Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/3133382e39372e3234382e302f32322d3234203d3e20323634383231.roa
File:                     3133382e39372e3234382e302f32322d3234203d3e20323634383231.roa (raw, json)
Hash identifier:          1jq9Ihr2RvrMs9YkTwxUZD9znXgwrmRJzADq8cagAaI=
Subject key identifier:   93:93:99:4E:82:29:32:05:1D:EB:FC:15:A2:64:76:61:8B:29:AD:5C
Certificate issuer:       /CN=6A21791828146BC17DAE86EA069BF125DBBC3007
Certificate serial:       74FC3DFE1694D596B48D3A527E3B6CB6F148EAD7
Authority key identifier: 6A:21:79:18:28:14:6B:C1:7D:AE:86:EA:06:9B:F1:25:DB:BC:30:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21791828146BC17DAE86EA069BF125DBBC3007.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/3133382e39372e3234382e302f32322d3234203d3e20323634383231.roa
Signing time:             Tue 05 Mar 2024 18:21:06 +0000
ROA not before:           Tue 05 Mar 2024 18:16:06 +0000
ROA not after:            Tue 04 Mar 2025 18:21:06 +0000
asID:                     264821
IP address blocks:        138.97.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/6A21791828146BC17DAE86EA069BF125DBBC3007.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/6A21791828146BC17DAE86EA069BF125DBBC3007.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21791828146BC17DAE86EA069BF125DBBC3007.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fc:3d:fe:16:94:d5:96:b4:8d:3a:52:7e:3b:6c:b6:f1:48:ea:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A21791828146BC17DAE86EA069BF125DBBC3007
        Validity
            Not Before: Mar  5 18:16:06 2024 GMT
            Not After : Mar  4 18:21:06 2025 GMT
        Subject: CN=9393994E822932051DEBFC15A26476618B29AD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:63:22:42:39:b1:43:2a:69:03:5f:f2:eb:3a:
                    a3:fb:8a:a7:ba:eb:70:10:aa:79:e8:a0:77:45:eb:
                    73:63:2d:2c:7e:54:79:11:50:84:ce:3a:33:20:5c:
                    5e:64:fc:4d:6c:85:60:4f:58:c6:59:3b:40:09:9a:
                    b5:2a:b0:6c:52:35:91:26:85:63:dc:63:2d:82:24:
                    d0:58:a0:63:ba:89:58:0b:2d:c0:41:4b:16:9d:98:
                    ff:b9:7c:05:7d:5c:cc:c7:a4:c0:fd:11:66:3e:78:
                    f5:27:65:2c:da:b5:85:ff:6b:4e:c4:23:cf:bd:e0:
                    0c:68:a3:4d:ad:08:b8:82:bf:73:60:a2:2e:a2:67:
                    ff:42:44:82:94:02:7a:ec:01:e2:82:e7:8e:bc:15:
                    eb:7d:79:11:a3:cf:6e:fd:de:89:0b:5c:d1:41:fc:
                    72:42:41:32:e5:95:49:8e:d1:f3:fe:bf:70:a7:a7:
                    70:6b:3b:16:a5:26:1c:c3:17:29:8e:38:8f:8b:fe:
                    11:5a:81:65:1a:68:7e:26:f9:75:f5:02:a3:88:18:
                    fc:7c:ff:fc:e6:84:f4:44:5d:ec:ce:0f:da:7c:21:
                    2f:ea:bf:31:38:11:2f:e1:84:91:05:c7:82:0f:21:
                    88:e4:99:55:ee:41:c4:fd:a1:9d:97:61:b9:7b:52:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:93:99:4E:82:29:32:05:1D:EB:FC:15:A2:64:76:61:8B:29:AD:5C
            X509v3 Authority Key Identifier:
                keyid:6A:21:79:18:28:14:6B:C1:7D:AE:86:EA:06:9B:F1:25:DB:BC:30:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/6A21791828146BC17DAE86EA069BF125DBBC3007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21791828146BC17DAE86EA069BF125DBBC3007.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/3133382e39372e3234382e302f32322d3234203d3e20323634383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:53:08:11:d3:4e:e4:19:fe:75:0c:a5:ca:63:56:42:94:66:
         66:45:0a:a8:ea:53:60:bb:22:ee:6f:c7:38:b8:6e:1c:8d:01:
         23:e7:0b:09:18:5d:49:3b:0f:82:fc:0a:e2:b9:c8:21:38:71:
         76:25:3b:01:f6:47:5a:34:5d:c0:21:2e:c9:af:90:20:f2:d6:
         d7:d2:23:3b:33:0c:97:58:d7:8c:53:f4:84:71:e3:35:28:af:
         4a:6e:57:6f:b8:73:c6:a8:86:19:05:3c:5c:46:40:93:8f:b2:
         37:5f:b0:1e:37:75:86:34:cc:1e:86:4f:78:03:bf:66:b9:dc:
         95:fe:1d:94:6d:b5:a6:f3:3d:ba:9e:ec:e6:dc:68:50:8c:1a:
         38:cc:1a:f7:66:cc:e3:ee:0b:ae:6c:08:5f:de:d5:29:8c:79:
         60:17:db:cf:63:3e:3c:3a:88:2c:30:93:d2:a5:18:ec:e0:d4:
         40:5a:2c:82:5f:b0:40:d7:1d:69:9e:8a:30:70:64:61:43:bd:
         23:f0:67:af:5b:f8:33:bc:39:e8:10:9d:4c:9a:44:5e:e2:d5:
         c6:72:7e:dd:3f:98:76:24:0f:d6:38:6f:c5:ee:0c:2a:8a:74:
         62:e9:bb:50:5c:cc:b1:c4:cf:72:4d:95:d8:74:b8:90:c5:6b:
         f0:44:83:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org