Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136312e302f32342d3234203d3e20323632313638.roa
File:                     3133382e3131372e3136312e302f32342d3234203d3e20323632313638.roa (raw, json)
Hash identifier:          zBNjiAoIFYSS0dKgY97ZuA/Z5jnagEx87bgm3Ve6lGk=
Subject key identifier:   8B:0C:36:34:3E:96:45:4E:7C:DA:D7:B5:78:D6:B9:CD:11:6F:64:58
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       3B67087281958E8B8FD6E668A148E44E3341C685
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136312e302f32342d3234203d3e20323632313638.roa
Signing time:             Tue 05 Mar 2024 18:00:26 +0000
ROA not before:           Tue 05 Mar 2024 17:55:26 +0000
ROA not after:            Tue 04 Mar 2025 18:00:26 +0000
asID:                     262168
IP address blocks:        138.117.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:67:08:72:81:95:8e:8b:8f:d6:e6:68:a1:48:e4:4e:33:41:c6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Mar  5 17:55:26 2024 GMT
            Not After : Mar  4 18:00:26 2025 GMT
        Subject: CN=8B0C36343E96454E7CDAD7B578D6B9CD116F6458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:dd:a8:54:27:a6:d8:c0:b9:3c:fd:25:b7:
                    3e:55:f8:bd:d0:35:81:f3:17:e3:07:a0:ca:32:6d:
                    f4:d4:69:ae:14:48:c5:4b:6e:82:db:dd:de:a5:2b:
                    d9:8b:29:43:fd:7f:c6:7c:7d:96:4a:68:2e:42:41:
                    93:57:da:6b:bd:3c:6e:d0:b5:06:d1:bf:97:82:75:
                    5b:76:cb:59:6a:55:37:74:30:c9:90:d4:40:ce:4e:
                    c1:d3:e5:67:68:8c:62:ba:d2:0a:33:50:e8:d2:00:
                    e3:c9:35:ed:2b:74:07:55:c7:cd:f5:4b:3b:fe:ea:
                    8a:f4:f0:6f:9b:25:7f:ec:d1:41:fa:d1:fc:7c:77:
                    6e:66:8d:c8:b5:d0:32:8d:96:d3:75:96:a0:08:7f:
                    61:90:e7:34:fa:64:d4:60:7d:64:28:c9:51:99:6b:
                    6a:9a:88:9a:12:1c:70:77:61:62:7f:17:f0:a2:20:
                    8a:99:97:b0:62:52:4d:5a:93:84:59:cd:ef:8d:97:
                    14:36:8a:31:8a:fc:f5:37:0f:2f:52:3b:8c:d4:e3:
                    42:cb:3e:96:7a:3d:d8:ad:97:5a:de:98:a6:ee:06:
                    9a:47:0e:79:c8:2a:e1:41:3a:d7:30:11:26:a8:c8:
                    a9:21:a6:1f:41:7a:13:37:ec:ed:e4:7e:1a:ee:5d:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0C:36:34:3E:96:45:4E:7C:DA:D7:B5:78:D6:B9:CD:11:6F:64:58
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136312e302f32342d3234203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:5e:82:aa:d9:b3:69:78:45:fc:9b:5b:39:02:99:84:13:3c:
         06:3f:c0:23:3b:e7:c9:1c:79:e0:ae:dd:2c:37:9b:94:10:0e:
         20:33:d9:90:81:a5:69:37:4c:72:69:e1:ab:48:2a:16:b2:02:
         7f:e1:0c:4a:49:23:3d:10:07:f5:e5:ed:ed:38:d2:ab:67:26:
         30:6c:ac:de:72:e1:b2:dc:1d:4a:52:d5:5f:52:36:f5:18:47:
         d0:69:c0:a9:5f:b2:ba:d7:32:65:da:e5:da:05:c8:b2:54:57:
         0b:6d:d1:2c:1b:33:91:e4:7e:5a:ea:22:3a:cd:aa:30:ca:db:
         a1:db:29:2f:93:22:9f:87:8a:be:23:6f:c3:fb:70:6c:f9:b4:
         32:bc:44:4a:87:76:29:d8:55:52:bc:3c:28:ce:fe:eb:7e:23:
         94:a2:2b:b3:0d:a8:86:54:04:62:28:5f:39:b2:66:40:21:d4:
         6c:df:bf:f2:8f:de:6e:d5:24:08:3e:f9:fa:d9:94:ad:50:6c:
         f0:ee:72:15:05:25:fa:42:53:0c:26:9a:8c:36:c2:04:d5:05:
         f2:f6:18:0b:08:d9:17:a9:96:99:f9:3a:d6:ab:c8:3d:bb:f7:
         b2:69:8a:3a:e5:d4:56:91:6d:ce:9a:db:44:ba:36:56:35:66:
         da:60:e2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:04 2024 by rpki-client on console-fra.rpki-client.org