Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3233312e302f32342d3234203d3e20323633373235.roa
File:                     3133382e302e3233312e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          pxFjU2xHw4VQucE+hyNvFjDHLY2dH1xu2hhDryFMY0Q=
Subject key identifier:   52:F8:9D:AA:27:B7:D7:72:E2:00:62:7B:93:FC:17:5E:30:17:AD:40
Certificate issuer:       /CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Certificate serial:       024D37AB6C6F6F2EC71DDC9A279657F0567CEAFC
Authority key identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3233312e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 05 Mar 2024 18:09:43 +0000
ROA not before:           Tue 05 Mar 2024 18:04:43 +0000
ROA not after:            Tue 04 Mar 2025 18:09:43 +0000
asID:                     263725
IP address blocks:        138.0.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 May 2024 15:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4d:37:ab:6c:6f:6f:2e:c7:1d:dc:9a:27:96:57:f0:56:7c:ea:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
        Validity
            Not Before: Mar  5 18:04:43 2024 GMT
            Not After : Mar  4 18:09:43 2025 GMT
        Subject: CN=52F89DAA27B7D772E200627B93FC175E3017AD40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:47:81:fb:07:d7:5a:dd:6f:f2:ab:81:e9:
                    e1:3b:17:19:4e:b1:75:f6:6c:24:53:84:3f:56:1e:
                    b8:e5:34:8c:5f:7c:03:b9:e7:e5:f9:2b:70:1a:fb:
                    29:5b:2c:6a:62:9f:ea:72:42:6c:93:de:af:b2:e0:
                    ba:49:7a:06:6c:f2:d1:1d:7f:83:f3:8d:74:a7:4a:
                    d9:76:c3:86:44:45:21:47:57:e8:fd:b1:14:00:46:
                    3b:24:40:af:73:2a:ef:7c:5d:f2:39:27:33:9c:48:
                    89:70:ec:be:c9:db:7f:6e:86:f1:d8:56:c3:14:5b:
                    79:4d:1d:a5:8d:41:e9:d2:bc:aa:57:b4:e4:45:e5:
                    e0:91:6f:ae:42:6d:01:3e:be:f2:0a:9e:3e:2a:3b:
                    e7:e4:82:ff:a9:a4:ad:a2:e2:61:91:fe:a4:b6:0c:
                    f6:b9:db:96:80:2b:3b:0c:18:c0:84:4f:90:7e:f4:
                    4a:11:a4:ab:af:47:e7:1a:5b:93:8e:fb:dd:65:41:
                    c3:e7:f0:c4:ea:43:96:4c:ce:e2:ac:5c:70:7f:51:
                    fd:55:63:e7:6b:d6:dc:db:75:11:e1:02:3f:7c:78:
                    af:74:9f:50:43:88:db:28:9e:ce:6c:97:df:f5:d7:
                    2f:17:43:2b:97:da:89:c2:50:4c:55:cd:65:7b:bf:
                    f0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F8:9D:AA:27:B7:D7:72:E2:00:62:7B:93:FC:17:5E:30:17:AD:40
            X509v3 Authority Key Identifier:
                keyid:BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3133382e302e3233312e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:b7:b2:a1:b9:ed:5a:94:d8:55:87:b3:45:b4:e2:1d:1b:c7:
         7a:ce:b4:8b:b5:20:d2:62:25:99:29:9f:63:67:7f:2e:bd:43:
         5f:12:f2:f9:ae:19:91:94:a9:ce:60:20:58:16:e4:c1:e4:5f:
         b2:3b:99:65:51:f2:23:9c:48:51:7a:a6:5b:02:78:11:39:18:
         93:cf:47:bf:9a:6b:8d:b1:09:19:c3:89:73:b9:f4:c9:4c:c5:
         f9:04:5f:09:d5:23:03:f2:6b:59:b7:62:8f:3f:5f:b4:ae:f4:
         b7:b3:78:96:6a:bd:9f:04:c9:82:0e:e5:44:bf:da:2d:96:35:
         ca:b6:df:e8:6d:f9:27:de:82:a3:9b:cb:e5:c7:8c:f1:dd:3a:
         db:be:cc:a7:7c:54:e9:52:60:26:7e:43:a0:8f:8e:eb:22:77:
         c3:9c:32:e5:0a:c3:68:c2:94:c7:fe:f1:b6:34:ce:6a:73:c5:
         01:68:65:9a:b1:ae:0b:d5:18:ce:10:65:de:bf:f6:2a:9f:f3:
         15:df:ec:79:92:6d:69:f7:ff:48:a5:79:33:e2:fd:ef:f5:d5:
         1f:70:02:cb:3b:2b:28:8e:c1:31:c8:fe:4c:27:2c:82:ab:cc:
         cc:09:15:94:21:b0:af:f0:a5:f3:c1:80:46:56:f1:7a:1d:8c:
         f4:8f:85:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 14:53:48 2024 by rpki-client on console-fra.rpki-client.org