Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3133382e3138352e37362e302f32322d3234203d3e20323633383234.roa
File:                     3133382e3138352e37362e302f32322d3234203d3e20323633383234.roa (raw, json)
Hash identifier:          Q49yIu6Ne3rxhJeTrezJc6Gdh/AsYDnlDNmppP09bUE=
Subject key identifier:   1B:22:2B:A7:40:4A:47:42:5D:07:32:22:45:23:FA:58:B5:1E:94:29
Certificate issuer:       /CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
Certificate serial:       48772D260885F3502CAB51912DFB0B4994851829
Authority key identifier: E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3133382e3138352e37362e302f32322d3234203d3e20323633383234.roa
Signing time:             Tue 05 Mar 2024 17:54:18 +0000
ROA not before:           Tue 05 Mar 2024 17:49:18 +0000
ROA not after:            Tue 04 Mar 2025 17:54:18 +0000
asID:                     263824
IP address blocks:        138.185.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl
                          rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:77:2d:26:08:85:f3:50:2c:ab:51:91:2d:fb:0b:49:94:85:18:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
        Validity
            Not Before: Mar  5 17:49:18 2024 GMT
            Not After : Mar  4 17:54:18 2025 GMT
        Subject: CN=1B222BA7404A47425D0732224523FA58B51E9429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:7c:9d:c1:de:b1:46:6e:43:3c:db:63:4d:
                    5e:9f:d9:5b:93:4f:14:c3:1b:25:14:39:fa:d5:ef:
                    33:40:06:b0:c9:93:1d:18:b7:ca:3e:4d:f8:10:3b:
                    ea:57:5b:3d:00:d4:e4:34:57:26:cf:e8:bd:b9:a6:
                    39:91:1b:7e:13:56:c8:95:13:f1:19:62:5b:2b:29:
                    a0:88:cf:cd:4e:fa:cf:c0:9d:42:6f:3f:41:9e:15:
                    fd:a0:57:88:9a:ec:d5:e5:45:38:f1:c6:2c:95:84:
                    8b:a7:e9:7e:07:3a:d2:4c:46:63:00:1e:e5:0e:46:
                    c4:d6:30:37:b2:08:62:09:d2:c6:32:27:1d:95:ed:
                    bb:bb:27:c8:be:b7:91:48:74:ec:34:f4:6a:00:f5:
                    5d:f9:f9:a7:05:21:ac:a8:e2:c0:ce:5a:92:39:15:
                    64:da:fc:5e:34:a1:b6:25:eb:3e:de:cc:85:40:ca:
                    f1:2e:25:88:12:74:0b:76:d5:a7:72:41:fd:40:08:
                    37:2f:a8:b0:58:1f:de:a3:09:e0:fe:ef:11:7f:d6:
                    21:82:dd:1a:ec:fa:38:6c:70:dc:3f:be:ce:3a:7f:
                    51:89:1d:a3:1d:72:ba:06:36:a8:b1:44:22:67:b7:
                    66:16:d2:89:1a:19:c6:6a:74:fe:ec:2e:78:15:4e:
                    45:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:22:2B:A7:40:4A:47:42:5D:07:32:22:45:23:FA:58:B5:1E:94:29
            X509v3 Authority Key Identifier:
                keyid:E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3133382e3138352e37362e302f32322d3234203d3e20323633383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:e8:33:ac:c8:37:70:3b:a0:8b:85:31:df:4b:89:8a:d6:
         3b:35:f2:e9:00:3b:32:35:ab:fd:1a:48:99:fd:d6:06:82:0a:
         78:7e:cb:a2:3f:f1:fc:2c:20:d0:f4:72:35:b9:bc:75:17:f2:
         82:93:4c:26:e0:a0:4d:25:94:51:95:bf:ff:cf:16:59:f6:16:
         52:08:44:e2:3b:6f:73:47:f5:8f:fc:34:18:25:a5:56:b0:43:
         03:4d:4f:8d:c4:aa:55:16:b0:58:b6:db:ea:97:87:1c:84:19:
         b5:7f:f1:49:0d:24:74:53:58:a1:0c:00:d9:1a:55:c3:a6:72:
         2a:4e:4e:10:89:da:00:0b:b9:b2:c7:4d:9b:84:e5:f6:f3:51:
         4d:5f:92:51:8f:37:72:68:3c:b0:2b:cd:ef:62:ef:5b:ac:da:
         1e:a8:2f:09:a1:38:e4:b1:dd:b2:7f:c4:a1:16:8e:4a:9d:4a:
         a2:b7:64:ba:b6:7b:10:3a:b0:ae:3b:fa:84:c2:06:0a:b8:56:
         62:30:00:ca:5c:6e:a2:03:f2:4f:05:a4:9b:1b:12:36:38:95:
         89:24:4b:b2:a7:ab:78:52:27:55:f2:e9:47:76:2b:30:6a:ff:
         95:b0:70:f8:26:4c:8b:cf:41:dc:8b:73:85:0c:96:15:12:0a:
         cf:96:1c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:00:07 2024 by rpki-client on console-ams.rpki-client.org