Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232382e302f32322d3234203d3e20323633373832.roa
File:                     3133382e3132312e3232382e302f32322d3234203d3e20323633373832.roa (raw, json)
Hash identifier:          EZftwkte+Q8kCCQyqGYIoUM1N5ab+rKV56gJiIiyGgA=
Subject key identifier:   ED:A8:43:D9:17:B6:CE:F2:48:D8:7D:4A:05:5B:43:5F:C7:E4:10:F5
Certificate issuer:       /CN=9546A908853C34D10445938EC0A727E092D120C7
Certificate serial:       4F0F18A66BA524E26D7F3CCAB3CA229DF242EF50
Authority key identifier: 95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232382e302f32322d3234203d3e20323633373832.roa
Signing time:             Tue 05 Mar 2024 17:40:56 +0000
ROA not before:           Tue 05 Mar 2024 17:35:56 +0000
ROA not after:            Tue 04 Mar 2025 17:40:56 +0000
asID:                     263782
IP address blocks:        138.121.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0f:18:a6:6b:a5:24:e2:6d:7f:3c:ca:b3:ca:22:9d:f2:42:ef:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9546A908853C34D10445938EC0A727E092D120C7
        Validity
            Not Before: Mar  5 17:35:56 2024 GMT
            Not After : Mar  4 17:40:56 2025 GMT
        Subject: CN=EDA843D917B6CEF248D87D4A055B435FC7E410F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b5:6d:00:60:c8:15:b6:dc:0c:c9:c3:1f:33:
                    b0:ca:0d:9e:9a:ec:be:d6:ec:0b:40:ab:f3:7c:25:
                    c1:65:f0:7e:ae:ea:2e:d7:1a:62:13:68:27:8d:3c:
                    8b:b0:fa:25:8d:fa:f5:79:ce:5e:b0:1e:86:e1:09:
                    52:0e:5e:45:51:80:a4:53:ed:e8:e9:15:6b:84:2b:
                    07:15:62:6f:f4:4b:51:ed:51:3d:3b:c3:b5:18:a9:
                    c2:15:6b:05:b3:24:9b:15:44:ee:5d:16:34:a3:1c:
                    ca:20:19:f1:90:d2:1c:26:0b:bb:75:e0:bc:93:b5:
                    b1:c1:af:33:99:ee:77:6b:8b:76:fc:17:4c:d0:62:
                    20:69:bf:2c:c1:13:48:28:2e:20:02:70:6f:51:e3:
                    a7:92:bd:93:3c:c0:37:c8:f9:1c:1c:0d:7c:f2:ab:
                    24:6c:4c:eb:cb:f0:ca:15:a7:1f:b7:e5:2b:0f:ef:
                    1d:2c:2c:52:b5:24:59:7a:bc:18:d8:51:ab:9e:53:
                    71:3d:e4:b7:ab:a8:6b:7a:c1:c5:1b:b2:a8:77:d9:
                    95:5e:e4:38:7c:91:cb:90:ce:82:1b:f8:a7:bb:5f:
                    e9:44:fb:e6:3f:95:49:af:0d:51:93:c9:fb:c2:41:
                    76:d9:20:0f:05:8c:92:0a:94:c3:09:05:13:f8:6d:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A8:43:D9:17:B6:CE:F2:48:D8:7D:4A:05:5B:43:5F:C7:E4:10:F5
            X509v3 Authority Key Identifier:
                keyid:95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232382e302f32322d3234203d3e20323633373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:0b:81:00:ea:ff:14:99:0b:5a:a6:e9:31:02:e5:a4:42:f3:
         10:85:33:2f:7e:1a:a0:a4:17:fb:a4:17:b1:7e:01:43:21:2f:
         d3:2f:0a:80:22:23:fc:f1:51:16:3f:9c:ab:fc:ca:98:cf:02:
         68:86:7f:49:1c:54:23:ca:bd:f3:f7:80:35:79:0d:9c:1c:24:
         c1:02:d5:c8:79:29:b9:7d:04:be:9f:8a:2a:0c:21:ce:ce:d7:
         79:21:a1:c0:50:64:0a:f4:bd:7f:20:a3:9a:c3:e0:92:90:bd:
         08:d0:73:93:3a:d1:69:59:82:f0:94:5d:7a:97:98:b7:68:68:
         60:e8:fc:78:47:70:ec:5c:8e:c3:e9:ae:b2:6d:39:9f:3b:fb:
         3f:0f:7b:98:81:a5:c3:0d:ee:56:22:98:fd:ab:41:34:66:e6:
         c7:0b:1f:b2:44:0a:f7:90:96:4b:de:71:67:2f:6f:f1:43:94:
         63:78:33:44:93:76:63:16:23:8d:b7:db:ae:1a:ef:74:2b:c8:
         01:9c:9f:b1:eb:95:64:7c:cf:69:3b:4a:87:e6:35:b9:d4:d5:
         4d:e6:5c:91:e5:8f:84:b1:e2:20:64:14:10:1a:1d:17:67:6f:
         65:ff:60:f5:16:17:96:00:7e:0e:39:30:04:a4:df:08:70:e6:
         77:15:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:57:46 2024 by rpki-client on console-ams.rpki-client.org