Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31332e302f32342d3234203d3e20323635383635.roa
File:                     3133382e3131372e31332e302f32342d3234203d3e20323635383635.roa (raw, json)
Hash identifier:          cRJ5DPzYTROThM3+N673/HXIwv/555zXAROLnUa/MLw=
Subject key identifier:   54:C3:45:40:03:8B:8E:B3:17:98:96:4B:D3:64:EA:18:BD:9C:89:6D
Certificate issuer:       /CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Certificate serial:       01C684448E0507BB20D147C87FE3EE1C20E814C3
Authority key identifier: D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31332e302f32342d3234203d3e20323635383635.roa
Signing time:             Tue 05 Mar 2024 18:19:52 +0000
ROA not before:           Tue 05 Mar 2024 18:14:52 +0000
ROA not after:            Tue 04 Mar 2025 18:19:52 +0000
asID:                     265865
IP address blocks:        138.117.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c6:84:44:8e:05:07:bb:20:d1:47:c8:7f:e3:ee:1c:20:e8:14:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
        Validity
            Not Before: Mar  5 18:14:52 2024 GMT
            Not After : Mar  4 18:19:52 2025 GMT
        Subject: CN=54C34540038B8EB31798964BD364EA18BD9C896D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:4b:46:d6:17:65:01:62:93:57:46:d8:17:
                    2e:5d:66:7e:20:d7:84:99:9e:3f:e7:ae:c8:f2:76:
                    a7:ac:16:59:4b:80:ed:68:06:d1:4d:fa:2b:48:f8:
                    39:ae:1f:49:c4:e5:d4:9d:a9:00:05:75:d0:df:6a:
                    45:4f:d9:36:e3:9a:fe:78:b2:13:b6:4c:fe:85:97:
                    e7:92:49:03:34:15:00:fb:d3:0b:a6:4b:8c:db:e0:
                    f1:df:77:26:39:fc:72:d8:c3:0a:8a:a8:29:2b:cb:
                    34:de:1e:a7:f7:28:0e:93:9b:db:a5:41:38:16:39:
                    02:89:3c:8d:eb:b2:55:c6:5a:e8:a9:c2:ca:cf:5b:
                    cf:42:67:e7:63:3f:7c:c0:99:e9:54:39:5c:8d:73:
                    0f:14:fb:f3:8f:4e:dc:79:0d:8f:62:24:39:51:58:
                    fd:ce:3e:a5:b2:d8:dc:52:a8:b4:21:9e:5e:8f:2e:
                    a0:7b:07:14:59:3b:99:84:66:3b:20:fd:bd:7a:d2:
                    24:c6:8e:4b:b9:29:06:61:40:65:a6:60:80:9d:13:
                    88:c4:40:43:6c:e1:35:75:6e:89:b4:bc:3b:21:e1:
                    69:cd:d4:f0:4d:9f:91:bd:e4:f5:9b:55:9c:57:1c:
                    67:e3:a0:25:ef:f2:bb:5d:db:47:a5:d5:03:ef:af:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C3:45:40:03:8B:8E:B3:17:98:96:4B:D3:64:EA:18:BD:9C:89:6D
            X509v3 Authority Key Identifier:
                keyid:D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31332e302f32342d3234203d3e20323635383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:84:5e:7a:d9:8c:ad:2b:59:d9:f3:c6:52:fb:1a:43:61:41:
         9d:a3:96:0c:ca:6a:60:26:45:f8:52:aa:f6:08:89:0f:45:f1:
         c9:3b:fb:a3:57:7c:c9:04:77:04:41:64:b8:46:2f:67:79:40:
         60:12:f4:04:2d:9b:cc:0c:aa:52:38:33:a8:5a:db:0b:84:7e:
         91:7c:3e:fc:6e:63:9b:a6:f9:c1:6c:ff:dc:5d:87:5f:81:2d:
         e7:e2:4a:5b:c4:30:16:e9:b4:98:68:bc:94:bd:f4:4c:99:6f:
         c3:c5:cb:7e:b8:18:1d:bd:b0:8c:b9:83:47:32:af:a3:60:25:
         a4:84:3b:09:5b:84:5d:6d:bf:b6:b6:f1:bb:e7:bc:96:ef:e4:
         db:79:05:a0:b1:12:2c:05:43:7e:60:92:4d:4a:ee:e0:86:dd:
         d2:8e:b5:ff:bb:da:dc:79:f6:77:43:2a:57:a8:43:fc:fa:bf:
         d2:cc:bc:4a:b8:93:a0:cf:44:54:f3:39:4d:ff:78:6e:a8:e4:
         f1:e4:aa:39:41:57:79:4d:b3:48:df:58:00:bc:1d:04:35:49:
         e7:e2:7b:70:c9:38:33:fd:3d:83:a9:6b:60:81:fc:56:b8:c3:
         a1:f9:51:30:d4:1e:cf:82:4a:11:e7:e0:12:92:1e:1f:53:1b:
         f1:dd:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:45:37 2024 by rpki-client on console-ams.rpki-client.org