Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/3133382e33362e3235322e302f32322d3234203d3e20323635373033.roa
File:                     3133382e33362e3235322e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          x2a78Wv1dU0NuWn7DDJfZjb1Fmliupr5EQl5qrxKfDM=
Subject key identifier:   30:BF:15:A7:F5:1D:44:AC:9D:5E:A2:8A:6A:8C:9F:D9:E2:BB:B1:E7
Certificate issuer:       /CN=342CE218F6DBE708D87221F8FFFD2B182B5A6F8C
Certificate serial:       433B103EB421F6A0857998B03D54833085E7232B
Authority key identifier: 34:2C:E2:18:F6:DB:E7:08:D8:72:21:F8:FF:FD:2B:18:2B:5A:6F:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/3133382e33362e3235322e302f32322d3234203d3e20323635373033.roa
Signing time:             Tue 05 Mar 2024 18:11:26 +0000
ROA not before:           Tue 05 Mar 2024 18:06:26 +0000
ROA not after:            Tue 04 Mar 2025 18:11:26 +0000
asID:                     265703
IP address blocks:        138.36.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3b:10:3e:b4:21:f6:a0:85:79:98:b0:3d:54:83:30:85:e7:23:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342CE218F6DBE708D87221F8FFFD2B182B5A6F8C
        Validity
            Not Before: Mar  5 18:06:26 2024 GMT
            Not After : Mar  4 18:11:26 2025 GMT
        Subject: CN=30BF15A7F51D44AC9D5EA28A6A8C9FD9E2BBB1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:57:ef:2f:fd:8d:a5:59:e1:0f:46:20:d9:37:
                    13:fc:f0:b3:10:4b:6b:c5:3b:48:82:90:65:f4:9a:
                    51:a9:d2:9c:6f:be:96:5b:6e:7d:9b:7f:b3:1d:95:
                    62:6d:89:9b:75:45:1e:11:bc:24:0f:2c:00:fb:b1:
                    e2:d6:2a:d6:46:f9:5c:4f:31:0b:ce:d6:5b:b8:18:
                    18:f3:5a:49:9c:ed:34:0b:c7:e4:5a:8c:d3:fe:2a:
                    a8:ef:b4:39:3c:0b:ef:32:52:18:7a:36:52:85:69:
                    e8:dc:1c:09:2f:8a:7b:99:44:8c:41:a8:39:46:8d:
                    ed:e9:8f:35:eb:46:dc:c1:ac:13:23:10:53:8a:4b:
                    7e:44:3f:20:e7:f8:c4:a8:4f:46:37:c7:5d:bb:60:
                    f6:4c:a3:54:1a:4b:20:5e:e9:5b:ad:41:85:d8:b7:
                    b3:7b:fd:e5:79:15:bb:69:a1:8c:09:81:c9:1f:d6:
                    20:5a:22:5e:e0:91:01:55:62:be:fd:37:15:87:60:
                    c4:03:27:6a:b5:d3:d9:9e:c5:ca:ae:a8:6e:1d:b7:
                    e2:c6:12:2d:7a:9c:78:1c:94:cb:5b:09:b4:c5:d9:
                    e6:2c:67:1e:ea:75:ce:53:65:79:7b:21:c4:f8:c9:
                    0b:15:39:73:d1:15:95:69:c2:7a:83:9e:15:e6:f4:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BF:15:A7:F5:1D:44:AC:9D:5E:A2:8A:6A:8C:9F:D9:E2:BB:B1:E7
            X509v3 Authority Key Identifier:
                keyid:34:2C:E2:18:F6:DB:E7:08:D8:72:21:F8:FF:FD:2B:18:2B:5A:6F:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/3133382e33362e3235322e302f32322d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:92:f4:a9:fb:d7:16:87:85:fe:8b:1f:18:6b:55:c3:33:fe:
         31:36:14:4e:d4:1a:c2:e5:d3:27:c2:e4:16:f3:29:ad:b5:75:
         54:e6:67:70:e4:76:8b:8a:23:68:87:f8:ea:0b:4d:4f:8c:56:
         0b:b0:c4:d8:c1:0f:63:73:2f:a0:15:36:0c:cc:ea:84:2e:65:
         ba:52:02:1e:3d:9a:18:66:1d:ad:9b:06:c7:39:69:3c:be:2b:
         a3:9e:4f:8a:c8:2d:3f:14:8f:19:e7:5c:e3:db:7e:4d:e3:be:
         81:b7:70:7f:20:88:28:7c:30:e1:4d:7d:2f:3e:8d:3c:06:98:
         c6:6d:d2:47:16:41:d7:15:8e:f3:ed:3d:25:c8:61:71:2a:27:
         b6:50:1f:06:41:7c:09:10:d7:62:3c:e5:27:e3:43:0b:56:c3:
         73:38:e5:04:70:22:fc:34:0a:11:0b:61:2c:f6:a5:3c:4f:ac:
         90:88:d0:a5:c3:e3:bf:41:f8:e5:cb:ad:ff:b9:0e:00:61:63:
         f9:fb:e5:8f:33:18:0f:ce:24:86:c1:cf:fb:bd:01:69:4d:0f:
         f2:4e:d2:46:1d:2b:ed:b9:6e:3d:ad:17:8f:63:1d:01:4f:2a:
         39:2b:76:53:a2:8c:dc:28:71:bf:b3:a3:b4:2e:65:9a:7d:30:
         43:54:11:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org