Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3133382e35392e36342e302f32322d3234203d3e203232343131.roa
File:                     3133382e35392e36342e302f32322d3234203d3e203232343131.roa (raw, json)
Hash identifier:          YXnNnea0NuPkZNCdh+NlGvEbLQRZ2nKoWAuaIvEYg+Y=
Subject key identifier:   10:CD:B7:28:03:8F:02:2D:52:F7:C1:B1:DA:48:A4:3B:20:43:2B:6D
Certificate issuer:       /CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
Certificate serial:       411A7C2DA6E46B3F5CD84DF5353E078D1CEA6E19
Authority key identifier: AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3133382e35392e36342e302f32322d3234203d3e203232343131.roa
Signing time:             Tue 05 Mar 2024 17:53:11 +0000
ROA not before:           Tue 05 Mar 2024 17:48:11 +0000
ROA not after:            Tue 04 Mar 2025 17:53:11 +0000
asID:                     22411
IP address blocks:        138.59.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1a:7c:2d:a6:e4:6b:3f:5c:d8:4d:f5:35:3e:07:8d:1c:ea:6e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4A18D238F70FCA7608E0CF91F044302F886A78
        Validity
            Not Before: Mar  5 17:48:11 2024 GMT
            Not After : Mar  4 17:53:11 2025 GMT
        Subject: CN=10CDB728038F022D52F7C1B1DA48A43B20432B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:92:57:83:cb:ae:ac:be:93:84:5b:48:bd:
                    87:c8:63:9b:b8:3a:a9:e1:04:49:53:e3:0f:cb:49:
                    20:dd:60:df:bc:c7:a2:d9:14:1f:cf:b1:cf:16:91:
                    77:1b:20:e5:5d:c8:59:14:7b:f9:0a:17:28:d7:9c:
                    90:5b:66:de:1f:1b:6b:a8:3a:47:3b:49:b4:7c:bc:
                    6f:1a:b3:96:a3:9e:3c:5c:92:b8:ac:2e:88:de:b3:
                    97:8c:8e:f6:0d:8c:c2:4d:c1:47:24:7f:2e:21:65:
                    b2:d7:4d:ce:ed:15:f5:1c:dc:13:c3:b9:6e:f6:bf:
                    98:4a:ee:ea:be:83:d8:fc:95:e3:02:a7:f9:d0:c9:
                    f9:a4:5b:18:9a:d7:31:c5:1b:7f:2e:69:9f:43:45:
                    a1:d2:61:04:69:1c:94:59:f9:fd:44:e8:12:30:19:
                    a8:70:24:83:df:1d:07:59:7c:06:e3:e9:e7:d6:07:
                    cc:c9:94:05:e2:84:de:ab:7b:ff:8d:93:e2:c3:68:
                    3b:6b:81:97:60:a7:2b:57:46:79:0f:96:b2:38:20:
                    97:3f:09:de:7b:ad:77:70:ae:ed:e5:04:2e:8a:58:
                    95:a2:ed:fa:92:18:22:c2:84:e8:b4:c6:2b:7e:29:
                    ca:be:d6:e5:ed:e3:34:6c:4c:6c:5c:73:9f:27:0e:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CD:B7:28:03:8F:02:2D:52:F7:C1:B1:DA:48:A4:3B:20:43:2B:6D
            X509v3 Authority Key Identifier:
                keyid:AF:4A:18:D2:38:F7:0F:CA:76:08:E0:CF:91:F0:44:30:2F:88:6A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4A18D238F70FCA7608E0CF91F044302F886A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/816B2F7D66A633B3CE8C265EFB4DC6361F6813A3FC929333FDEBAD7EE166BBB3/0/3133382e35392e36342e302f32322d3234203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:a9:e9:ab:6c:48:50:d5:ae:6c:01:3d:48:7d:c0:55:59:18:
         cf:a0:5d:10:ac:95:23:82:32:67:6a:74:ac:1e:64:fc:15:b1:
         8b:6e:ef:3b:d6:27:36:cf:8b:35:c0:df:c4:7d:8e:04:f9:fa:
         f3:76:60:2d:75:42:eb:5a:0e:11:47:f0:cf:b6:bd:73:19:03:
         e2:a2:7d:05:5c:5f:fb:e7:5b:97:09:02:d7:cf:7d:2d:9a:43:
         ea:09:cf:6e:56:68:ce:01:a0:8f:29:ac:29:fc:0a:46:47:f6:
         b8:01:27:c5:37:33:8c:e6:0e:e5:52:e7:6e:ef:2d:6a:48:5b:
         42:b5:57:f6:73:58:5f:87:6a:87:03:52:df:a0:09:ff:29:23:
         f6:8f:bb:78:a3:b5:69:53:c9:78:76:8a:b6:f5:0a:9c:f4:e5:
         4d:75:68:c3:ca:97:b6:e1:f3:7d:22:e4:d5:6c:7f:d9:73:0a:
         82:a7:70:fd:b1:b0:97:18:e5:83:ec:bd:5d:1a:da:57:57:75:
         51:a7:b5:7f:e7:c5:36:91:05:df:a1:c9:8a:f0:fc:80:77:00:
         1d:b8:90:9c:ae:72:06:42:92:70:73:99:95:fc:5f:28:4a:92:
         4c:a0:6e:e9:0e:ff:0c:bb:e9:84:52:96:d8:57:46:d9:75:87:
         16:53:fc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:45 2024 by rpki-client on console-fra.rpki-client.org