Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36302e302f32342d3234203d3e203238313033.roa
File:                     3133382e3138362e36302e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          3ircXWKN+6/rEjmNWR4qzgUqK83dQsaiCbPSJxKPgvo=
Subject key identifier:   3E:30:D8:E6:88:05:D7:C7:6C:89:BB:0D:20:80:F1:5C:DD:69:E8:91
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       1F5F1A493D09F28F73D976B700CE7F77B3099375
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36302e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 12 Aug 2024 12:45:02 +0000
ROA not before:           Mon 12 Aug 2024 12:40:02 +0000
ROA not after:            Mon 11 Aug 2025 12:45:02 +0000
asID:                     28103
IP address blocks:        138.186.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Nov 2024 07:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5f:1a:49:3d:09:f2:8f:73:d9:76:b7:00:ce:7f:77:b3:09:93:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Aug 12 12:40:02 2024 GMT
            Not After : Aug 11 12:45:02 2025 GMT
        Subject: CN=3E30D8E68805D7C76C89BB0D2080F15CDD69E891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:f0:ed:34:0e:b3:24:9d:66:f6:03:b0:1e:
                    7e:4f:0e:09:d9:7a:24:80:61:fe:13:95:79:f5:e1:
                    fa:13:d8:b3:23:52:1b:d3:15:29:2e:3b:4d:dc:49:
                    df:09:84:d9:6f:90:f8:f1:fe:c5:06:49:ce:94:17:
                    cf:a7:da:20:20:f9:30:e4:da:84:b1:09:bb:d0:74:
                    29:6b:56:55:82:2d:f2:08:db:bb:05:0e:50:7c:87:
                    1a:92:e5:d7:49:29:4b:4d:94:ca:9e:83:a3:1a:e1:
                    2b:0e:7d:81:1e:b8:9d:10:9c:a8:d4:e4:61:94:98:
                    ef:10:28:2d:16:0d:33:01:f1:10:48:7c:b3:12:f6:
                    c9:4a:6d:29:f9:6a:a6:d0:06:05:8b:ce:e8:49:24:
                    df:18:a2:1b:1d:ca:01:7c:88:81:6a:1d:b2:09:5b:
                    74:9c:9c:f3:2c:4f:f4:01:25:34:67:8c:82:96:db:
                    ac:f1:37:68:3d:82:c6:f4:ca:8d:c1:41:02:06:4c:
                    fb:37:a9:10:01:dd:f7:36:83:16:c2:fe:07:37:63:
                    3d:f9:78:63:10:ec:d6:66:40:3c:f4:88:21:9f:c7:
                    e9:6f:84:e1:1d:6d:c7:0f:26:87:83:0b:39:74:44:
                    14:8b:4e:6c:ff:3d:62:44:92:c6:5c:81:e2:7a:a6:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:30:D8:E6:88:05:D7:C7:6C:89:BB:0D:20:80:F1:5C:DD:69:E8:91
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36302e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:14:b5:3a:ab:84:60:05:5f:df:47:44:6c:66:62:5c:f5:8f:
         2c:23:f6:23:63:86:38:a1:b5:6e:c0:d4:44:8f:31:11:09:74:
         4a:27:57:04:09:c4:00:00:b5:ec:07:c9:6e:23:a8:bc:8c:8d:
         60:8f:1f:d6:79:bb:00:14:0d:7a:5d:95:e8:dc:91:62:77:98:
         52:03:11:67:73:9e:70:c1:94:e0:84:1f:90:92:14:1c:e2:81:
         70:b2:3d:18:16:6c:c4:f7:94:e4:a3:4a:34:4e:21:65:5a:83:
         3b:a0:d9:04:e5:2c:0d:8e:86:0d:a6:34:cf:f5:3c:81:2a:8f:
         e0:ba:36:66:59:01:45:7a:9e:36:be:75:ee:45:8d:e3:87:ec:
         80:d1:88:ba:5f:66:cb:61:b0:78:a0:e6:12:f3:9b:e9:2a:43:
         18:e1:58:14:bd:ea:bc:3f:b7:2d:a7:cc:d3:23:4b:37:fe:d3:
         23:8d:ed:ae:a2:87:ad:d3:0e:c5:34:d1:cd:fb:3f:ad:11:95:
         85:03:6e:f9:36:d6:4b:a4:4e:f8:e9:eb:6e:1f:b4:13:06:6b:
         1b:ca:85:c6:99:01:a6:6c:91:f8:be:12:c5:5f:bb:ab:7e:c0:
         32:e5:55:74:90:19:d3:27:f6:a7:99:bb:f5:d5:f9:bf:13:bd:
         5b:0a:2c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 00:42:46 2024 by rpki-client on console-fra.rpki-client.org