Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/3133382e302e382e302f32322d3234203d3e203532333439.roa
File:                     3133382e302e382e302f32322d3234203d3e203532333439.roa (raw, json)
Hash identifier:          u9VjYK9+WbjWgvYUXZm/gfl8Xg4lm1A75TfKg8rZjQw=
Subject key identifier:   22:19:69:41:A0:93:C6:65:7D:03:63:FB:CC:5C:44:7A:E1:EA:3C:DF
Certificate issuer:       /CN=43D716CDB565EBE33B24F995BFB74FBBE1493099
Certificate serial:       55937E0BE1D66CD6B9402B07829672CA751AF356
Authority key identifier: 43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/3133382e302e382e302f32322d3234203d3e203532333439.roa
Signing time:             Tue 05 Mar 2024 17:58:19 +0000
ROA not before:           Tue 05 Mar 2024 17:53:19 +0000
ROA not after:            Tue 04 Mar 2025 17:58:19 +0000
asID:                     52349
IP address blocks:        138.0.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:93:7e:0b:e1:d6:6c:d6:b9:40:2b:07:82:96:72:ca:75:1a:f3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43D716CDB565EBE33B24F995BFB74FBBE1493099
        Validity
            Not Before: Mar  5 17:53:19 2024 GMT
            Not After : Mar  4 17:58:19 2025 GMT
        Subject: CN=22196941A093C6657D0363FBCC5C447AE1EA3CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:08:e1:c4:f9:da:32:37:ed:53:b0:b9:10:
                    8d:21:33:15:a3:aa:31:96:e7:62:37:18:aa:1c:97:
                    a5:75:29:97:5d:d1:ad:b5:56:f7:5c:6b:2b:7d:e1:
                    f7:9d:da:93:8c:36:5b:7f:1f:c3:f1:b9:01:f9:cb:
                    6f:ae:62:e9:7e:99:e8:83:9b:9d:e8:d7:8a:f7:d5:
                    94:24:68:64:8a:60:1f:51:a9:1a:82:c2:3f:2d:72:
                    5e:33:3f:60:db:bd:19:7a:1f:07:ae:8a:26:eb:d7:
                    c2:e8:68:4d:9a:fe:73:b8:58:3c:56:20:68:cb:b2:
                    c0:36:1c:7d:ed:ac:69:16:a8:a5:6f:70:f1:e3:55:
                    2b:f0:d4:4a:85:1b:76:5e:b3:dc:78:83:9e:ad:2b:
                    fd:ec:bd:59:2c:b3:01:44:c6:75:e9:60:74:ba:65:
                    20:08:a1:23:9b:f7:69:9c:4c:e4:ed:36:99:38:fd:
                    34:5e:dd:e2:b7:16:a2:c5:b9:e1:df:d4:ff:1b:fb:
                    30:e9:a3:bc:68:67:20:84:d5:63:ff:ee:d8:9a:99:
                    0c:ae:d5:7e:2d:66:83:be:07:07:26:b7:3f:63:66:
                    6e:4b:59:32:5f:ca:bb:da:dc:e8:4e:ba:7f:b1:a1:
                    f6:ba:96:41:73:bb:0b:46:e9:9a:b1:eb:ee:cb:ac:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:19:69:41:A0:93:C6:65:7D:03:63:FB:CC:5C:44:7A:E1:EA:3C:DF
            X509v3 Authority Key Identifier:
                keyid:43:D7:16:CD:B5:65:EB:E3:3B:24:F9:95:BF:B7:4F:BB:E1:49:30:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43D716CDB565EBE33B24F995BFB74FBBE1493099.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87A28CCFB8685850BA979DC11D15952524A546CC96676DFB0A05AF8AAAA2BD7C/0/3133382e302e382e302f32322d3234203d3e203532333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:e6:fd:ce:d6:cb:c1:4c:3e:4b:b9:03:bf:21:6f:9b:a9:d3:
         92:e3:7b:7b:4f:ca:bc:22:d1:02:c5:2e:a4:5b:25:42:6c:03:
         fb:e0:91:59:32:d9:f6:ac:ac:53:19:be:85:d9:57:4c:b5:91:
         0d:ed:52:db:76:c0:a2:d2:ae:18:78:79:9c:c4:c5:3f:ef:e2:
         90:8e:10:37:9f:39:94:f9:84:c5:76:12:e8:f4:cf:0a:40:af:
         87:c5:56:d6:50:c3:ed:97:dd:e9:44:e1:77:de:73:e9:e2:55:
         f0:14:04:0c:ca:81:90:df:60:66:eb:3e:ec:f5:9f:9c:ca:c0:
         f2:e3:9e:60:1b:8f:0b:7e:7b:59:30:08:ce:43:6f:32:54:bc:
         de:c8:02:49:85:9e:f5:90:6c:52:18:80:2f:75:e5:de:84:01:
         87:5a:19:75:07:4d:cf:14:9b:30:54:78:c0:51:4f:a0:13:78:
         62:0b:9f:2e:e2:34:82:99:0c:36:c7:27:34:bd:cf:bb:19:08:
         4c:85:89:bd:dc:61:94:e2:a8:4e:bf:e6:5f:39:6c:ae:4b:85:
         65:40:e9:0d:e8:67:1e:be:51:7a:9d:5d:cf:05:bd:ac:34:45:
         a3:d5:6e:09:97:c9:e7:a4:a1:6e:12:c0:b6:d1:ee:f2:f1:5b:
         3f:95:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org