Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234372e302f32342d3234203d3e203238333137.roa
File:                     3133382e3132322e3234372e302f32342d3234203d3e203238333137.roa (raw, json)
Hash identifier:          dnWgXfENLc5Xz0YmjC+or7HfGMDnqsGgJPE9W67p33Q=
Subject key identifier:   51:B9:49:97:01:B0:D9:46:C0:62:A9:E4:34:85:C5:14:C6:96:4A:E1
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       274A82FA8C69931ABB7F9F92EC23301ABA7FD0F5
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234372e302f32342d3234203d3e203238333137.roa
Signing time:             Fri 13 Sep 2024 03:45:00 +0000
ROA not before:           Fri 13 Sep 2024 03:40:00 +0000
ROA not after:            Fri 12 Sep 2025 03:45:00 +0000
asID:                     28317
IP address blocks:        138.122.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4a:82:fa:8c:69:93:1a:bb:7f:9f:92:ec:23:30:1a:ba:7f:d0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Sep 13 03:40:00 2024 GMT
            Not After : Sep 12 03:45:00 2025 GMT
        Subject: CN=51B9499701B0D946C062A9E43485C514C6964AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:8f:b2:82:5b:f3:cd:05:96:fb:3c:42:a7:
                    a3:1c:33:7d:94:34:f6:13:ae:10:44:ef:95:52:c6:
                    19:44:d3:38:73:12:2a:32:4e:ba:a9:4f:e8:e0:fd:
                    1a:2a:45:0e:63:36:97:f1:5c:df:6a:c4:2e:9d:b8:
                    6e:6c:d9:bb:48:1f:b8:20:02:7b:26:0f:33:4a:29:
                    f8:8c:7d:79:25:b2:c4:ce:8e:f8:77:48:e1:8a:71:
                    cb:d9:46:57:2b:e5:13:76:fd:2f:d7:4e:bf:80:04:
                    d5:39:0a:35:88:8d:ec:13:75:bf:ef:7c:2d:67:85:
                    35:12:80:6a:2c:95:8b:82:86:f7:d8:93:2e:9c:0f:
                    66:2f:64:1f:64:39:ed:58:ec:38:3f:f2:b5:92:95:
                    c9:0f:f9:eb:4f:58:ce:46:30:6b:3d:35:6a:3d:d2:
                    dd:c5:2c:e3:da:79:8e:29:ae:ee:8b:c4:b5:1f:72:
                    83:bf:82:cd:b8:f0:26:3d:c2:44:a5:79:7b:04:52:
                    fe:52:4c:62:77:79:c6:15:6c:3a:a6:a3:61:ce:1f:
                    cc:27:0d:06:d2:d7:88:ec:0b:fe:77:f9:b0:fe:b4:
                    3d:e1:e5:16:a9:f8:4e:81:e9:88:23:0c:a2:31:2a:
                    e6:75:e6:95:6f:44:12:bb:04:74:1a:f2:57:65:36:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B9:49:97:01:B0:D9:46:C0:62:A9:E4:34:85:C5:14:C6:96:4A:E1
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234372e302f32342d3234203d3e203238333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:24:3e:b7:56:6d:f4:fe:7c:65:c5:74:87:48:ee:17:11:77:
         a1:9a:26:de:5e:1b:df:f4:e7:47:fe:ad:db:41:39:4c:f3:09:
         db:c4:09:f9:79:20:34:49:0d:77:86:08:4a:f5:5c:1e:6f:1b:
         a7:9c:74:23:2b:47:55:53:41:02:e5:29:49:e1:bc:2e:06:06:
         df:f2:87:eb:53:dd:d7:46:a3:55:1c:b4:d6:5a:8e:e2:2c:53:
         b6:0a:f1:7d:81:74:0c:db:34:2d:81:1f:4a:fe:58:5d:51:f9:
         e8:df:3e:c9:32:2e:d8:f5:14:d5:e6:cf:e1:cf:dd:57:36:9c:
         8a:6b:ef:90:37:dd:b6:f2:b4:ae:ce:bb:e4:41:d5:9d:ed:42:
         c4:98:14:19:9f:6e:01:14:10:ce:69:b5:33:f8:68:e8:2b:ea:
         ea:0b:af:59:ed:28:24:48:04:dc:ce:4d:90:70:eb:70:c3:dd:
         58:9e:43:a7:14:d7:fc:64:eb:45:1b:33:d6:c3:f7:a9:b9:b0:
         57:93:76:78:87:94:d5:9b:c3:2b:8d:07:be:47:cf:72:47:9c:
         0f:8e:8b:6e:79:41:76:be:4b:a3:8c:09:77:30:03:24:6d:af:
         1c:5d:0f:eb:d3:fb:00:32:41:00:40:ef:1a:45:75:14:43:39:
         df:3a:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 14:38:30 2024 by rpki-client on console-ams.rpki-client.org