Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3133382e3230342e3233362e302f32322d3234203d3e203532333230.roa
File:                     3133382e3230342e3233362e302f32322d3234203d3e203532333230.roa (raw, json)
Hash identifier:          yu6UIqugvUwLZcLdeedowUj7bJXDULQnFJUYk9kMjSo=
Subject key identifier:   32:EE:AF:65:89:3C:24:91:CB:7F:BF:D6:E5:C1:CD:61:28:F3:A5:94
Certificate issuer:       /CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
Certificate serial:       442E295EB5DCB571F4AC50545F7C9B4616160726
Authority key identifier: B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3133382e3230342e3233362e302f32322d3234203d3e203532333230.roa
Signing time:             Tue 05 Mar 2024 18:15:00 +0000
ROA not before:           Tue 05 Mar 2024 18:10:00 +0000
ROA not after:            Tue 04 Mar 2025 18:15:00 +0000
asID:                     52320
IP address blocks:        138.204.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2e:29:5e:b5:dc:b5:71:f4:ac:50:54:5f:7c:9b:46:16:16:07:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
        Validity
            Not Before: Mar  5 18:10:00 2024 GMT
            Not After : Mar  4 18:15:00 2025 GMT
        Subject: CN=32EEAF65893C2491CB7FBFD6E5C1CD6128F3A594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:c0:52:fb:d6:58:e8:9c:81:75:e7:bf:60:
                    55:64:57:a2:b0:48:d5:52:ba:95:88:f9:05:98:ae:
                    0f:e1:f2:11:ed:1f:a0:7d:12:51:e4:33:1c:b5:00:
                    51:24:51:2a:7e:d1:c9:a1:5a:58:00:4a:ee:a2:83:
                    67:50:bd:9d:c4:7a:3f:2c:a7:2c:d6:f0:9e:8d:b0:
                    1f:e3:67:56:49:6b:e0:41:9b:f8:9e:16:8a:f0:84:
                    40:f3:ce:56:40:6c:31:55:0d:2f:ea:af:1f:b0:15:
                    4b:bf:ad:a9:ae:cf:ae:47:3c:66:4f:b9:72:9b:6c:
                    dc:15:95:21:75:72:60:1b:54:13:16:6d:fe:67:59:
                    f8:6b:5e:6c:8c:0b:8b:b2:0a:70:a9:51:50:84:31:
                    84:08:d6:0c:0e:58:82:e8:51:fa:53:2c:4e:31:78:
                    4e:51:5e:ac:c8:54:9a:cf:97:68:94:e0:c3:07:fa:
                    3b:31:1d:61:6c:21:50:b1:09:96:4a:eb:6c:48:4f:
                    c4:00:40:9f:71:d9:ee:54:66:af:4c:20:6e:50:f3:
                    e1:55:ca:0e:76:66:d8:2d:96:cc:82:6d:26:e5:af:
                    f5:d1:1a:d6:3c:6c:d9:80:7e:51:52:b7:8b:7d:f1:
                    ed:19:d3:1b:9d:cf:e7:79:9f:34:0d:9a:63:71:98:
                    d4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EE:AF:65:89:3C:24:91:CB:7F:BF:D6:E5:C1:CD:61:28:F3:A5:94
            X509v3 Authority Key Identifier:
                keyid:B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/3133382e3230342e3233362e302f32322d3234203d3e203532333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:de:52:50:f4:a3:30:ed:93:a6:5d:95:19:c0:76:31:ea:f9:
         8e:cc:2b:70:80:37:f4:c4:43:d8:21:09:0e:af:fd:8d:89:50:
         24:41:09:aa:de:ae:f9:30:0b:51:e9:c4:3b:49:9f:1b:6b:64:
         be:81:fc:b8:c9:26:9f:7f:7e:4f:e4:81:fa:c9:51:ee:e9:b9:
         4d:9c:71:d0:59:f8:7c:af:96:35:e3:0b:19:d3:cc:28:d6:7c:
         96:2c:e4:7e:5e:5c:5c:6c:b3:e2:40:7e:94:da:f8:51:03:12:
         95:cb:ad:5a:37:b2:00:b9:1c:07:0a:8b:49:1f:2f:e6:06:70:
         e8:38:f6:dd:a0:12:a8:31:b3:36:e2:02:1d:a7:e2:85:f9:2e:
         9c:45:6c:75:a2:48:35:f9:94:0b:c2:f7:d8:dd:da:b7:ce:5c:
         a3:86:d1:65:14:cb:19:15:f3:ab:aa:16:3b:30:bf:75:42:75:
         f1:fe:bc:22:b3:b8:c1:5f:d8:49:91:cc:c1:af:ea:fe:74:bb:
         f7:04:5d:f0:5b:14:32:f8:9c:90:24:af:95:ee:2f:94:78:2a:
         08:61:65:57:36:8f:83:86:3b:72:66:29:c8:ef:6f:28:27:f5:
         e2:92:6e:51:e8:e4:65:14:cc:7d:97:29:8c:6e:17:78:8f:c2:
         31:e5:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:21:49 2024 by rpki-client on console-fra.rpki-client.org