Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/3133382e3235352e38382e302f32322d3237203d3e20323634363037.roa
File:                     3133382e3235352e38382e302f32322d3237203d3e20323634363037.roa (raw, json)
Hash identifier:          06/jcyUEviiE6gGa51md7680tVFry3N50S9TFPYK5KI=
Subject key identifier:   D8:2C:89:8E:76:48:6A:AF:6F:6D:9C:D2:A3:F8:74:12:80:8A:C4:BC
Certificate issuer:       /CN=91A405EDF63A9F2958C6B36662A6B3CEF476A89D
Certificate serial:       0B8D43C84DD3140C5FDC6732FBCFFF6FBFA777A0
Authority key identifier: 91:A4:05:ED:F6:3A:9F:29:58:C6:B3:66:62:A6:B3:CE:F4:76:A8:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/3133382e3235352e38382e302f32322d3237203d3e20323634363037.roa
Signing time:             Tue 05 Mar 2024 17:47:43 +0000
ROA not before:           Tue 05 Mar 2024 17:42:43 +0000
ROA not after:            Tue 04 Mar 2025 17:47:43 +0000
asID:                     264607
IP address blocks:        138.255.88.0/22 maxlen: 27

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8d:43:c8:4d:d3:14:0c:5f:dc:67:32:fb:cf:ff:6f:bf:a7:77:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91A405EDF63A9F2958C6B36662A6B3CEF476A89D
        Validity
            Not Before: Mar  5 17:42:43 2024 GMT
            Not After : Mar  4 17:47:43 2025 GMT
        Subject: CN=D82C898E76486AAF6F6D9CD2A3F87412808AC4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:e2:c4:a3:a1:80:1e:4f:75:15:c7:4b:16:
                    31:cb:07:a6:75:a4:51:37:87:39:e3:1d:77:04:f2:
                    e0:98:f9:53:c1:64:f1:79:0e:51:e7:39:eb:37:a4:
                    96:69:a8:1a:c6:75:e6:0c:16:25:49:ea:f6:d1:a3:
                    db:a1:6f:4d:f7:f0:ad:da:a7:bf:13:c7:d5:3d:88:
                    b6:db:82:c7:84:48:fd:f6:97:2a:86:7c:53:53:b9:
                    bd:7b:17:e3:86:f0:32:b1:7b:02:97:b8:a9:dc:e8:
                    d2:4a:48:b5:e7:4d:3e:c8:a1:ac:63:77:fb:11:53:
                    d3:4a:6c:08:e5:af:98:ad:52:25:2d:90:3d:f9:4c:
                    cb:42:55:9f:74:a4:c5:25:cb:d5:5f:a3:f1:66:05:
                    53:c9:e7:23:7d:4f:0d:0a:96:92:28:4f:e4:d8:c0:
                    bb:b7:92:ee:9b:94:56:d2:b9:a4:89:e3:d7:cf:55:
                    04:25:19:6a:37:c9:85:70:93:3b:a9:a5:ec:83:f8:
                    ae:0a:80:b8:2c:1d:fd:26:84:33:c4:e1:ab:aa:dd:
                    33:44:af:4f:3c:80:a5:ae:ce:76:82:ad:54:98:62:
                    86:1e:24:b7:6e:8e:97:59:a5:19:e4:7f:60:3a:16:
                    c0:c6:59:ae:0c:14:a5:e5:88:17:93:ca:f3:da:f0:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2C:89:8E:76:48:6A:AF:6F:6D:9C:D2:A3:F8:74:12:80:8A:C4:BC
            X509v3 Authority Key Identifier:
                keyid:91:A4:05:ED:F6:3A:9F:29:58:C6:B3:66:62:A6:B3:CE:F4:76:A8:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/3133382e3235352e38382e302f32322d3237203d3e20323634363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:00:b9:95:bc:c5:bd:33:e1:87:fd:7b:72:68:e2:4a:ba:4b:
         a1:d7:e2:94:7f:44:f1:88:d5:fe:8c:38:5f:0b:d8:73:aa:b9:
         a3:ac:58:57:ba:6d:9b:46:d0:80:21:29:66:ee:89:70:0d:b0:
         49:1c:2b:33:64:0d:3f:9e:f6:74:95:38:16:62:8f:93:e8:8d:
         d1:8c:a9:1f:e3:9d:63:41:55:06:40:ba:f4:04:f2:e4:36:27:
         8c:95:02:3d:1d:51:7b:3b:80:26:ca:b7:f2:93:1f:5e:1f:4c:
         81:b2:92:84:06:78:05:37:a4:fe:7b:85:27:7a:99:1d:6e:2e:
         e7:42:9b:de:bd:b2:aa:30:5f:3a:23:79:e8:c4:88:65:32:bf:
         e6:62:46:c4:01:37:37:49:ed:50:c6:7f:72:02:3c:b6:a9:06:
         5f:6a:23:be:e9:d2:a9:8d:01:13:c1:68:be:ef:f7:12:17:37:
         79:98:b3:b6:24:7a:80:16:de:71:87:8a:4a:ff:4a:a3:82:f7:
         b9:d5:89:b3:1a:90:85:55:9a:3c:9b:94:ee:69:a6:a0:90:c5:
         1e:18:94:48:cc:d4:79:46:11:62:16:28:7c:3a:36:12:19:fd:
         d2:a9:cb:28:a4:ce:4e:20:68:54:90:52:33:23:bb:7c:d6:6d:
         5a:85:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:22 2024 by rpki-client on console-fra.rpki-client.org