Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/3133382e3132312e342e302f32322d3234203d3e203631343939.roa
File:                     3133382e3132312e342e302f32322d3234203d3e203631343939.roa (raw, json)
Hash identifier:          p2nqdnTlhLZyd4sJAIdkn5E0QPS5LVu/9oJXDKUdfFo=
Subject key identifier:   F8:84:B0:8B:4A:CE:E6:AC:EC:F9:45:61:C7:EC:38:4F:B0:CB:E6:D4
Certificate issuer:       /CN=0ACE4851157C591E6DB98282567BE62A5CD0F826
Certificate serial:       577377A3A7B0011062EE5B8F6A2346CB16069BA6
Authority key identifier: 0A:CE:48:51:15:7C:59:1E:6D:B9:82:82:56:7B:E6:2A:5C:D0:F8:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/3133382e3132312e342e302f32322d3234203d3e203631343939.roa
Signing time:             Tue 05 Mar 2024 17:42:15 +0000
ROA not before:           Tue 05 Mar 2024 17:37:15 +0000
ROA not after:            Tue 04 Mar 2025 17:42:15 +0000
asID:                     61499
IP address blocks:        138.121.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 May 2024 22:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:73:77:a3:a7:b0:01:10:62:ee:5b:8f:6a:23:46:cb:16:06:9b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ACE4851157C591E6DB98282567BE62A5CD0F826
        Validity
            Not Before: Mar  5 17:37:15 2024 GMT
            Not After : Mar  4 17:42:15 2025 GMT
        Subject: CN=F884B08B4ACEE6ACECF94561C7EC384FB0CBE6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:9b:01:6a:88:b9:58:b4:cb:60:3c:d7:a5:
                    26:8c:18:67:7b:ae:b7:12:04:17:0d:36:5e:ea:58:
                    e7:65:ba:e4:a1:e7:7a:9e:03:db:1c:e7:81:06:24:
                    4b:3d:1d:53:9e:f3:42:6a:65:f5:67:6e:44:99:8e:
                    e2:a3:24:94:41:fc:9d:7f:7f:bd:94:94:92:f7:05:
                    12:7a:e5:5e:64:d5:8c:b6:fe:71:a5:68:48:98:2f:
                    04:f1:db:50:30:c2:47:fa:11:df:27:51:53:25:28:
                    f7:7e:f0:b6:fa:1d:ec:70:86:f1:2a:f6:99:d4:2b:
                    16:39:1f:8c:53:bc:10:e9:76:6c:99:9a:1e:05:15:
                    f3:d0:64:df:68:7d:74:e2:b5:0e:fd:d4:e5:5c:db:
                    19:0b:92:4d:60:24:a2:84:ac:f4:e3:ca:35:95:93:
                    da:da:2f:25:e2:ff:27:ee:67:5f:f8:65:16:b1:be:
                    db:c0:4b:0d:4e:f5:73:33:e3:0c:28:97:25:61:c8:
                    78:57:a3:73:8a:c7:b4:4c:89:23:84:bc:a9:38:bc:
                    f4:f1:a9:cf:d1:8b:ac:dd:be:21:32:12:0a:8a:ab:
                    f2:9d:90:97:f6:72:e0:6f:b9:4a:46:b4:07:18:95:
                    97:2a:39:e3:5a:94:05:b0:cc:6f:b6:37:db:ae:6b:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:84:B0:8B:4A:CE:E6:AC:EC:F9:45:61:C7:EC:38:4F:B0:CB:E6:D4
            X509v3 Authority Key Identifier:
                keyid:0A:CE:48:51:15:7C:59:1E:6D:B9:82:82:56:7B:E6:2A:5C:D0:F8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/3133382e3132312e342e302f32322d3234203d3e203631343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:d8:4c:35:21:8b:f5:54:df:34:d9:1a:e4:46:cc:11:95:9a:
         93:76:f9:d2:46:64:38:9f:93:66:76:4b:46:6b:d2:fd:34:d8:
         80:08:29:58:b7:28:6c:13:70:90:bc:ec:0f:02:52:e5:a5:99:
         d2:b4:66:9d:a7:6f:6d:18:0e:c7:4d:13:69:a2:6c:98:d0:66:
         a3:52:ae:e8:a9:44:13:6b:b8:d8:cf:f8:16:13:3d:ac:1f:a5:
         7f:5a:dd:11:f6:1e:22:61:c7:4f:d4:f5:47:9a:a9:30:49:41:
         2b:34:16:05:4a:58:3f:2f:90:b1:0f:95:be:fe:db:17:96:96:
         77:c9:51:b4:f5:37:75:17:a0:1f:8f:db:62:06:be:53:c3:4c:
         c7:50:ce:df:20:81:64:f8:6c:93:b1:1a:a3:05:df:e2:38:26:
         21:75:77:b2:b3:93:12:61:3b:a3:b3:25:0a:cc:60:33:3f:fd:
         ea:b0:e7:4a:0d:41:1e:c5:63:74:de:b0:54:db:90:78:02:8a:
         eb:db:38:37:79:be:40:51:00:2f:9c:58:ca:d6:9a:94:84:d5:
         0f:55:5d:a8:e7:01:79:36:b5:b5:4a:f4:74:88:ee:eb:f8:aa:
         01:a3:fa:e5:db:c2:7d:43:48:ff:5c:b9:92:60:f7:8f:3f:9a:
         4f:e4:b4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 23:33:57 2024 by rpki-client on console-ams.rpki-client.org