Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0A0E821409076A60CBB76A1900873939C0D2EBD13D4EAAC347A76C836977FF/0/3133382e3131372e3131322e302f32322d3234203d3e203137303639.roa
File:                     3133382e3131372e3131322e302f32322d3234203d3e203137303639.roa (raw, json)
Hash identifier:          Upe+tgraimKpG0YXSBmflVqjLYPcDiUc9eSuY0VYXhs=
Subject key identifier:   EE:FA:4B:59:6C:01:1A:61:66:95:C7:71:21:7E:69:E2:17:CF:FC:96
Certificate issuer:       /CN=A3B4B158F565B81141335DC3FCCFC3D7183C1CDC
Certificate serial:       10EB83C554F227E7FC97A4947BC627EDF5CFAED4
Authority key identifier: A3:B4:B1:58:F5:65:B8:11:41:33:5D:C3:FC:CF:C3:D7:18:3C:1C:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3B4B158F565B81141335DC3FCCFC3D7183C1CDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0A0E821409076A60CBB76A1900873939C0D2EBD13D4EAAC347A76C836977FF/0/3133382e3131372e3131322e302f32322d3234203d3e203137303639.roa
Signing time:             Tue 05 Mar 2024 18:15:59 +0000
ROA not before:           Tue 05 Mar 2024 18:10:59 +0000
ROA not after:            Tue 04 Mar 2025 18:15:59 +0000
asID:                     17069
IP address blocks:        138.117.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0A0E821409076A60CBB76A1900873939C0D2EBD13D4EAAC347A76C836977FF/0/A3B4B158F565B81141335DC3FCCFC3D7183C1CDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0A0E821409076A60CBB76A1900873939C0D2EBD13D4EAAC347A76C836977FF/0/A3B4B158F565B81141335DC3FCCFC3D7183C1CDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3B4B158F565B81141335DC3FCCFC3D7183C1CDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:eb:83:c5:54:f2:27:e7:fc:97:a4:94:7b:c6:27:ed:f5:cf:ae:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3B4B158F565B81141335DC3FCCFC3D7183C1CDC
        Validity
            Not Before: Mar  5 18:10:59 2024 GMT
            Not After : Mar  4 18:15:59 2025 GMT
        Subject: CN=EEFA4B596C011A616695C771217E69E217CFFC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c0:ac:41:1c:51:55:8b:88:b2:97:92:0c:a7:
                    24:d3:c6:a6:71:22:41:1a:1a:b2:52:86:a6:b4:02:
                    1f:33:c1:29:5d:10:fb:88:b4:3d:1d:9b:97:02:12:
                    7d:d9:11:75:ea:af:e1:1c:0e:f1:73:07:49:cb:6a:
                    d6:21:0e:96:d6:45:75:fd:31:7a:57:9e:82:1b:19:
                    ba:b7:fd:ee:29:f1:1b:e4:56:c1:49:2a:19:e1:6c:
                    f1:e5:3f:2f:e4:9b:d5:a4:a8:93:82:4e:e6:0d:00:
                    6d:bb:c8:c8:f4:2e:26:b9:9f:cd:f4:0f:bb:2b:96:
                    8e:f4:ab:d5:2f:9d:24:c6:fd:4a:ac:7d:76:ac:cf:
                    a8:e1:cc:50:33:f3:11:f7:d6:95:b0:2d:bd:70:6a:
                    4b:0c:9d:2b:72:a4:17:c3:3f:90:cf:42:99:6d:55:
                    cc:c7:f9:98:60:90:ea:a0:2c:30:c8:e8:28:0b:fe:
                    10:58:44:7d:d1:69:6a:0d:5b:54:07:e3:b6:c2:24:
                    1f:1c:2a:87:7e:df:f7:77:56:81:a1:ff:50:28:d4:
                    96:6e:30:2d:0a:95:26:27:a6:4e:72:ba:e7:f4:5b:
                    61:8f:e6:93:88:03:8d:58:57:60:21:92:63:dd:ca:
                    72:4b:dd:10:34:f7:f2:3f:54:ca:5b:47:e6:ed:0b:
                    ab:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FA:4B:59:6C:01:1A:61:66:95:C7:71:21:7E:69:E2:17:CF:FC:96
            X509v3 Authority Key Identifier:
