Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/3133382e3235352e38392e302f32342d3234203d3e203439383335.roa
File:                     3133382e3235352e38392e302f32342d3234203d3e203439383335.roa (raw, json)
Hash identifier:          rRmT2Is0x70trwwK6Rqf5BmtusrDS82dqlN88c/Ym5M=
Subject key identifier:   84:D8:5D:44:B0:69:2E:20:37:EA:4C:57:A9:4B:00:D7:0F:1A:01:CC
Certificate issuer:       /CN=91A405EDF63A9F2958C6B36662A6B3CEF476A89D
Certificate serial:       1B294389A50378FC4A5C0775E344BB984D227E76
Authority key identifier: 91:A4:05:ED:F6:3A:9F:29:58:C6:B3:66:62:A6:B3:CE:F4:76:A8:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/3133382e3235352e38392e302f32342d3234203d3e203439383335.roa
Signing time:             Tue 05 Mar 2024 17:47:43 +0000
ROA not before:           Tue 05 Mar 2024 17:42:43 +0000
ROA not after:            Tue 04 Mar 2025 17:47:43 +0000
asID:                     49835
IP address blocks:        138.255.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:29:43:89:a5:03:78:fc:4a:5c:07:75:e3:44:bb:98:4d:22:7e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91A405EDF63A9F2958C6B36662A6B3CEF476A89D
        Validity
            Not Before: Mar  5 17:42:43 2024 GMT
            Not After : Mar  4 17:47:43 2025 GMT
        Subject: CN=84D85D44B0692E2037EA4C57A94B00D70F1A01CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d7:5b:e0:6b:c2:25:fd:b1:67:87:24:3d:d7:
                    47:af:11:e5:02:eb:61:ab:39:e6:c0:9b:d6:bf:76:
                    65:ae:dd:6b:10:de:95:1f:70:6a:22:08:32:7d:ef:
                    a2:3a:38:0d:3c:65:17:5b:ff:17:5e:6b:c5:26:05:
                    90:79:80:47:a2:44:ef:c3:63:84:5f:be:23:c7:c3:
                    96:c9:9c:20:2f:cf:29:8b:03:d0:aa:83:b1:2a:92:
                    94:5e:0c:cf:23:d7:6b:8e:c9:5c:a2:20:d9:cb:40:
                    98:ce:a1:6f:51:91:19:c5:93:5d:d8:b9:80:e2:ad:
                    f6:5f:2c:52:d3:f3:9d:7d:47:e9:1a:dc:f4:a9:3a:
                    4b:ab:f8:33:f9:3a:a6:8e:23:46:9f:1d:af:2d:1f:
                    a0:ce:d0:a7:e3:61:2e:69:e1:be:84:56:75:42:ca:
                    ee:4b:77:6c:41:7e:58:dc:bd:f4:95:a0:1c:22:cf:
                    77:b2:86:4a:83:7b:ec:82:95:48:15:7c:cf:56:83:
                    dc:93:54:3c:72:c2:aa:9c:01:99:3c:cd:c8:2e:3f:
                    44:09:d4:ca:e1:01:0c:c1:6e:11:ef:8c:d9:f2:12:
                    cd:8a:f8:d0:12:21:6f:dc:9b:b8:ee:ea:ed:04:77:
                    41:00:c5:91:47:c0:fd:48:b1:70:31:ae:30:e4:92:
                    9f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D8:5D:44:B0:69:2E:20:37:EA:4C:57:A9:4B:00:D7:0F:1A:01:CC
            X509v3 Authority Key Identifier:
                keyid:91:A4:05:ED:F6:3A:9F:29:58:C6:B3:66:62:A6:B3:CE:F4:76:A8:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91A405EDF63A9F2958C6B36662A6B3CEF476A89D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65BCAF86490DE69A6BD6C41D86A84F0C8B0DACD9C7587D9663DE98A60A368D10/0/3133382e3235352e38392e302f32342d3234203d3e203439383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:0a:ae:43:44:22:6e:59:8e:f0:d2:57:53:34:77:76:91:aa:
         82:af:74:8e:07:66:f3:97:d8:ea:45:62:7e:4c:c1:09:8f:b3:
         24:1d:3b:aa:93:07:44:c6:63:51:bc:9f:35:f2:75:57:c4:b8:
         67:d1:dd:05:0e:a3:d4:05:87:5f:10:88:76:68:78:f1:c9:37:
         f4:1c:c8:c8:a7:c5:2c:7d:04:df:86:f3:62:f3:57:58:26:a1:
         66:9c:ec:fe:a9:0d:e1:57:cf:30:94:df:39:70:d0:78:a4:d9:
         58:d9:41:44:8b:a3:94:f9:0a:1a:a5:28:ae:95:15:ff:2c:64:
         89:dd:20:43:df:12:85:8b:3a:fe:d3:50:50:71:e8:0c:f0:f1:
         d8:6c:ac:d8:e1:8b:d6:c8:fd:9d:fb:e6:26:6d:4a:5f:20:1c:
         8f:24:e6:06:e3:c0:e7:4f:c7:ac:12:99:6d:ef:ae:41:fb:a5:
         30:50:50:1d:5f:30:de:8b:14:8c:fa:10:fb:c0:5a:d0:67:d7:
         65:b3:00:a8:11:22:59:62:aa:1c:ff:15:64:87:0f:6a:b5:51:
         c7:82:39:2f:7c:8d:c3:64:13:54:58:61:8a:d4:ba:33:3c:06:
         12:ad:47:65:ab:ac:fe:f8:bd:16:0c:ef:10:ee:3e:81:54:43:
         fb:5f:62:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:58 2024 by rpki-client on console-ams.rpki-client.org