Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/3133382e3132322e39362e302f32322d3234203d3e203238343538.roa
File:                     3133382e3132322e39362e302f32322d3234203d3e203238343538.roa (raw, json)
Hash identifier:          NyWjdpd6q6UZ2Cf9RvdhAmv7vFqMWZqPOfgP9+uiQb4=
Subject key identifier:   A6:2E:EE:FA:A8:83:95:9A:B3:AC:60:6B:37:55:F2:AF:54:2B:80:28
Certificate issuer:       /CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
Certificate serial:       7E1965375F01CFF641584B944B67FD87862A697D
Authority key identifier: AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/3133382e3132322e39362e302f32322d3234203d3e203238343538.roa
Signing time:             Tue 05 Mar 2024 18:09:51 +0000
ROA not before:           Tue 05 Mar 2024 18:04:51 +0000
ROA not after:            Tue 04 Mar 2025 18:09:51 +0000
asID:                     28458
IP address blocks:        138.122.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:19:65:37:5f:01:cf:f6:41:58:4b:94:4b:67:fd:87:86:2a:69:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABF23E4AFAADE37425B619826C8E00E07EE26BEF
        Validity
            Not Before: Mar  5 18:04:51 2024 GMT
            Not After : Mar  4 18:09:51 2025 GMT
        Subject: CN=A62EEEFAA883959AB3AC606B3755F2AF542B8028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:bb:23:9f:bb:55:6b:12:c6:27:a7:99:1a:
                    a0:d9:39:34:0d:32:ed:7d:7e:d6:6c:5e:fe:3c:e7:
                    00:90:d9:69:f7:15:0d:da:09:e6:89:c1:1e:2d:aa:
                    58:3b:d5:ce:0f:7e:d5:f1:f6:dd:94:29:e7:1a:2c:
                    33:73:b8:d8:09:87:60:2f:96:11:2a:ab:14:8a:2f:
                    e9:4e:19:28:8e:b1:07:ce:3d:8e:0f:03:20:bc:d5:
                    92:7c:c6:b9:b2:e9:3d:78:6f:73:9a:5d:28:ec:5d:
                    ed:ca:c7:68:ea:a8:5a:2f:e5:1e:fc:c2:23:68:5d:
                    c0:6b:0f:de:1a:b1:42:4c:a7:1d:7b:f2:a5:6f:af:
                    e2:26:00:b1:63:88:92:9e:38:3d:80:f6:ee:40:c8:
                    74:56:ab:79:ba:a3:f4:26:23:9f:90:91:36:25:5e:
                    3b:8b:70:be:f9:88:a0:b1:b3:6e:de:ff:bd:1c:ff:
                    a2:37:74:f5:74:85:24:ab:09:8c:0e:d2:c2:fc:91:
                    d8:16:6e:f0:92:3d:c4:4d:c6:a5:4b:56:45:78:f4:
                    11:5f:29:66:b6:01:5c:44:0d:a2:f9:d3:a3:85:24:
                    f7:91:1d:05:98:97:16:99:72:a2:0d:13:38:82:09:
                    d9:00:c1:b8:ca:ad:80:46:59:23:f8:e5:10:43:6e:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2E:EE:FA:A8:83:95:9A:B3:AC:60:6B:37:55:F2:AF:54:2B:80:28
            X509v3 Authority Key Identifier:
                keyid:AB:F2:3E:4A:FA:AD:E3:74:25:B6:19:82:6C:8E:00:E0:7E:E2:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ABF23E4AFAADE37425B619826C8E00E07EE26BEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B53C7950BBE656EF7F2EC865AA04CF91DC6A83A8DAB1AF2DAF457FB1F0DB562/0/3133382e3132322e39362e302f32322d3234203d3e203238343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:ee:69:b2:25:da:ec:3b:f8:df:37:44:d4:24:5e:35:8c:7a:
         ef:7a:24:e4:c7:8d:15:7d:c3:a5:3f:06:cc:f3:a3:73:7f:ae:
         d8:71:c4:19:2f:c3:4d:06:36:79:c1:62:35:c9:d8:4c:b1:31:
         46:24:77:87:6e:f5:3d:9a:53:70:f2:1a:5a:e6:c8:29:0b:3a:
         a2:fc:a7:fc:62:c1:9a:34:ee:a4:4d:8d:09:fb:19:4d:09:17:
         7b:cc:e4:43:ef:35:63:11:85:33:8a:d9:c1:ad:98:3b:e8:45:
         36:bd:1f:1d:2d:e3:6e:2d:40:95:a4:aa:c9:9f:35:ba:57:a1:
         5a:fa:4d:d7:02:a6:31:d8:12:48:aa:b7:5e:01:a3:80:14:99:
         33:fb:4c:48:8f:a9:60:88:07:54:f8:1c:50:78:d5:61:1b:d5:
         3a:c1:a2:d5:70:38:54:8c:25:a2:9f:a1:3a:14:7b:b0:2b:48:
         f1:71:95:5b:d2:be:82:26:4c:10:2e:79:69:75:b1:25:a0:8b:
         d0:58:c2:97:27:6f:79:d2:8e:01:55:45:ac:fd:d8:c0:88:7a:
         d9:fd:db:cf:37:a8:32:7b:2d:97:e9:0b:89:5c:d7:f8:5e:cc:
         fe:1b:a8:d6:b6:62:3e:70:88:ad:42:d5:ca:23:ee:bf:0b:8f:
         99:28:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:05 2024 by rpki-client on console-ams.rpki-client.org