Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/3133382e3131382e3231322e302f32322d3234203d3e20323634373338.roa
File:                     3133382e3131382e3231322e302f32322d3234203d3e20323634373338.roa (raw, json)
Hash identifier:          jdSV1FGMfoFo4v6W+U5vsRINmyh6YHfm6clr6UWp5gk=
Subject key identifier:   C8:76:D0:6B:FB:BD:DF:4E:22:DC:DA:04:55:66:25:A5:71:AD:75:35
Certificate issuer:       /CN=B2CC06647FEB4440D4723322EA183C8FFEBA89E4
Certificate serial:       302C44A8CD71880AC6A3FBDCC93CC99EAB9A4619
Authority key identifier: B2:CC:06:64:7F:EB:44:40:D4:72:33:22:EA:18:3C:8F:FE:BA:89:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/3133382e3131382e3231322e302f32322d3234203d3e20323634373338.roa
Signing time:             Tue 05 Mar 2024 17:49:07 +0000
ROA not before:           Tue 05 Mar 2024 17:44:07 +0000
ROA not after:            Tue 04 Mar 2025 17:49:07 +0000
asID:                     264738
IP address blocks:        138.118.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2c:44:a8:cd:71:88:0a:c6:a3:fb:dc:c9:3c:c9:9e:ab:9a:46:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CC06647FEB4440D4723322EA183C8FFEBA89E4
        Validity
            Not Before: Mar  5 17:44:07 2024 GMT
            Not After : Mar  4 17:49:07 2025 GMT
        Subject: CN=C876D06BFBBDDF4E22DCDA04556625A571AD7535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:2b:97:f8:a6:fd:0f:c4:71:f4:e5:6d:86:
                    6a:9f:3e:e4:be:cb:25:47:2f:9e:7b:90:90:5c:23:
                    02:24:95:69:bc:62:6b:b0:68:62:b3:54:1f:99:ae:
                    ec:e3:80:bc:cc:69:39:82:86:8d:1c:c5:b7:8b:c7:
                    1b:59:6e:f5:4d:8d:19:9c:1c:c1:b8:84:d9:3b:40:
                    01:08:25:7a:5b:ed:5e:58:1f:f9:83:f9:0b:73:aa:
                    9c:a8:87:29:70:de:8a:c0:0c:55:c1:28:7f:99:f1:
                    ba:6d:80:d2:90:c1:12:ba:84:07:00:09:46:0b:1b:
                    f5:1b:0b:de:cb:b6:9f:c8:17:9b:9a:18:f7:d6:96:
                    f1:f1:64:d9:b9:64:ba:f7:9f:6e:d2:e7:84:0b:a5:
                    19:f5:de:10:eb:96:ae:4d:21:56:e3:a3:00:29:18:
                    10:68:df:4a:dc:ac:93:6d:db:c2:58:ff:fe:1d:be:
                    4c:f2:1d:c0:79:d8:db:c6:28:61:4f:97:f5:89:74:
                    79:48:a0:bc:72:aa:5e:3c:b1:68:dc:62:b9:a9:63:
                    e7:44:9c:29:da:55:0c:31:80:2e:42:3c:6d:9b:88:
                    59:27:36:06:28:2b:3a:92:c5:e0:f8:9c:4c:de:b5:
                    6a:0a:d5:d0:78:5f:ca:f9:a8:92:cf:f0:a5:b4:5d:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:76:D0:6B:FB:BD:DF:4E:22:DC:DA:04:55:66:25:A5:71:AD:75:35
            X509v3 Authority Key Identifier:
                keyid:B2:CC:06:64:7F:EB:44:40:D4:72:33:22:EA:18:3C:8F:FE:BA:89:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/3133382e3131382e3231322e302f32322d3234203d3e20323634373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:61:c8:34:8d:22:98:73:8a:80:6c:6c:d3:af:45:fc:2f:11:
