Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31322e302f32342d3234203d3e20323733303035.roa
File:                     3133382e3131372e31322e302f32342d3234203d3e20323733303035.roa (raw, json)
Hash identifier:          sBLUjVtW/p1JdxJrRzNDLbPk+XMSlX1somiLoa1FcZw=
Subject key identifier:   BC:8C:EC:95:5E:E1:82:CE:DA:B2:B7:F7:39:35:8F:BE:83:DE:1A:AA
Certificate issuer:       /CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Certificate serial:       5C1D142C2FE5F40B39460B343975FEF67B0EC7B3
Authority key identifier: D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31322e302f32342d3234203d3e20323733303035.roa
Signing time:             Tue 05 Mar 2024 18:19:52 +0000
ROA not before:           Tue 05 Mar 2024 18:14:52 +0000
ROA not after:            Tue 04 Mar 2025 18:19:52 +0000
asID:                     273005
IP address blocks:        138.117.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1d:14:2c:2f:e5:f4:0b:39:46:0b:34:39:75:fe:f6:7b:0e:c7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
        Validity
            Not Before: Mar  5 18:14:52 2024 GMT
            Not After : Mar  4 18:19:52 2025 GMT
        Subject: CN=BC8CEC955EE182CEDAB2B7F739358FBE83DE1AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a5:82:60:46:a4:2b:50:e5:aa:4e:d6:08:77:
                    ac:99:b7:98:a1:61:cb:0b:7f:e1:84:94:ea:8f:d9:
                    d0:f0:eb:a8:aa:07:8f:20:7b:e3:ea:89:33:0d:74:
                    1f:ee:61:ac:b9:47:ed:1e:fe:e7:fe:2f:12:5d:21:
                    09:09:8a:25:9b:7d:e3:ef:48:f6:ff:26:f5:b9:fc:
                    82:1e:e4:83:ef:5c:0b:25:53:2e:60:f0:4b:71:ff:
                    aa:6f:1a:9a:51:3c:16:0b:a7:84:bb:e3:6a:fc:14:
                    92:d4:1c:88:9c:49:05:55:13:ff:c4:a0:7c:a9:89:
                    5e:7b:cb:df:25:1b:8f:ea:93:de:5f:0c:69:30:a4:
                    da:55:c9:d9:87:7a:c4:03:1a:ac:09:de:f8:6f:f3:
                    26:4e:8a:f9:38:0c:8f:8c:52:fe:5f:b8:71:cd:58:
                    42:fa:e9:b3:6e:d6:61:68:39:a6:ea:dd:9d:f4:52:
                    84:79:60:6e:71:4d:eb:07:ad:bc:3a:ae:b9:b6:1f:
                    9a:cd:aa:cc:8a:f8:46:b3:3b:21:26:8b:1e:85:6a:
                    c7:9d:09:5e:38:e8:82:66:83:7b:4c:14:4c:0a:c5:
                    6d:c7:2c:16:f7:2d:dd:84:e7:ec:ae:4b:95:56:3d:
                    13:bd:1f:9f:0a:4b:de:2d:34:ce:57:73:1e:37:37:
                    24:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8C:EC:95:5E:E1:82:CE:DA:B2:B7:F7:39:35:8F:BE:83:DE:1A:AA
            X509v3 Authority Key Identifier:
                keyid:D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31322e302f32342d3234203d3e20323733303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:9f:62:d0:04:f5:60:b5:bb:e6:41:4a:8e:d1:31:6e:8e:
