Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138382e302f32322d3332203d3e20323633383031.roa
File:                     3133382e3132322e3138382e302f32322d3332203d3e20323633383031.roa (raw, json)
Hash identifier:          1UEqAB1Tf9gfSd962Fp7GVMzmri9FUc5BwVwx3Msxeo=
Subject key identifier:   17:19:3A:C5:5E:E2:12:20:80:B4:8D:93:63:74:67:A9:C4:96:98:4F
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       46E53EB82479321236C20BCE8552D3E919AF10A0
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138382e302f32322d3332203d3e20323633383031.roa
Signing time:             Tue 05 Mar 2024 17:48:46 +0000
ROA not before:           Tue 05 Mar 2024 17:43:46 +0000
ROA not after:            Tue 04 Mar 2025 17:48:46 +0000
asID:                     263801
IP address blocks:        138.122.188.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e5:3e:b8:24:79:32:12:36:c2:0b:ce:85:52:d3:e9:19:af:10:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: Mar  5 17:43:46 2024 GMT
            Not After : Mar  4 17:48:46 2025 GMT
        Subject: CN=17193AC55EE2122080B48D93637467A9C496984F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:b0:32:f4:0d:21:fb:b2:4f:d1:6d:59:3b:
                    50:29:31:c5:c4:9e:06:de:14:a2:d3:7c:b2:0b:ca:
                    35:7f:37:50:59:e1:94:aa:b5:09:62:2a:ee:35:d2:
                    11:7e:9b:ec:81:a2:db:98:dd:ac:f4:dc:0a:ef:02:
                    10:fd:d1:ce:f5:9f:98:fd:db:d7:c0:82:6b:7f:71:
                    a2:27:ef:b3:20:0f:ad:7c:c5:c2:24:cd:8a:1e:7f:
                    ce:36:a3:1f:0c:be:4f:ff:db:2d:5d:ac:e3:34:53:
                    10:10:85:57:cd:9c:28:25:8c:1b:34:20:f8:8d:e1:
                    4c:5e:fe:19:4a:cc:29:56:b0:37:76:2f:30:d6:21:
                    eb:c0:12:dd:49:d2:75:00:60:1c:24:d1:aa:15:40:
                    8c:ea:0b:a4:20:c9:39:49:b5:18:cc:6d:01:d1:9c:
                    c4:ef:24:2a:22:c6:6a:42:5b:2a:cf:ad:9e:02:be:
                    00:b3:af:2c:1a:47:bb:25:4e:b4:a8:a4:39:c0:89:
                    bf:17:25:87:75:f7:0a:1b:d7:36:61:df:c7:f9:8e:
                    f9:f5:4a:40:4e:21:9a:e1:8a:e0:bf:6b:66:4b:d7:
                    bc:0e:a8:a8:84:33:44:24:86:78:58:7f:a3:db:3d:
                    62:58:06:11:de:51:4d:c9:d3:97:ec:2c:be:29:57:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:19:3A:C5:5E:E2:12:20:80:B4:8D:93:63:74:67:A9:C4:96:98:4F
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138382e302f32322d3332203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:70:9d:7b:cd:01:7d:58:f7:78:67:2c:56:a8:50:7c:59:a0:
         ce:ff:8a:59:05:61:2d:4f:86:e9:62:a5:28:af:fa:a4:e9:76:
         0c:4a:62:bf:62:b2:9c:d9:ec:fc:ea:09:33:9b:73:cf:32:2c:
         0d:8b:99:2a:7d:4f:b8:2d:7a:31:8d:9a:c3:6d:27:69:15:06:
         d1:c5:14:8d:02:2d:fd:a6:4f:ed:94:d7:85:48:11:aa:5f:10:
         0b:d8:35:e6:3a:12:21:32:6f:82:26:a0:43:ba:08:65:14:61:
         4d:7c:1c:9c:88:22:40:94:01:29:01:ad:99:ed:2e:70:e8:98:
         75:19:03:fc:8c:c0:02:fb:de:71:ae:66:37:b9:5e:b2:23:cd:
         9e:23:01:7c:11:7b:f5:3c:95:48:b4:b2:a7:6f:71:fa:e8:52:
         f2:49:24:83:ec:b2:9d:92:8f:95:70:c0:60:a8:65:1b:d3:a8:
         a2:5e:70:90:80:f7:d9:e4:62:5f:5b:33:37:89:b2:17:ff:d4:
         28:39:e1:3d:d5:26:91:85:9c:f5:28:d7:d7:1a:21:6d:b9:97:
         25:60:fb:dd:34:d0:3f:0c:78:60:4a:44:34:f8:f3:54:1a:0e:
         ba:47:55:3d:f9:bc:31:4d:6d:d6:63:20:4e:df:3b:8f:bb:8c:
         55:81:d3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:05 2024 by rpki-client on console-fra.rpki-client.org