Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3232382e302f32342d3234203d3e20323633373235.roa
File:                     3133382e302e3232382e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          49ulkxWCIUTXLm7waZf7V9MszTv4PRdkIfyEyvgBRpg=
Subject key identifier:   6C:9C:0C:A7:59:CE:42:B8:BB:2A:31:FE:55:DB:C7:85:7B:C7:75:42
Certificate issuer:       /CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Certificate serial:       4D73DB44F909371E36A347B5C58E245577D5AD93
Authority key identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3232382e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 05 Mar 2024 18:09:43 +0000
ROA not before:           Tue 05 Mar 2024 18:04:43 +0000
ROA not after:            Tue 04 Mar 2025 18:09:43 +0000
asID:                     263725
IP address blocks:        138.0.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:73:db:44:f9:09:37:1e:36:a3:47:b5:c5:8e:24:55:77:d5:ad:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
        Validity
            Not Before: Mar  5 18:04:43 2024 GMT
            Not After : Mar  4 18:09:43 2025 GMT
        Subject: CN=6C9C0CA759CE42B8BB2A31FE55DBC7857BC77542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:07:a3:ce:81:4b:1e:1f:dc:e5:d9:f5:fb:
                    0b:2e:b1:14:80:55:4a:02:a8:41:b1:fb:4b:8e:5f:
                    ce:13:43:e0:90:02:6b:d4:66:19:88:f8:f4:7f:b1:
                    88:b6:3a:ac:8f:8b:b4:15:9a:08:a9:a5:e4:5f:73:
                    0d:b0:ea:8b:28:6d:68:c4:4c:7f:85:ac:f1:8a:ef:
                    c1:c7:3b:32:b0:3a:ed:1f:cf:64:a6:15:9d:31:82:
                    e3:10:34:ef:97:49:0a:8a:35:a5:d7:5c:b1:b7:46:
                    20:e8:b1:dd:20:a1:7e:7e:9b:c7:b9:1a:e0:9e:1a:
                    2b:8a:1d:8e:3d:ee:61:c4:ed:f4:9b:8b:38:01:14:
                    cb:42:84:7d:32:53:f8:e1:88:cf:a7:4d:59:24:0f:
                    1e:f3:4d:bd:ee:30:31:76:fd:97:10:b6:dd:5b:78:
                    38:a7:e6:71:c1:f1:f8:49:e3:10:30:1f:d5:01:e2:
                    9d:17:14:d2:39:30:f3:39:28:fa:84:2d:34:ff:39:
                    e9:2e:6c:e2:79:88:9e:4c:f1:f5:d4:de:fe:29:7f:
                    10:fd:cf:d7:c6:af:2d:4a:c9:0a:c8:ea:ac:19:52:
                    79:84:91:7d:b3:ee:e5:3f:95:1d:a8:4d:a1:ad:fb:
                    0e:db:2e:b2:cd:29:b0:45:f4:ed:b0:af:c8:43:bb:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9C:0C:A7:59:CE:42:B8:BB:2A:31:FE:55:DB:C7:85:7B:C7:75:42
            X509v3 Authority Key Identifier:
                keyid:BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3232382e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:6b:1c:6e:41:fe:4b:5f:d3:93:b4:11:ba:7f:e1:bb:69:cb:
         6c:5f:5c:b7:87:71:b5:88:6e:ba:f7:ac:2f:05:69:11:37:54:
         20:48:9a:57:13:81:33:ae:f6:2d:0e:62:a6:60:d5:53:94:cd:
         fe:03:c4:3d:73:0c:66:9b:13:10:bc:d7:cd:65:60:27:b4:6e:
         7a:ad:03:f8:c0:f1:4c:db:23:ed:8b:41:7c:06:36:30:83:db:
         ae:03:c7:db:a7:b9:b4:1e:35:7e:82:be:17:4d:63:61:92:0d:
         22:28:8c:de:27:70:58:58:26:08:6b:8a:54:43:10:49:69:aa:
         9c:c4:06:5c:67:0b:32:a3:50:42:3e:18:66:58:f7:fc:ab:de:
         d0:60:ce:8f:da:22:25:c3:22:b8:76:5c:bc:89:22:f6:c0:18:
         1a:77:1b:9b:e1:61:c0:12:08:e5:ed:98:f9:5b:f6:58:94:9e:
         5b:10:3b:d9:2f:7b:61:69:eb:7d:f3:3c:59:a8:7f:3a:07:ec:
         24:6d:2c:10:0b:f4:9d:e6:38:52:ae:f4:bb:8c:0d:22:20:0f:
         50:b8:7d:99:bf:c0:6f:d3:5c:2d:33:81:f1:47:32:b8:f2:63:
         4c:5b:11:c8:70:2f:21:ba:0f:fb:d4:53:c3:70:e7:84:62:72:
         39:66:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 13:36:22 2024 by rpki-client on console-ams.rpki-client.org