Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3233302e302f32342d3234203d3e20323633373235.roa
File:                     3133382e302e3233302e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          SRWJp5CMXzi3C4i+BXJxSh3hBxOrFxdWC4Jcsenkvwo=
Subject key identifier:   80:AF:D2:36:8C:94:0A:C4:A7:AC:7E:B2:94:DA:3A:32:F1:A2:28:AD
Certificate issuer:       /CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Certificate serial:       69D925BC98C7376BE676E5DF9DF635F7BA6A9B1F
Authority key identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3233302e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 05 Mar 2024 18:09:44 +0000
ROA not before:           Tue 05 Mar 2024 18:04:44 +0000
ROA not after:            Tue 04 Mar 2025 18:09:44 +0000
asID:                     263725
IP address blocks:        138.0.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d9:25:bc:98:c7:37:6b:e6:76:e5:df:9d:f6:35:f7:ba:6a:9b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
        Validity
            Not Before: Mar  5 18:04:44 2024 GMT
            Not After : Mar  4 18:09:44 2025 GMT
        Subject: CN=80AFD2368C940AC4A7AC7EB294DA3A32F1A228AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:54:9b:03:4d:69:f3:6a:21:b4:0e:9b:39:
                    b2:a2:5d:1f:47:78:ef:fb:f6:c8:82:9c:bc:15:04:
                    29:6e:ac:1d:1f:0e:92:38:44:58:87:3d:11:58:81:
                    26:24:4a:a0:71:5b:56:3d:0c:ca:92:4b:1f:a4:75:
                    e9:39:2d:47:f1:c9:bf:ce:7f:dd:8a:b8:13:63:7f:
                    aa:a3:58:da:d3:1d:09:81:fe:ec:3d:f9:f7:c1:cc:
                    12:f2:b9:0e:b9:dc:01:e7:e6:3d:49:3d:28:1a:8c:
                    e1:18:02:7f:ad:f2:e5:16:ce:3b:e5:a1:5f:3d:fa:
                    1a:ab:86:69:25:4f:d7:4c:1f:c0:f3:60:b7:78:a9:
                    c2:5d:79:df:02:ca:27:b5:49:78:b7:3e:bf:1a:ff:
                    7f:3f:4d:2d:b2:8f:6b:e2:e4:d7:db:ac:a2:79:45:
                    64:54:6c:e8:c3:37:2e:66:c6:f6:83:d8:d2:25:f2:
                    d4:ac:47:bf:9e:56:14:5d:7b:34:00:20:97:af:c0:
                    2c:83:5a:e2:44:b5:4c:47:88:30:ea:a6:d1:bf:a1:
                    05:69:3e:ef:81:27:95:c2:28:f1:68:e7:af:66:6a:
                    11:b7:20:0d:c3:d4:93:38:c0:16:9b:e5:57:af:da:
                    c9:6c:e2:a6:de:24:9e:62:3d:ff:80:82:45:47:75:
                    66:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AF:D2:36:8C:94:0A:C4:A7:AC:7E:B2:94:DA:3A:32:F1:A2:28:AD
            X509v3 Authority Key Identifier:
                keyid:BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3233302e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:c1:5d:1d:2a:d7:4f:15:cc:74:4b:97:3d:50:3d:b0:cb:04:
         08:46:dd:fa:73:53:e7:c9:87:7b:36:44:fa:c2:89:da:04:da:
         6d:c9:18:61:af:d5:47:75:26:de:f7:17:9a:56:33:cc:b0:3e:
         13:65:2c:29:44:32:9b:c0:5b:3e:04:d8:db:1e:43:7f:84:c4:
         7b:f9:96:57:55:a7:fd:44:09:d3:5f:f8:b9:44:72:ed:8c:bb:
         1e:6a:b1:e5:d4:b0:12:e7:b0:80:6b:86:84:39:96:b3:31:9a:
         96:95:f7:39:b3:72:7b:a2:85:ee:6b:2b:23:7b:65:d5:91:b7:
         5c:2e:db:2a:07:c5:68:57:d2:2c:2b:ce:90:a6:9a:7b:70:c4:
         27:f5:91:3e:6e:6a:d6:b4:3f:bf:85:6e:14:78:0b:ca:4e:0b:
         aa:0d:51:8e:d8:1a:ba:43:50:f7:36:79:9e:07:11:67:5e:8d:
         f1:71:c0:a0:38:cb:b3:1c:1a:27:19:fe:a9:35:4a:e9:d3:98:
         b7:43:88:b5:cc:23:f0:79:cd:48:08:54:22:16:bd:51:84:f8:
         d6:34:70:7e:70:74:b7:0f:62:8c:fb:bc:6d:8c:5b:9d:35:2a:
         d7:82:e5:a5:e4:f6:e4:e7:cf:4d:b9:fe:37:61:38:4c:76:0d:
         24:e7:cd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:44 2024 by rpki-client on console-fra.rpki-client.org