         f3:ac:d9:c0:d8:36:35:ed:fe:8a:e0:97:75:86:83:3f:36:4c:
         86:37:93:21:13:9c:ea:6b:ac:10:c6:3c:cf:d0:bd:37:40:31:
         6d:1d:c9:56:d7:c8:0e:60:82:bd:52:67:02:4a:5f:f7:55:19:
         31:f7:19:39:59:b1:2c:73:55:8f:1f:3d:0e:b1:40:57:81:9a:
         0b:fc:54:ea:62:21:57:5d:40:c5:47:9f:5d:4d:af:8f:d1:1a:
         49:cb:d6:74:46:bc:3e:7e:4c:d6:39:6e:85:bf:d4:78:9d:43:
         09:f5:e3:04:1f:05:76:48:65:08:85:92:f1:cb:c8:f0:09:35:
         e4:f8:83:62:8d:33:71:92:96:71:4b:77:c9:73:62:86:8a:5e:
         86:50:17:e1:38:bc:dd:5e:e0:a0:88:81:c6:ba:a6:57:9f:cf:
         ac:42:e8:eb:8b:ad:94:20:09:c6:dc:ea:3c:aa:fb:2f:31:31:
         8b:18:63:b2:84:30:96:75:d4:91:44:91:0d:17:63:0a:62:bc:
         6a:5d:78:16:b2:e2:e9:09:0e:54:6f:68:e1:c1:fd:5e:fa:64:
         eb:96:d9:ea:9f:08:87:0a:50:39:01:15:e4:24:46:91:92:aa:
         fb:8b:0c:e8
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUMCxEqM1xiArGo/vcyTzJnquaRhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJDQzA2NjQ3RkVCNDQ0MEQ0NzIzMzIyRUExODNDOEZG
RUJBODlFNDAeFw0yNDAzMDUxNzQ0MDdaFw0yNTAzMDQxNzQ5MDdaMDMxMTAvBgNV
BAMTKEM4NzZEMDZCRkJCRERGNEUyMkRDREEwNDU1NjYyNUE1NzFBRDc1MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyiuX+Kb9D8Rx9OVthmqfPuS+
yyVHL557kJBcIwIklWm8YmuwaGKzVB+ZruzjgLzMaTmCho0cxbeLxxtZbvVNjRmc
HMG4hNk7QAEIJXpb7V5YH/mD+Qtzqpyohylw3orADFXBKH+Z8bptgNKQwRK6hAcA
CUYLG/UbC97Ltp/IF5uaGPfWlvHxZNm5ZLr3n27S54QLpRn13hDrlq5NIVbjowAp
GBBo30rcrJNt28JY//4dvkzyHcB52NvGKGFPl/WJdHlIoLxyql48sWjcYrmpY+dE
nCnaVQwxgC5CPG2biFknNgYoKzqSxeD4nEzetWoK1dB4X8r5qJLP8KW0XaLtAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUyHbQa/u9304i3NoEVWYlpXGtdTUwHwYDVR0j
BBgwFoAUsswGZH/rREDUcjMi6hg8j/66ieQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRkE3MkE1QjRGRjM5MkMxOEI4Qjg1ODQyQjU1NDM1NzdF
M0IwRTFGMzJDRENCMTJBQ0Y0MTNBNzM4OUY2RjBELzAvQjJDQzA2NjQ3RkVCNDQ0
MEQ0NzIzMzIyRUExODNDOEZGRUJBODlFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMkNDMDY2NDdGRUI0NDQwRDQ3
MjMzMjJFQTE4M0M4RkZFQkE4OUU0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUZBNzJBNUI0RkYzOTJDMThCOEI4NTg0MkI1NTQzNTc3RTNCMEUxRjMy
Q0RDQjEyQUNGNDEzQTczODlGNkYwRC8wLzMxMzMzODJlMzEzMTM4MmUzMjMxMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzMzMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
dtQwDQYJKoZIhvcNAQELBQADggEBAARhyDSNIphzioBsbNOvRfwvEfOs2cDYNjXt
/orgl3WGgz82TIY3kyETnOprrBDGPM/QvTdAMW0dyVbXyA5ggr1SZwJKX/dVGTH3
GTlZsSxzVY8fPQ6xQFeBmgv8VOpiIVddQMVHn11Nr4/RGknL1nRGvD5+TNY5boW/
1HidQwn14wQfBXZIZQiFkvHLyPAJNeT4g2KNM3GSlnFLd8lzYoaKXoZQF+E4vN1e
4KCIgca6plefz6xC6OuLrZQgCcbc6jyq+y8xMYsYY7KEMJZ11JFEkQ0XYwpivGpd
eBay4ukJDlRvaOHB/V76ZOuW2eqfCIcKUDkBFeQkRpGSqvuLDOg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org