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org