Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/3133382e3230342e3135382e302f32332d3234203d3e20323635373938.roa
File:                     3133382e3230342e3135382e302f32332d3234203d3e20323635373938.roa (raw, json)
Hash identifier:          t4VcuUSwRAIHieg27REMlZubytINt/IaqUYKMiQ4DQo=
Subject key identifier:   CD:A1:9D:BB:58:59:E0:7D:FF:6A:26:4D:4D:FF:ED:F4:7B:B8:F5:A6
Certificate issuer:       /CN=6C13327D2AB4EDC82CA05B305855EF3EE3E609B1
Certificate serial:       046478C1338479A898CEF3ECD8C5E63BBB679ADA
Authority key identifier: 6C:13:32:7D:2A:B4:ED:C8:2C:A0:5B:30:58:55:EF:3E:E3:E6:09:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/3133382e3230342e3135382e302f32332d3234203d3e20323635373938.roa
Signing time:             Sat 08 Jun 2024 22:55:00 +0000
ROA not before:           Sat 08 Jun 2024 22:50:00 +0000
ROA not after:            Sat 07 Jun 2025 22:55:00 +0000
asID:                     265798
IP address blocks:        138.204.158.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:64:78:c1:33:84:79:a8:98:ce:f3:ec:d8:c5:e6:3b:bb:67:9a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C13327D2AB4EDC82CA05B305855EF3EE3E609B1
        Validity
            Not Before: Jun  8 22:50:00 2024 GMT
            Not After : Jun  7 22:55:00 2025 GMT
        Subject: CN=CDA19DBB5859E07DFF6A264D4DFFEDF47BB8F5A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:44:66:b8:2b:f9:12:05:84:97:cb:fd:3a:
                    ac:4c:46:f2:1e:30:4f:fa:27:e8:67:fa:2d:16:a0:
                    d2:fc:47:9b:31:28:f9:d5:2d:6f:8c:63:77:f8:b1:
                    b1:d1:bb:5f:ff:38:ec:bb:27:d7:87:83:fd:26:53:
                    9f:da:62:30:3c:47:1b:b7:49:d0:76:63:5e:25:80:
                    63:e8:ed:db:f0:dd:a6:32:73:a4:31:13:58:b7:5c:
                    25:b9:5e:80:d2:71:5c:b1:3d:a0:da:56:81:36:e2:
                    a2:49:49:23:ba:27:2d:66:d0:28:25:1c:d0:0e:67:
                    b1:eb:86:3a:8b:9b:73:29:bd:a2:9f:f3:42:0a:40:
                    d5:59:95:6f:8b:e1:16:4b:1f:3b:3f:a2:c1:ae:ff:
                    f5:b4:9c:e9:59:15:77:11:bd:48:3f:00:4d:52:41:
                    9d:1a:b8:6d:d3:42:cc:4e:0b:df:73:65:b8:57:5f:
                    c7:72:32:f3:63:d0:23:1a:9b:9b:03:2e:f1:47:6f:
                    89:22:36:d2:5a:6e:bc:26:70:46:6d:a8:2e:f0:0e:
                    88:93:af:6f:b9:3f:03:f1:64:71:43:95:9c:bb:7a:
                    bf:31:24:a0:59:d8:2c:18:47:60:3c:1b:ba:c8:22:
                    59:08:9d:02:7d:75:4c:73:05:1a:72:d6:06:0a:f1:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A1:9D:BB:58:59:E0:7D:FF:6A:26:4D:4D:FF:ED:F4:7B:B8:F5:A6
            X509v3 Authority Key Identifier:
                keyid:6C:13:32:7D:2A:B4:ED:C8:2C:A0:5B:30:58:55:EF:3E:E3:E6:09:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/3133382e3230342e3135382e302f32332d3234203d3e20323635373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:26:b1:ea:40:2b:35:73:4f:7a:7e:0e:67:55:15:97:4b:b6:
         f2:0c:25:23:d6:20:7a:a8:ec:3c:ed:b4:ea:38:7f:3b:26:8c:
         13:bf:5d:fe:0e:14:03:74:48:07:ad:3e:ac:3a:0b:2f:6f:a5:
         c2:04:09:b7:e3:ba:3f:53:f0:68:c1:b3:09:83:fb:06:c6:d7:
         dd:c2:04:14:c0:8e:49:74:dd:4d:dd:c5:04:cb:fe:f6:6b:42:
         84:48:e5:f9:26:3c:ba:b9:c8:1c:c9:f5:e6:0f:80:42:16:de:
         f0:39:9a:20:63:e9:6e:6f:5d:f8:8a:fd:3e:d6:20:0d:8b:59:
         62:1a:3a:11:4e:e5:10:99:21:51:5f:a2:4b:39:f4:bf:a7:03:
         73:f7:ac:ef:b8:a1:49:55:0d:54:b1:c2:26:fb:3e:04:a1:e5:
         da:a9:ae:1b:8a:6b:b6:e5:1e:40:4c:9b:d4:aa:69:4e:79:c3:
         59:d6:7d:51:c7:7f:9b:33:d8:9c:b1:4b:f4:b3:44:b3:77:5a:
         1d:73:9e:d8:1c:b4:f6:63:9a:d6:1c:e4:92:64:f4:81:c4:76:
         3f:91:c4:e5:3d:e8:3d:e4:cf:d4:ac:41:e9:25:8a:7b:29:ee:
         3b:64:6a:89:e2:e9:39:35:23:3c:a8:ee:8a:c9:fc:ea:85:87:
         7a:95:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org