Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132312e3134302e302f32322d3234203d3e203238333137.roa
File:                     3133382e3132312e3134302e302f32322d3234203d3e203238333137.roa (raw, json)
Hash identifier:          4UX1GylIsJJBdlzCB8bUnAQsKxVb/cqlQp9PLyYNdfs=
Subject key identifier:   29:3A:81:5E:95:8B:01:53:42:8C:1B:CE:C3:30:9A:61:96:3D:93:95
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       14B45EA2B6CE152FD9D6191C814E56A1AB1B2307
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132312e3134302e302f32322d3234203d3e203238333137.roa
Signing time:             Thu 07 Mar 2024 16:20:00 +0000
ROA not before:           Thu 07 Mar 2024 16:15:00 +0000
ROA not after:            Thu 06 Mar 2025 16:20:00 +0000
asID:                     28317
IP address blocks:        138.121.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b4:5e:a2:b6:ce:15:2f:d9:d6:19:1c:81:4e:56:a1:ab:1b:23:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Mar  7 16:15:00 2024 GMT
            Not After : Mar  6 16:20:00 2025 GMT
        Subject: CN=293A815E958B0153428C1BCEC3309A61963D9395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:22:17:c9:e6:b7:c8:5c:50:b2:c8:78:02:
                    c8:48:d6:87:ba:41:ea:bc:2c:e5:83:48:64:0b:d6:
                    ce:6e:59:c4:65:8e:dc:30:60:ed:3a:6b:89:c9:d6:
                    7f:b4:01:ee:f0:e1:1b:c4:86:e9:61:e7:b4:32:ad:
                    a0:87:d4:66:0d:1b:c5:ac:37:8f:ee:b9:1d:d4:07:
                    bf:38:45:52:5e:74:95:9d:2e:82:36:d2:78:7a:c3:
                    55:bc:0e:e4:ff:66:36:6a:0b:ac:57:3a:6e:ea:dd:
                    6c:16:b5:87:5b:f6:5c:37:9c:f9:45:17:72:25:3e:
                    6b:55:a3:68:2a:7c:23:4d:bf:0c:54:7c:3f:06:c8:
                    bd:df:57:7c:e5:fd:50:4e:9b:3e:d8:d0:82:ab:1d:
                    fc:f8:bb:ad:e1:e3:02:bc:c7:b3:37:ef:9c:f5:de:
                    8b:ef:3f:16:2c:22:56:13:97:e5:45:5c:81:0a:62:
                    8d:16:5f:cb:b9:18:1f:89:68:05:60:9a:d0:38:58:
                    ce:db:eb:75:0f:50:e1:69:1f:e6:fe:2d:46:8a:a0:
                    b9:e2:d2:00:99:9b:a4:a3:c4:21:e0:8d:c9:df:00:
                    d6:72:ca:bf:0c:d1:cf:18:b5:9e:00:7c:60:75:a7:
                    dc:b3:08:52:48:94:49:42:13:4d:7d:d0:20:4f:76:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3A:81:5E:95:8B:01:53:42:8C:1B:CE:C3:30:9A:61:96:3D:93:95
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132312e3134302e302f32322d3234203d3e203238333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:b9:e6:ef:d6:dc:15:32:e1:33:08:c0:52:d5:92:80:7b:8e:
         9e:c7:06:35:2a:e7:bf:91:e6:ac:3a:9d:62:5e:e7:de:8b:fe:
         7b:a2:21:2b:83:eb:ba:cb:54:1c:ac:0d:da:6a:6a:97:34:af:
         09:32:5a:34:4e:58:f2:af:b2:c4:1c:76:18:70:35:a1:ba:67:
         5f:86:2a:64:6c:c1:92:a7:81:40:fb:f7:57:95:b4:63:14:e9:
         6d:63:02:c2:32:87:31:9d:33:d7:99:82:45:1b:dc:7d:0a:6b:
         94:34:7b:06:a3:85:dd:db:2a:10:c9:1a:96:68:10:ea:72:6d:
         63:d2:9e:79:48:eb:5b:59:75:3f:6e:63:6a:9d:77:08:62:ce:
         f8:8e:74:e0:1a:e0:94:ba:53:da:4f:5b:e6:ee:a1:01:c6:c5:
         50:6f:3f:e1:9d:af:fb:e1:83:b5:3b:b6:53:00:fd:ac:10:7c:
         ff:ba:d3:ee:9f:8a:ae:7b:b4:f0:90:52:a4:93:4b:c7:12:6b:
         99:4c:36:21:f3:57:3b:a9:2a:eb:7c:7a:72:98:c1:e9:bb:54:
         07:19:26:cd:02:45:62:7c:be:dd:2d:8b:6d:79:46:51:da:dd:
         d2:90:ca:b1:3d:00:d8:14:47:03:e6:f7:02:8b:9c:8c:05:cb:
         b6:52:94:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org