Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/3133382e3230342e3232382e302f32322d3234203d3e203631353036.roa
File:                     3133382e3230342e3232382e302f32322d3234203d3e203631353036.roa (raw, json)
Hash identifier:          C7jIBUuyItcDQoWZ9z4XodAjvqxw94oLEgCp9EhavlU=
Subject key identifier:   6C:BF:A1:74:33:EF:42:C4:49:3D:5F:F0:24:34:2F:5A:D4:3E:14:A4
Certificate issuer:       /CN=30293EE5309A01535DED2E8C83D8043CC3C407D5
Certificate serial:       5681639F36F49E37D2D7BC343C9F0D1708F7FF2D
Authority key identifier: 30:29:3E:E5:30:9A:01:53:5D:ED:2E:8C:83:D8:04:3C:C3:C4:07:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/3133382e3230342e3232382e302f32322d3234203d3e203631353036.roa
Signing time:             Tue 05 Mar 2024 18:03:19 +0000
ROA not before:           Tue 05 Mar 2024 17:58:19 +0000
ROA not after:            Tue 04 Mar 2025 18:03:19 +0000
asID:                     61506
IP address blocks:        138.204.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:81:63:9f:36:f4:9e:37:d2:d7:bc:34:3c:9f:0d:17:08:f7:ff:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30293EE5309A01535DED2E8C83D8043CC3C407D5
        Validity
            Not Before: Mar  5 17:58:19 2024 GMT
            Not After : Mar  4 18:03:19 2025 GMT
        Subject: CN=6CBFA17433EF42C4493D5FF024342F5AD43E14A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4d:57:ea:09:5b:9a:fa:8f:2f:94:5f:14:a5:
                    1d:49:4d:98:6d:da:d0:92:2f:a1:d6:7a:fd:8d:cd:
                    0d:f5:d7:f6:26:f8:72:32:2d:28:98:94:83:a8:87:
                    82:b5:e5:68:25:5c:a7:3e:93:5b:1e:7d:c6:c7:97:
                    41:24:e6:85:37:e0:23:69:d4:c7:54:cf:00:91:e2:
                    99:09:42:cc:a2:4d:f8:9d:69:e6:c6:5c:4c:34:41:
                    86:a6:82:ab:76:fa:60:8c:18:87:03:23:01:7f:76:
                    9a:cc:89:8f:c5:cc:b7:5d:55:47:a1:c6:e4:68:0f:
                    29:b7:fb:76:04:99:c7:4f:c2:88:59:d9:7d:d3:f6:
                    8f:64:91:53:a6:15:93:a0:fe:86:a3:53:a7:3f:80:
                    ac:41:d3:cc:44:30:95:69:36:7b:56:e0:c8:1f:bc:
                    54:d7:48:13:6d:27:0b:1c:7c:39:ff:3d:8c:57:dd:
                    be:68:1e:92:6d:f3:f8:2f:e6:6a:d7:1c:db:a5:ac:
                    a6:d2:50:92:0f:8e:83:45:7c:d0:fb:6e:7d:a1:92:
                    7f:09:e3:6b:ed:ef:a0:85:42:15:37:0d:e8:62:67:
                    c8:d2:2e:9c:43:23:67:52:cb:aa:b1:2f:08:e2:7a:
                    3b:6f:fa:fd:54:7b:a8:46:7e:e9:78:9f:5d:4c:8a:
                    32:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BF:A1:74:33:EF:42:C4:49:3D:5F:F0:24:34:2F:5A:D4:3E:14:A4
            X509v3 Authority Key Identifier:
                keyid:30:29:3E:E5:30:9A:01:53:5D:ED:2E:8C:83:D8:04:3C:C3:C4:07:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30293EE5309A01535DED2E8C83D8043CC3C407D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89718669D1CC436F537EF18104D833AB96D3C03F4AEBD949FE59B2A167707D1A/0/3133382e3230342e3232382e302f32322d3234203d3e203631353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:e7:cd:e5:3c:8b:8e:4e:02:92:a5:77:ce:89:73:12:ce:12:
         bd:39:f8:c4:93:3f:c8:cb:5c:6b:d0:2b:81:d0:d4:9e:5d:38:
         11:4c:9d:3e:04:c8:9a:62:78:6e:1c:59:24:aa:f4:31:4b:56:
         a6:8a:b3:e3:33:43:67:69:02:ad:2f:b1:14:ae:1d:3d:54:7c:
         47:01:d6:84:17:98:66:cf:14:b4:cb:e3:be:3c:2d:30:db:75:
         38:d1:f7:33:b8:44:37:65:c3:c4:fb:d7:00:e7:bf:4e:53:ce:
         ca:da:63:c0:c1:c9:f0:8e:9d:e4:f4:24:9a:d3:02:f3:1c:e1:
         ad:bd:45:a2:07:ed:ca:da:4a:c7:dc:cc:13:1d:19:6b:f9:54:
         b7:e2:c1:eb:f8:f0:2d:73:01:fa:9f:14:53:68:ef:9f:0b:01:
         ba:06:1f:db:39:6a:46:0a:6c:f0:70:87:1b:53:e4:09:6a:59:
         9c:2f:68:f9:54:94:3a:b0:03:61:ae:4a:23:84:1e:09:87:81:
         83:65:ea:4c:bf:fa:7f:37:1a:7c:41:9f:79:5b:4e:72:d1:49:
         21:e7:10:05:58:89:5e:b5:7d:18:bd:68:b5:7c:75:a4:85:9a:
         bf:42:80:41:93:5b:c6:17:01:d1:70:d9:8a:8c:51:71:9d:40:
         34:66:f7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:57:46 2024 by rpki-client on console-ams.rpki-client.org