                keyid:A3:B4:B1:58:F5:65:B8:11:41:33:5D:C3:FC:CF:C3:D7:18:3C:1C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0A0E821409076A60CBB76A1900873939C0D2EBD13D4EAAC347A76C836977FF/0/A3B4B158F565B81141335DC3FCCFC3D7183C1CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3B4B158F565B81141335DC3FCCFC3D7183C1CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0A0E821409076A60CBB76A1900873939C0D2EBD13D4EAAC347A76C836977FF/0/3133382e3131372e3131322e302f32322d3234203d3e203137303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:dd:50:9a:46:09:87:4c:75:97:7f:24:19:f9:98:fe:b3:dc:
         e1:0d:d0:e3:29:e8:c7:f4:45:0f:f0:8c:13:77:e0:00:55:92:
         93:f1:f0:9e:dc:ea:95:5c:03:d1:b8:b7:38:89:32:b7:1f:14:
         cb:43:3b:5b:4e:ff:18:1b:da:97:95:66:44:a2:bc:21:bf:8f:
         63:b8:3a:e5:0f:b8:20:99:98:9e:e6:4b:ee:70:81:02:67:ac:
         ec:c9:d8:98:98:c0:30:d4:89:02:fc:5e:71:17:aa:d9:f8:9a:
         f5:e8:2b:67:bb:3c:b6:a9:7b:9f:69:01:da:2f:ba:86:04:0c:
         11:f2:ed:9a:52:4b:0a:07:cb:27:91:c2:c2:d8:4b:69:da:09:
         74:03:3d:10:04:d2:1c:0d:0a:fb:f9:f7:76:b0:06:3e:f8:17:
         df:3c:22:37:67:20:f0:88:cc:02:8d:16:11:e6:33:e9:05:d7:
         da:b0:d4:24:6b:a6:db:a5:8d:69:43:78:b9:67:12:93:8f:90:
         74:ab:7c:47:da:ec:28:3a:d0:ac:be:be:5c:b8:86:54:48:40:
         9c:73:ac:f8:cc:07:ce:33:bc:1b:03:2d:37:14:16:11:ce:1b:
         2b:55:70:72:44:f7:24:6c:50:04:81:ae:f6:96:2e:f6:2a:40:
         1b:9f:d8:f1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEOuDxVTyJ+f8l6SUe8Yn7fXPrtQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTNCNEIxNThGNTY1QjgxMTQxMzM1REMzRkNDRkMzRDcx
ODNDMUNEQzAeFw0yNDAzMDUxODEwNTlaFw0yNTAzMDQxODE1NTlaMDMxMTAvBgNV
BAMTKEVFRkE0QjU5NkMwMTFBNjE2Njk1Qzc3MTIxN0U2OUUyMTdDRkZDOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfwKxBHFFVi4iyl5IMpyTTxqZx
IkEaGrJShqa0Ah8zwSldEPuItD0dm5cCEn3ZEXXqr+EcDvFzB0nLatYhDpbWRXX9
MXpXnoIbGbq3/e4p8RvkVsFJKhnhbPHlPy/km9WkqJOCTuYNAG27yMj0Lia5n830
D7srlo70q9UvnSTG/UqsfXasz6jhzFAz8xH31pWwLb1waksMnStypBfDP5DPQplt
VczH+ZhgkOqgLDDI6CgL/hBYRH3RaWoNW1QH47bCJB8cKod+3/d3VoGh/1Ao1JZu
MC0KlSYnpk5yuuf0W2GP5pOIA41YV2AhkmPdynJL3RA09/I/VMpbR+btC6vTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7vpLWWwBGmFmlcdxIX5p4hfP/JYwHwYDVR0j
BBgwFoAUo7SxWPVluBFBM13D/M/D1xg8HNwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTBBMEU4MjE0MDkwNzZBNjBDQkI3NkExOTAwODczOTM5
QzBEMkVCRDEzRDRFQUFDMzQ3QTc2QzgzNjk3N0ZGLzAvQTNCNEIxNThGNTY1Qjgx
MTQxMzM1REMzRkNDRkMzRDcxODNDMUNEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BM0I0QjE1OEY1NjVCODExNDEz
MzVEQzNGQ0NGQzNENzE4M0MxQ0RDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0UwQTBFODIxNDA5MDc2QTYwQ0JCNzZBMTkwMDg3MzkzOUMwRDJFQkQx
M0Q0RUFBQzM0N0E3NkM4MzY5NzdGRi8wLzMxMzMzODJlMzEzMTM3MmUzMTMxMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM3MzAzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCinVw
MA0GCSqGSIb3DQEBCwUAA4IBAQA93VCaRgmHTHWXfyQZ+Zj+s9zhDdDjKejH9EUP
8IwTd+AAVZKT8fCe3OqVXAPRuLc4iTK3HxTLQztbTv8YG9qXlWZEorwhv49juDrl
D7ggmZie5kvucIECZ6zsydiYmMAw1IkC/F5xF6rZ+Jr16Ctnuzy2qXufaQHaL7qG
BAwR8u2aUksKB8snkcLC2Etp2gl0Az0QBNIcDQr7+fd2sAY++BffPCI3ZyDwiMwC
jRYR5jPpBdfasNQka6bbpY1pQ3i5ZxKTj5B0q3xH2uwoOtCsvr5cuIZUSECcc6z4
zAfOM7wbAy03FBYRzhsrVXByRPckbFAEga72li72KkAbn9jx
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org