Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133382e35392e3137362e302f32322d3234203d3e20323633363836.roa
File:                     3133382e35392e3137362e302f32322d3234203d3e20323633363836.roa (raw, json)
Hash identifier:          veRal89wuuFK07IEjMjsG9ZLMahrcQshCNQdaeBxVS8=
Subject key identifier:   FC:17:D9:56:B4:53:08:7A:64:50:A4:53:EA:2F:FD:68:91:04:98:39
Certificate issuer:       /CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
Certificate serial:       500B5ABAD0E6442A71B7491643AB5DFFE024B5BE
Authority key identifier: 15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133382e35392e3137362e302f32322d3234203d3e20323633363836.roa
Signing time:             Tue 05 Mar 2024 18:02:16 +0000
ROA not before:           Tue 05 Mar 2024 17:57:16 +0000
ROA not after:            Tue 04 Mar 2025 18:02:16 +0000
asID:                     263686
IP address blocks:        138.59.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0b:5a:ba:d0:e6:44:2a:71:b7:49:16:43:ab:5d:ff:e0:24:b5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
        Validity
            Not Before: Mar  5 17:57:16 2024 GMT
            Not After : Mar  4 18:02:16 2025 GMT
        Subject: CN=FC17D956B453087A6450A453EA2FFD6891049839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:d2:15:d5:3e:e4:79:50:d9:f9:9e:8b:ab:
                    9e:ea:92:82:77:1d:ee:50:e1:3f:14:a2:0a:21:4e:
                    c1:95:07:f7:67:13:9f:16:ee:1d:3d:4e:28:f9:a7:
                    c2:25:f7:17:86:83:be:d5:7f:a3:8f:6f:97:73:0b:
                    de:45:09:b9:ff:d5:7f:20:fa:fa:29:ed:d9:16:e0:
                    13:6d:f6:4c:98:11:8d:0b:72:32:8b:b8:c3:ac:f8:
                    f0:13:fc:ba:fd:32:35:52:23:77:1b:19:32:96:3f:
                    8a:f7:69:1c:b3:a5:ce:45:b6:7c:45:4b:a6:f5:c7:
                    21:ce:ef:de:05:5e:72:43:45:56:9b:cc:d5:32:40:
                    26:ec:92:f3:44:85:7b:29:98:b4:b3:c6:e1:ce:41:
                    b8:a0:ff:c6:60:b6:2d:07:a2:4a:8a:5e:76:88:ef:
                    2b:db:bc:54:18:e6:ac:04:2c:50:ea:a4:85:cd:16:
                    60:0e:fd:c6:5b:3c:40:71:49:e5:57:68:5f:f2:c7:
                    3c:a2:14:8c:ff:38:fc:88:0d:a7:70:f0:5c:a9:b0:
                    cc:1b:4f:33:09:54:d0:6b:bb:05:30:15:16:a5:f9:
                    79:57:42:d2:1e:3d:7f:ef:74:c4:c7:c0:8e:7f:6c:
                    99:5e:04:ab:07:4f:86:19:dc:ea:62:16:ec:42:af:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:D9:56:B4:53:08:7A:64:50:A4:53:EA:2F:FD:68:91:04:98:39
            X509v3 Authority Key Identifier:
                keyid:15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133382e35392e3137362e302f32322d3234203d3e20323633363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:a1:81:0c:77:f6:93:c5:19:9f:3e:c7:56:4f:3b:4c:26:7b:
         79:b7:bf:f1:e0:77:d5:2d:71:ba:2d:f5:f9:11:2e:73:2e:ae:
         df:06:8d:dc:e6:ad:26:57:f7:00:71:4e:e1:de:6c:06:a3:09:
         91:85:45:84:35:87:ec:82:0c:ba:ae:1f:5a:ff:95:ed:c0:3c:
         e8:d7:a2:eb:a9:68:21:02:be:b5:3f:52:bf:b2:cf:ca:87:a2:
         0a:92:6c:cd:88:9c:2d:e3:b7:a0:51:e3:a0:3c:24:58:6a:e9:
         b4:52:d7:ac:79:e0:c9:01:a1:ea:e9:23:72:f2:37:a6:68:d7:
         b5:44:a8:2a:52:bc:33:82:f7:e0:f4:d3:10:0d:bc:d0:a3:99:
         e5:9a:e3:cf:5a:88:b8:40:da:e3:0f:2a:2c:26:fe:cf:86:00:
         1e:71:bb:fc:4b:4a:5d:6e:e2:cd:cf:b0:dc:78:f7:2b:b7:78:
         81:4d:a1:13:76:8c:43:67:9d:d3:b3:85:f2:ba:ea:e9:20:67:
         ba:9c:38:6c:c5:b4:96:49:f0:df:25:73:dd:97:bc:91:52:de:
         f6:cd:6a:5f:ea:26:b4:e3:ea:e0:6a:f9:0f:1e:b9:51:69:69:
         c0:87:cd:cd:44:62:2d:ce:f9:e3:be:31:3c:20:92:64:a6:13:
         2a:57:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:54 2024 by rpki-client on console-ams.rpki-client.org