Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/3133382e302e3132302e302f32332d3234203d3e20323732303134.roa
File:                     3133382e302e3132302e302f32332d3234203d3e20323732303134.roa (raw, json)
Hash identifier:          5rexdHaTObbgeTz0fegEDH/geWZQsbcWgrtLU+wuPc0=
Subject key identifier:   0C:04:99:B4:94:DF:35:EA:EF:D1:2B:A4:C7:16:21:33:1A:18:7C:79
Certificate issuer:       /CN=2DCCD1347B8E4A264380CB0C336092CD0A179491
Certificate serial:       72F2E5B4DC9E0ACFDB194D64B40F41EECC97E1DA
Authority key identifier: 2D:CC:D1:34:7B:8E:4A:26:43:80:CB:0C:33:60:92:CD:0A:17:94:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/3133382e302e3132302e302f32332d3234203d3e20323732303134.roa
Signing time:             Tue 05 Mar 2024 17:46:13 +0000
ROA not before:           Tue 05 Mar 2024 17:41:13 +0000
ROA not after:            Tue 04 Mar 2025 17:46:13 +0000
asID:                     272014
IP address blocks:        138.0.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f2:e5:b4:dc:9e:0a:cf:db:19:4d:64:b4:0f:41:ee:cc:97:e1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DCCD1347B8E4A264380CB0C336092CD0A179491
        Validity
            Not Before: Mar  5 17:41:13 2024 GMT
            Not After : Mar  4 17:46:13 2025 GMT
        Subject: CN=0C0499B494DF35EAEFD12BA4C71621331A187C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7f:7e:e8:66:1e:bd:a1:e6:91:63:59:9f:44:
                    1a:11:c9:0b:58:82:fb:98:34:54:7f:6a:bf:04:c1:
                    54:d0:aa:5b:c5:c7:1d:0e:07:93:52:c3:f1:cd:33:
                    c8:b1:71:4d:74:33:d0:f2:dd:4a:29:1f:21:3f:b8:
                    62:42:8e:36:3c:f2:dc:26:7f:7f:98:2e:8d:23:3b:
                    41:dd:5b:40:8d:2b:48:92:8f:72:2f:87:db:2e:bd:
                    e9:48:24:ce:0a:70:d2:39:d5:57:eb:35:a4:ca:97:
                    c4:2e:29:84:bb:9a:f3:8d:a0:27:8f:82:34:49:e5:
                    59:27:ee:52:c2:ff:ab:33:a2:94:3c:60:87:c9:ab:
                    9f:75:d2:62:72:a1:cd:bd:f9:18:c4:0e:32:a5:6c:
                    3d:9d:ec:87:85:26:ea:06:c6:ae:c0:45:3e:eb:c8:
                    65:a2:c3:f4:93:dd:c3:7e:04:17:75:e6:14:8a:01:
                    f4:ce:45:d1:68:68:34:45:7a:2b:b8:47:0a:e2:35:
                    11:a6:c6:30:cc:fd:01:f2:db:0e:5f:d2:84:e7:9a:
                    94:70:1c:c0:b2:b6:c4:3e:ba:2f:fb:54:53:00:fe:
                    0e:a9:65:d5:3f:b4:68:61:e8:d1:ad:45:95:89:52:
                    da:cc:bf:1d:b8:82:26:07:f2:34:d1:f5:82:5c:a5:
                    6e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:04:99:B4:94:DF:35:EA:EF:D1:2B:A4:C7:16:21:33:1A:18:7C:79
            X509v3 Authority Key Identifier:
                keyid:2D:CC:D1:34:7B:8E:4A:26:43:80:CB:0C:33:60:92:CD:0A:17:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/3133382e302e3132302e302f32332d3234203d3e20323732303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:cb:a1:17:f9:f7:3d:78:51:2c:1e:a2:e7:10:97:c8:b7:f2:
         f8:b0:4a:0f:b6:69:8d:20:f9:d4:24:2a:e7:75:fc:0b:0f:d8:
         aa:98:9d:3c:9d:1b:82:09:3d:26:9c:49:0f:47:97:0b:c2:89:
         6a:b3:d3:d4:da:1f:92:38:5f:f8:20:eb:e4:c4:6c:98:ce:e7:
         ab:15:86:b9:2d:72:44:a2:c5:bc:27:f9:4b:45:dc:d5:c7:d3:
         41:04:5d:02:27:14:b2:fe:bb:1d:12:2c:43:e3:b3:72:fe:97:
         34:4b:5a:63:f8:c0:82:1a:0c:45:44:27:84:65:3c:0f:db:d7:
         92:e4:bd:b6:a9:7e:e3:23:98:e6:7b:76:68:3c:43:6f:4c:44:
         06:3b:19:d8:a1:ef:5f:fa:92:c9:95:0c:72:26:80:7a:43:b1:
         f6:41:b2:ec:ae:e9:2a:2d:47:bd:a5:49:d4:04:c3:17:aa:85:
         1b:1d:60:25:23:4f:f6:86:54:eb:f8:84:08:b1:53:8b:7c:7c:
         de:c8:e1:79:c2:74:1e:3e:af:73:54:1f:b1:f8:75:e2:e3:e3:
         0c:d0:a8:39:4e:e7:0d:3e:60:59:2f:15:17:a9:60:c4:08:69:
         b8:db:f5:00:ca:76:9d:cd:b4:06:a5:15:11:67:c5:3c:0d:cc:
         aa:05:bd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org