Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36312e302f32342d3234203d3e203238313033.roa
File:                     3133382e3138362e36312e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          RQ12DKPZHwx3lbxo7bFE1ddcGjWIn0fiqSGA4pjrlUU=
Subject key identifier:   09:EC:1F:92:38:03:EE:35:EB:C4:0D:AA:D0:78:6C:C0:0A:FD:F5:D0
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       1A9B6CE7E0B52FEC5CD06B7893E62E05938D23FC
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36312e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 12 Aug 2024 12:45:02 +0000
ROA not before:           Mon 12 Aug 2024 12:40:02 +0000
ROA not after:            Mon 11 Aug 2025 12:45:02 +0000
asID:                     28103
IP address blocks:        138.186.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Nov 2024 07:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9b:6c:e7:e0:b5:2f:ec:5c:d0:6b:78:93:e6:2e:05:93:8d:23:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Aug 12 12:40:02 2024 GMT
            Not After : Aug 11 12:45:02 2025 GMT
        Subject: CN=09EC1F923803EE35EBC40DAAD0786CC00AFDF5D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:71:bf:36:1e:68:cb:a3:0a:06:d3:95:a4:
                    8f:30:7a:d3:01:66:36:7d:f7:84:98:be:b4:f9:d1:
                    91:03:ec:03:e5:b1:1a:3a:3d:12:95:65:86:14:f6:
                    56:c9:c0:77:13:12:27:53:d7:0a:4b:50:8a:48:d8:
                    7b:ca:d0:f4:94:55:08:3c:03:2e:ef:ee:b8:f1:c7:
                    15:47:ec:38:cf:46:44:8b:83:0b:fe:a2:f3:05:94:
                    d1:25:5b:bf:a7:7f:3b:60:2a:22:5b:7f:8e:41:98:
                    f1:fb:51:11:ae:1e:5f:90:f8:1f:cb:fa:6e:4e:00:
                    e5:fc:27:ce:41:07:2d:39:9e:dc:77:31:72:9d:76:
                    52:11:c4:1c:b0:23:50:e1:8e:ed:4a:63:b8:1b:d1:
                    b8:9b:ed:24:54:3d:d8:68:7e:e1:d6:b0:20:c0:85:
                    02:29:d1:b0:71:28:e9:56:fb:e3:a1:9f:c8:0b:c5:
                    d7:90:d0:81:2c:b7:5c:e8:52:34:dd:71:0c:e6:ad:
                    d7:ad:53:33:1a:06:54:09:2f:1f:5b:66:51:35:95:
                    35:d2:f6:18:38:58:ed:62:c4:45:ba:0b:1c:ac:4b:
                    ff:95:e1:0e:cf:28:21:07:ea:ff:49:15:95:77:57:
                    ca:49:79:64:ed:3c:0a:23:c9:02:17:7b:aa:99:5c:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EC:1F:92:38:03:EE:35:EB:C4:0D:AA:D0:78:6C:C0:0A:FD:F5:D0
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133382e3138362e36312e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:5f:a4:20:e7:55:fa:d5:fb:50:22:bd:a1:27:31:7c:75:a8:
         ef:8e:5f:38:52:8b:ed:31:24:e6:76:c8:ac:3f:c0:34:94:8c:
         9b:7d:c3:a3:83:e5:72:40:55:56:be:45:58:4a:1c:bf:ce:28:
         df:5e:18:af:55:27:81:84:3a:c2:d7:76:54:27:99:3e:c0:1b:
         e7:d8:6c:67:58:f0:f3:42:7c:0e:a6:1b:2d:14:5b:5f:11:15:
         27:95:27:49:c9:0c:7b:78:53:06:83:08:09:cb:6b:c9:9c:c1:
         70:aa:d8:5c:39:eb:d6:9d:e9:0d:ed:f0:ac:fb:2a:63:89:06:
         04:ec:b0:b4:f1:79:f8:05:f2:e2:b6:d8:f7:76:19:cc:94:88:
         d9:da:84:44:b3:c8:5d:a4:c5:2e:9a:19:79:24:7b:45:b6:a6:
         df:1b:11:ef:23:0d:9e:8a:b9:8f:7c:24:85:2b:8a:e2:5b:a6:
         90:6b:90:4d:33:92:37:2e:d4:54:a7:b5:3f:e8:ef:7f:0a:a4:
         40:4e:c9:db:58:31:18:e8:e6:7c:6c:bd:ae:cf:8c:22:36:5c:
         71:f3:63:ba:3d:bc:91:50:ac:43:c2:e9:c8:d8:4e:3d:cd:1c:
         c1:fb:da:0d:c3:32:3e:ab:63:cd:76:ec:c0:35:28:9e:e1:fc:
         97:37:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 01:40:51 2024 by rpki-client on console-ams.rpki-client.org