         b4:2a:3a:c1:e2:45:e8:c9:35:85:7b:8c:8d:d6:0d:04:e1:be:
         0c:f8:1f:e5:fb:98:8e:ad:e1:9b:3a:da:f0:b1:4b:ab:b3:0a:
         9f:eb:7b:da:76:4f:e9:04:73:20:61:45:2f:0b:9f:7f:b2:4a:
         52:a6:73:1f:5e:bf:a8:32:c3:de:c0:72:53:6a:e9:c4:63:cf:
         d5:47:48:4c:3b:ff:05:1f:7e:1f:59:d5:1a:ad:bc:f9:7c:b0:
         94:32:58:65:50:31:58:0f:65:11:be:52:d7:82:ca:56:56:fa:
         bf:e6:bb:46:86:ee:ba:9c:4a:99:da:33:30:af:7a:e3:94:79:
         ab:5f:87:33:69:93:10:ef:4a:1f:c5:88:1e:27:02:fd:0b:26:
         bc:17:8d:0f:f5:a2:f5:b2:9f:69:85:4c:3f:80:37:23:4a:c2:
         0a:cf:d6:fc:d2:dd:0c:12:30:a7:fc:56:b9:69:a4:b5:82:36:
         ba:bd:bb:1d:ca:6e:06:48:bb:d4:82:26:e7:35:d0:5f:49:57:
         b6:6f:68:68:fa:5a:bf:60:16:08:20:9e:1f:7d:45:f6:7d:fb:
         ee:ac:67:e7:63:76:96:35:58:cd:d3:89:d1:47:18:73:2d:a9:
         34:93:23:69
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXB0ULC/l9As5Rgs0OXX+9nsOx7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJFNkE4QUYzMjI2NTAxRDhDMEFFODlCMzFBNzhFMzY5
QkNEQkMwMzAeFw0yNDAzMDUxODE0NTJaFw0yNTAzMDQxODE5NTJaMDMxMTAvBgNV
BAMTKEJDOENFQzk1NUVFMTgyQ0VEQUIyQjdGNzM5MzU4RkJFODNERTFBQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtpYJgRqQrUOWqTtYId6yZt5ih
YcsLf+GElOqP2dDw66iqB48ge+PqiTMNdB/uYay5R+0e/uf+LxJdIQkJiiWbfePv
SPb/JvW5/IIe5IPvXAslUy5g8Etx/6pvGppRPBYLp4S742r8FJLUHIicSQVVE//E
oHypiV57y98lG4/qk95fDGkwpNpVydmHesQDGqwJ3vhv8yZOivk4DI+MUv5fuHHN
WEL66bNu1mFoOabq3Z30UoR5YG5xTesHrbw6rrm2H5rNqsyK+EazOyEmix6Fased
CV446IJmg3tMFEwKxW3HLBb3Ld2E5+yuS5VWPRO9H58KS94tNM5Xcx43NyQZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvIzslV7hgs7asrf3OTWPvoPeGqowHwYDVR0j
BBgwFoAU0uaorzImUB2MCuibMaeONpvNvAMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QTlCRThCQUMwREJGMDRBMDRFNjU3RjE3NzIyMURFNUVG
QUVEMTQ3ODAzNEJERTYyNUZENDMxNTBCQ0ZCRjAyLzAvRDJFNkE4QUYzMjI2NTAx
RDhDMEFFODlCMzFBNzhFMzY5QkNEQkMwMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkU2QThBRjMyMjY1MDFEOEMw
QUU4OUIzMUE3OEUzNjlCQ0RCQzAzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUE5QkU4QkFDMERCRjA0QTA0RTY1N0YxNzcyMjFERTVFRkFFRDE0Nzgw
MzRCREU2MjVGRDQzMTUwQkNGQkYwMi8wLzMxMzMzODJlMzEzMTM3MmUzMTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzAzMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinUM
MA0GCSqGSIb3DQEBCwUAA4IBAQBUtp9i0AT1YLW75kFKjtExbo60KjrB4kXoyTWF
e4yN1g0E4b4M+B/l+5iOreGbOtrwsUurswqf63vadk/pBHMgYUUvC59/skpSpnMf
Xr+oMsPewHJTaunEY8/VR0hMO/8FH34fWdUarbz5fLCUMlhlUDFYD2URvlLXgspW
Vvq/5rtGhu66nEqZ2jMwr3rjlHmrX4czaZMQ70ofxYgeJwL9Cya8F40P9aL1sp9p
hUw/gDcjSsIKz9b80t0MEjCn/Fa5aaS1gja6vbsdym4GSLvUgibnNdBfSVe2b2ho
+lq/YBYIIJ4ffUX2ffvurGfnY3aWNVjN04nRRxhzLak0kyNp
-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:16 2024 by rpki-client on console-fra.rpki-client.org