Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/3133382e3131382e3134342e302f32322d3234203d3e20323633373730.roa
File:                     3133382e3131382e3134342e302f32322d3234203d3e20323633373730.roa (raw, json)
Hash identifier:          E5jDx8a/oylV67USqCw333/9XZ3HWoNcm/f9r4WAYYk=
Subject key identifier:   DD:B1:4B:C9:4A:C5:46:70:A1:35:A6:CE:04:D4:2A:06:8A:6D:32:4B
Certificate issuer:       /CN=8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A
Certificate serial:       15249624D15DE06A86F41311CF883489053D0AA9
Authority key identifier: 80:99:61:1B:7B:F0:F6:A8:CA:74:DF:D3:74:E3:ED:F2:C8:9F:BD:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/3133382e3131382e3134342e302f32322d3234203d3e20323633373730.roa
Signing time:             Tue 05 Mar 2024 17:42:03 +0000
ROA not before:           Tue 05 Mar 2024 17:37:03 +0000
ROA not after:            Tue 04 Mar 2025 17:42:03 +0000
asID:                     263770
IP address blocks:        138.118.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:24:96:24:d1:5d:e0:6a:86:f4:13:11:cf:88:34:89:05:3d:0a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A
        Validity
            Not Before: Mar  5 17:37:03 2024 GMT
            Not After : Mar  4 17:42:03 2025 GMT
        Subject: CN=DDB14BC94AC54670A135A6CE04D42A068A6D324B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:42:1d:c6:82:7b:58:ca:5a:4e:7f:1a:7f:
                    1c:1c:9d:69:89:48:0b:e9:75:1a:db:18:33:93:76:
                    25:0e:ec:d9:f3:3b:fa:09:70:b6:94:c0:fe:94:16:
                    4a:f5:66:f5:90:e7:49:b9:e3:39:c7:cc:45:f7:e7:
                    f8:2e:48:49:17:04:2e:90:bf:73:ed:02:c6:79:6a:
                    10:74:40:1c:77:88:4e:ab:ad:f4:dd:37:ad:4c:92:
                    3f:ff:92:a1:17:82:f5:c6:9b:61:fa:6a:f8:98:b3:
                    fe:59:5e:5d:f8:bf:44:ba:62:50:2e:c3:34:a1:3b:
                    8a:31:fc:5a:2e:8e:1e:64:67:89:07:d6:00:69:54:
                    b3:71:d8:f9:13:8a:8d:6f:3c:b8:1f:43:8b:db:b1:
                    2b:a3:18:17:67:9f:39:eb:a4:b1:60:8d:c1:95:c2:
                    c5:21:e0:20:c5:e0:0b:e6:7c:b9:56:a3:c6:68:a5:
                    3f:60:42:7d:7d:1e:e7:48:ed:eb:11:3b:fa:28:8b:
                    68:fa:ac:63:41:0c:a4:4c:1d:66:05:12:88:3e:79:
                    d5:4a:1c:e0:20:75:04:7c:76:68:5f:93:82:d9:38:
                    35:fe:09:dd:a7:a0:61:9c:16:74:9f:a1:78:a6:b4:
                    0f:19:7f:80:01:aa:2d:97:96:7c:ba:2a:a0:48:ad:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B1:4B:C9:4A:C5:46:70:A1:35:A6:CE:04:D4:2A:06:8A:6D:32:4B
            X509v3 Authority Key Identifier:
                keyid:80:99:61:1B:7B:F0:F6:A8:CA:74:DF:D3:74:E3:ED:F2:C8:9F:BD:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8099611B7BF0F6A8CA74DFD374E3EDF2C89FBD7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB19A1F333FFA36CC0FA1B59F186DA1CFD5AFC697CF1D898D76C3E7C5F417EBA/0/3133382e3131382e3134342e302f32322d3234203d3e20323633373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:47:57:ff:0d:1d:70:41:13:32:74:fa:8f:bc:88:46:2a:88:
         4e:3c:39:df:0f:dc:07:41:e9:a0:b4:e4:37:e1:12:34:7e:95:
         80:8f:14:22:4b:b0:a9:50:91:03:a0:ae:58:a0:cb:75:69:e0:
         0e:ed:33:f6:d8:cc:9c:53:96:c1:a6:c3:a3:3a:cc:c7:e8:f0:
         41:9d:49:07:84:3f:3a:f8:e4:d1:ad:bf:63:64:ad:83:d9:e5:
         dc:f3:24:91:2e:5c:6c:8a:a8:02:ab:de:15:21:d7:75:7b:86:
         5f:09:ef:82:17:09:bf:3d:9f:2f:d2:a4:c1:8c:eb:8e:9a:03:
         34:bb:6e:c6:9f:e5:39:7d:3a:ca:c1:16:15:6a:81:fd:42:58:
         50:4d:de:d2:92:c8:2a:10:36:72:a4:fe:ee:b5:47:ce:4f:98:
         5b:1b:9e:33:ec:23:83:53:e2:5e:3c:a7:d6:c2:d6:e2:f6:95:
         03:73:5e:89:ff:ba:6b:55:b9:9b:ab:94:09:8c:be:fd:36:77:
         47:f0:3c:78:68:89:fa:bc:e2:9c:4f:68:4e:3f:af:9a:67:cf:
         e5:05:ca:4d:fd:d8:8c:7c:55:07:1f:6d:61:44:74:77:e1:28:
         e3:bf:50:de:2c:c5:20:79:b5:d4:9e:e6:51:26:48:b4:22:28:
         ef:25:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:46:00 2024 by rpki-client on console-fra.rpki-client.org