Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/3133382e3131382e3135362e302f32322d3234203d3e20323632323532.roa
File:                     3133382e3131382e3135362e302f32322d3234203d3e20323632323532.roa (raw, json)
Hash identifier:          at59tf11IKDUUfQiKyycr4+jDft1SyUYbKLiMOAw2lk=
Subject key identifier:   93:6D:CB:04:F6:C0:B6:AD:4C:05:1B:B7:38:B3:44:E7:FC:E0:2F:7F
Certificate issuer:       /CN=63BA9E74A00603CC3A1DA22BC68F56A433368CCF
Certificate serial:       38A59F5C6A05D35742E107B67EB31CFDF457ED5C
Authority key identifier: 63:BA:9E:74:A0:06:03:CC:3A:1D:A2:2B:C6:8F:56:A4:33:36:8C:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/3133382e3131382e3135362e302f32322d3234203d3e20323632323532.roa
Signing time:             Tue 05 Mar 2024 17:59:32 +0000
ROA not before:           Tue 05 Mar 2024 17:54:32 +0000
ROA not after:            Tue 04 Mar 2025 17:59:32 +0000
asID:                     262252
IP address blocks:        138.118.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a5:9f:5c:6a:05:d3:57:42:e1:07:b6:7e:b3:1c:fd:f4:57:ed:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63BA9E74A00603CC3A1DA22BC68F56A433368CCF
        Validity
            Not Before: Mar  5 17:54:32 2024 GMT
            Not After : Mar  4 17:59:32 2025 GMT
        Subject: CN=936DCB04F6C0B6AD4C051BB738B344E7FCE02F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:5f:cc:37:cd:2b:d5:4b:04:31:d9:33:b1:
                    a5:1a:77:c5:59:7f:6a:2e:a4:a7:3b:65:91:81:4a:
                    e2:26:74:ef:88:a9:4f:51:cf:b5:85:c2:c0:10:1a:
                    e3:73:f3:f9:fe:32:be:d8:37:a2:9a:3c:3b:f0:75:
                    44:8f:26:87:da:0c:00:f8:63:a7:fd:d3:cb:88:a1:
                    74:52:4d:df:71:d7:e7:f0:4c:a9:9a:b3:a2:f4:3f:
                    7e:b0:f2:a6:ca:31:f5:7a:73:69:59:43:09:3d:66:
                    9c:13:ad:f3:b1:ce:af:f4:e7:15:f8:d5:e6:ed:ff:
                    9c:8c:fe:e9:b9:bf:86:f3:de:4b:96:e8:2b:7d:15:
                    9b:e4:18:10:81:22:c5:fa:fa:9d:16:9a:af:95:f9:
                    3c:bb:64:f6:9f:58:db:3e:b6:68:8b:43:5d:6d:c8:
                    16:61:ff:d5:25:7a:41:89:bf:91:95:32:09:bc:d1:
                    29:ff:bf:3b:55:35:4c:1e:a1:f3:01:b8:1d:32:ce:
                    c7:4b:9a:af:58:a3:f5:04:84:cc:09:29:09:eb:88:
                    51:d5:ce:5e:9a:4d:12:7e:3b:77:98:70:e1:a2:c8:
                    2b:0a:ae:69:8a:0d:ce:f5:46:80:ad:1f:3f:cc:ed:
                    39:8b:1c:e3:94:b6:fb:c5:8e:2d:cb:45:0b:1d:f7:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6D:CB:04:F6:C0:B6:AD:4C:05:1B:B7:38:B3:44:E7:FC:E0:2F:7F
            X509v3 Authority Key Identifier:
                keyid:63:BA:9E:74:A0:06:03:CC:3A:1D:A2:2B:C6:8F:56:A4:33:36:8C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63BA9E74A00603CC3A1DA22BC68F56A433368CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B65F1297A485164E174276C3E52B531C1A3C52B7D92C5CA05C7F962EAD46B359/0/3133382e3131382e3135362e302f32322d3234203d3e20323632323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:24:3f:e7:87:d8:9b:c5:88:b9:5a:c5:9f:cd:04:9f:bc:b4:
         7c:4e:b0:0c:42:77:65:0d:c9:f6:68:0d:c0:4b:c1:a4:80:47:
         29:fa:3d:d8:97:2b:2f:4d:db:32:32:c3:11:b3:21:07:2d:b4:
         fc:41:b1:1d:d4:b5:51:21:62:e0:5a:bb:f3:8f:a4:76:3e:e1:
         1b:3f:d2:e8:97:45:dd:fc:69:e7:cf:26:e6:1a:f0:70:21:c2:
         b7:6c:dc:3e:0c:e6:12:90:2f:37:48:81:de:7a:c9:6a:ad:a2:
         ce:61:2e:b5:6c:66:94:29:8e:db:19:e8:39:e4:06:04:08:e7:
         c8:cb:05:3d:c0:a5:10:85:43:c4:8c:7e:a6:75:35:05:da:f3:
         98:0c:9a:27:c2:d2:51:65:bb:be:73:42:e1:76:26:f2:4e:db:
         03:e3:e2:32:20:ad:89:31:01:d4:e7:57:e7:3d:a1:e3:3e:53:
         11:f8:ba:d0:32:38:24:cd:98:0e:b9:b3:8f:55:06:d7:54:9d:
         e6:82:de:de:22:4c:89:b1:57:5a:9c:40:36:91:c0:95:9c:30:
         53:f6:62:b0:a2:2a:35:30:1b:88:79:10:44:9b:61:9a:58:07:
         5e:38:4f:68:0b:24:42:96:3d:69:14:9f:c6:eb:76:7f:fa:fd:
         33:a9:8d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org