Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/3133382e3138362e3132302e302f32322d3234203d3e20323634363831.roa
File:                     3133382e3138362e3132302e302f32322d3234203d3e20323634363831.roa (raw, json)
Hash identifier:          yBU0USIhe74AawvtILhnm/iIR25UOsZ9ZpA5j26rv10=
Subject key identifier:   19:38:5A:4C:2A:B2:E7:50:5B:35:D6:AA:FE:F7:7C:BD:67:87:91:14
Certificate issuer:       /CN=68FDDBE1BF749D2FC48F59317C6389C8186C4613
Certificate serial:       7E692E46715D0A4FF22B6E5F2DE678DE54F306BB
Authority key identifier: 68:FD:DB:E1:BF:74:9D:2F:C4:8F:59:31:7C:63:89:C8:18:6C:46:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/3133382e3138362e3132302e302f32322d3234203d3e20323634363831.roa
Signing time:             Tue 05 Mar 2024 17:40:40 +0000
ROA not before:           Tue 05 Mar 2024 17:35:40 +0000
ROA not after:            Tue 04 Mar 2025 17:40:40 +0000
asID:                     264681
IP address blocks:        138.186.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:69:2e:46:71:5d:0a:4f:f2:2b:6e:5f:2d:e6:78:de:54:f3:06:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68FDDBE1BF749D2FC48F59317C6389C8186C4613
        Validity
            Not Before: Mar  5 17:35:40 2024 GMT
            Not After : Mar  4 17:40:40 2025 GMT
        Subject: CN=19385A4C2AB2E7505B35D6AAFEF77CBD67879114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1a:8c:41:34:27:5d:51:59:52:7d:21:dd:56:
                    ba:93:06:51:38:09:d8:8d:49:81:55:29:e2:09:da:
                    46:04:ee:13:df:d9:5e:4e:2e:86:96:57:ac:0e:d0:
                    da:f8:de:eb:b1:05:42:a1:af:db:06:20:cf:83:c3:
                    79:26:9c:f7:76:b3:4c:1b:d8:73:ac:33:8a:1a:9e:
                    cc:eb:91:5b:2d:55:77:8f:58:0b:65:e1:07:ee:ed:
                    d8:80:20:51:29:96:f0:12:69:58:45:07:26:e4:9c:
                    7c:e2:46:bc:08:3c:fb:54:42:7f:60:6d:76:ca:9b:
                    e4:be:b5:b5:70:51:ee:d3:8d:04:f1:47:00:3e:5e:
                    62:79:66:74:08:95:91:3b:8d:cc:8f:e5:a0:7d:8c:
                    2a:05:3d:b4:a6:3c:4f:bb:da:fb:df:8a:02:cc:48:
                    fb:25:ff:e2:92:b3:10:f6:c5:e1:41:76:1c:73:e9:
                    8a:f1:29:8b:f6:bf:9e:50:f2:9f:86:f6:57:56:e2:
                    be:44:ec:be:02:3c:d8:e3:9d:3b:a2:df:a6:c9:26:
                    31:f1:d2:e5:98:98:7d:c3:29:80:16:a3:ba:c7:16:
                    a1:6b:69:8d:35:36:a3:34:0e:72:05:e7:50:c7:7e:
                    86:b3:98:ed:08:77:ba:39:5f:1e:23:0f:6d:d7:54:
                    81:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:38:5A:4C:2A:B2:E7:50:5B:35:D6:AA:FE:F7:7C:BD:67:87:91:14
            X509v3 Authority Key Identifier:
                keyid:68:FD:DB:E1:BF:74:9D:2F:C4:8F:59:31:7C:63:89:C8:18:6C:46:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/3133382e3138362e3132302e302f32322d3234203d3e20323634363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:ff:d4:db:7f:51:b1:3d:1d:b3:ff:16:70:c3:78:39:5c:da:
         dd:a7:61:98:70:73:c3:08:db:c6:0f:2a:8c:ca:3e:2c:79:54:
         8c:1e:90:f0:df:e1:55:d6:82:6a:42:64:9f:04:84:5b:90:d7:
         1c:be:8b:e4:23:4d:81:d6:f2:1c:dc:b5:d8:c9:98:99:e4:d8:
         a0:3b:20:f2:26:cd:27:86:c4:82:c5:05:b5:91:91:f2:d7:f9:
         20:d8:57:62:93:66:9d:8c:92:31:a6:ec:14:3f:d3:38:6a:48:
         65:b5:6a:36:70:77:50:d8:f9:d5:ab:bb:c5:83:e9:4b:1e:51:
         7f:4e:21:73:24:53:e0:fb:e3:23:73:3a:d5:18:6f:40:c9:28:
         18:a8:2b:e6:83:81:2f:a1:46:27:f3:59:88:e8:7a:03:bd:93:
         99:62:2f:91:36:d6:88:f4:bd:18:4d:58:6c:82:ad:51:ef:91:
         f4:4f:6e:a5:b8:d0:06:ac:c3:27:38:56:d6:08:0c:ac:55:9c:
         6b:cc:17:ee:d4:45:45:10:a0:2a:1f:99:07:65:d9:a4:66:6b:
         b4:b6:59:b1:2c:16:f0:c2:5e:51:d6:56:08:87:26:0d:20:25:
         43:c7:24:b7:78:81:de:67:09:13:63:15:24:d1:91:ce:11:7a:
         f4:2e:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org