Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/3133382e3132322e3132382e302f32322d3234203d3e203230323037.roa
File:                     3133382e3132322e3132382e302f32322d3234203d3e203230323037.roa (raw, json)
Hash identifier:          amZkU0K3W6uqe+XpeuZAQgZ33xf4mgaSAjSLRwbAzBc=
Subject key identifier:   26:4D:B7:85:5B:88:35:DB:B8:A8:FB:1D:D2:2A:AF:61:AF:07:A0:CD
Certificate issuer:       /CN=845FC621EC41AE7512D63082015413006FEF3E35
Certificate serial:       671FB288D1341499073FA28C1B1CCBBB27FBF521
Authority key identifier: 84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/3133382e3132322e3132382e302f32322d3234203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 18:02:05 +0000
ROA not before:           Tue 05 Mar 2024 17:57:05 +0000
ROA not after:            Tue 04 Mar 2025 18:02:05 +0000
asID:                     20207
IP address blocks:        138.122.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1f:b2:88:d1:34:14:99:07:3f:a2:8c:1b:1c:cb:bb:27:fb:f5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845FC621EC41AE7512D63082015413006FEF3E35
        Validity
            Not Before: Mar  5 17:57:05 2024 GMT
            Not After : Mar  4 18:02:05 2025 GMT
        Subject: CN=264DB7855B8835DBB8A8FB1DD22AAF61AF07A0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:79:ab:7c:b7:80:06:74:b8:b4:6d:f6:cd:96:
                    e3:bc:dd:5c:97:ac:09:fb:a7:1d:99:f4:27:5e:e0:
                    4b:c5:74:1d:09:18:39:7d:51:e0:1a:da:f3:5b:6d:
                    2e:3a:a5:9d:a3:e5:b8:78:ac:4d:92:31:5a:16:70:
                    5a:df:17:c9:34:1c:37:7f:6e:7a:05:d0:70:93:c9:
                    1f:5b:6c:f8:2d:f3:d5:bb:0d:a3:61:66:c3:96:5f:
                    59:c9:a6:24:3e:db:eb:9c:5e:c0:65:e7:b7:c4:60:
                    41:16:75:4d:c8:05:e2:9e:e3:1d:d2:88:05:5e:d5:
                    9a:b2:2c:40:01:77:9c:dc:8e:90:b5:7d:06:3e:db:
                    ff:ab:7d:54:c0:df:b3:c0:63:11:fb:6e:02:71:e3:
                    e8:a0:54:0f:75:65:a2:94:41:71:2d:bb:ea:b5:db:
                    48:ac:e2:b3:ee:c6:4d:e8:6c:a4:54:fa:74:05:6d:
                    1a:ac:28:3c:70:56:a1:75:13:d5:99:ac:8b:6d:d7:
                    46:23:4b:e8:c2:b0:d2:b4:31:77:9b:f8:a4:06:7a:
                    3f:60:58:45:f0:82:be:74:7f:df:e0:f7:c0:ec:4a:
                    6e:b8:e2:f4:08:a5:32:27:e7:4b:9e:ed:a9:89:19:
                    b1:33:b1:4d:cd:bd:f2:d9:65:82:68:68:76:ef:5f:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4D:B7:85:5B:88:35:DB:B8:A8:FB:1D:D2:2A:AF:61:AF:07:A0:CD
            X509v3 Authority Key Identifier:
                keyid:84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/3133382e3132322e3132382e302f32322d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:cd:46:60:d9:84:5d:ed:2f:82:19:cd:2b:84:75:9e:49:27:
         22:b1:35:dd:28:5c:d2:13:72:9f:26:f9:d1:a3:f7:3f:72:67:
         97:ee:9d:1f:9a:cb:fb:af:e5:f7:e0:71:2e:33:9d:0f:9e:a1:
         f9:56:22:fc:06:ff:2c:bc:ba:62:de:03:4f:e5:9a:d4:51:2b:
         87:2d:2c:38:63:ba:94:5c:63:78:57:e2:53:be:46:6d:41:21:
         dd:0b:f1:d1:62:8b:a0:d0:75:1e:e8:89:26:ab:8c:2b:2a:fd:
         9c:a4:73:bb:c1:db:59:7c:86:75:37:5b:72:97:09:cb:d2:c4:
         96:32:df:da:f7:ea:9c:b0:56:06:c5:b2:58:c5:89:9b:7c:e3:
         8f:ad:46:d6:b7:01:4f:51:43:21:ed:26:24:b6:31:df:30:94:
         1d:03:6c:8f:34:b5:e3:c9:fc:d1:e9:12:9a:e0:6c:aa:e1:27:
         e0:ff:c5:37:59:d0:36:66:e5:a5:05:f3:85:53:d6:a4:e5:d5:
         3d:5c:25:35:ce:27:41:d7:e7:67:6c:ca:73:a7:37:d3:66:7c:
         7c:cc:3a:82:69:39:2f:fd:65:04:2c:bb:f0:55:b1:33:20:e1:
         f2:51:64:7b:66:26:be:da:6d:5b:2f:ce:75:05:4d:d0:7c:ae:
         ea:40:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org