Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3133382e302e34302e302f32322d3234203d3e203532333230.roa
File:                     3133382e302e34302e302f32322d3234203d3e203532333230.roa (raw, json)
Hash identifier:          Y3gpBR+AlMVxqyoNjU8DbujjA7aiJKauG3z4t/WdbSI=
Subject key identifier:   7D:63:B5:9B:43:30:8F:69:2B:B0:7A:72:43:27:F6:16:01:8A:1F:B9
Certificate issuer:       /CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
Certificate serial:       7FB9EAE7B7C315A38608418D8E8DB30BC9E28CA1
Authority key identifier: B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3133382e302e34302e302f32322d3234203d3e203532333230.roa
Signing time:             Tue 05 Mar 2024 18:15:00 +0000
ROA not before:           Tue 05 Mar 2024 18:10:00 +0000
ROA not after:            Tue 04 Mar 2025 18:15:00 +0000
asID:                     52320
IP address blocks:        138.0.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b9:ea:e7:b7:c3:15:a3:86:08:41:8d:8e:8d:b3:0b:c9:e2:8c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
        Validity
            Not Before: Mar  5 18:10:00 2024 GMT
            Not After : Mar  4 18:15:00 2025 GMT
        Subject: CN=7D63B59B43308F692BB07A724327F616018A1FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d5:31:4d:db:77:85:d7:d5:04:46:57:16:4c:
                    16:5c:58:34:72:b1:a2:39:17:33:ff:61:7a:04:7e:
                    85:96:66:f9:28:1b:14:c1:d8:0a:95:80:a2:45:2c:
                    2d:93:73:7a:88:05:3e:13:1c:31:d2:ce:09:c3:4e:
                    ab:24:26:5e:b2:25:08:12:60:58:c8:f7:bc:99:c4:
                    5d:f6:44:50:1d:0c:85:95:51:1a:e4:66:ce:43:39:
                    ee:27:23:ff:3c:07:3b:bd:4c:30:7d:98:e8:16:df:
                    cd:dc:5e:25:5b:8a:f1:fb:54:c4:2d:ef:27:f3:e6:
                    a8:29:03:41:d5:77:8d:98:36:ba:07:c6:ab:cb:8e:
                    bb:29:b9:db:10:6d:bf:d2:40:5b:95:bc:8e:22:ab:
                    7f:51:b7:1a:5a:5e:d1:13:cb:6e:36:e4:fd:e8:d7:
                    50:cb:6a:33:58:ea:d3:80:e1:5e:76:e5:6c:11:14:
                    ce:ef:6d:a9:84:0b:4c:c3:1a:b3:b3:4d:4f:9d:40:
                    42:50:99:b2:7c:c4:98:ee:65:39:32:3e:2c:44:7b:
                    d6:21:f8:55:ec:23:52:1b:a4:5b:91:96:5b:61:d2:
                    93:80:00:27:96:14:9a:7f:33:26:f5:b6:32:57:65:
                    60:8f:4f:12:42:ad:aa:70:fa:5f:a0:bd:33:83:57:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:63:B5:9B:43:30:8F:69:2B:B0:7A:72:43:27:F6:16:01:8A:1F:B9
            X509v3 Authority Key Identifier:
                keyid:B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3133382e302e34302e302f32322d3234203d3e203532333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:a3:b4:94:a1:d5:45:c5:be:36:94:bf:b2:a6:c7:75:cb:78:
         89:aa:10:36:85:ce:4b:5b:9d:55:b1:ac:4a:ae:48:92:e9:36:
         d3:cd:88:d2:ff:ca:15:1a:1e:87:56:1a:ba:55:69:f7:a1:99:
         e0:23:6a:4b:f1:a7:b5:d1:f7:44:b5:b7:e9:99:66:81:c9:ca:
         cc:33:50:0d:a6:1e:b7:4f:13:ce:14:f3:34:ed:ad:39:fe:f9:
         b4:40:6e:c8:c5:82:81:67:46:da:ff:d1:fb:13:a4:5c:f6:fb:
         eb:db:fb:f5:60:81:c1:9f:da:9f:11:69:8e:6c:66:31:49:ee:
         ad:7c:c4:f2:1b:2c:e9:3c:e6:7b:d6:14:54:74:95:2d:93:78:
         e4:51:5e:9d:5a:40:d7:9d:03:51:15:8b:84:21:21:ba:3d:5f:
         0d:b7:38:e5:8c:1f:4e:60:2f:72:9b:0f:04:ff:53:eb:6f:0b:
         92:c8:a6:7b:a9:a6:29:eb:06:99:19:e9:9c:56:74:72:b0:ee:
         00:37:49:fc:b4:e1:6e:06:9c:95:21:8b:9c:7b:a9:d4:61:48:
         04:93:29:50:f5:9c:59:a7:05:57:21:44:cb:6f:62:f6:66:a9:
         19:b8:c9:5c:11:01:e9:16:46:aa:9c:77:f2:2f:b6:81:eb:bc:
         13:2b:bd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:09:58 2024 by rpki-client on console-fra.rpki-client.org