Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133382e3132312e3136382e302f32322d3232203d3e20323633373030.roa
File:                     3133382e3132312e3136382e302f32322d3232203d3e20323633373030.roa (raw, json)
Hash identifier:          yJVzCvimmxSqi1TDq+XrxJS/4LYaW4f7CQBS2STAFXo=
Subject key identifier:   16:A0:DA:69:9D:1A:D2:90:29:2C:FE:46:57:40:D9:19:A2:51:EA:12
Certificate issuer:       /CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
Certificate serial:       2E24B6F173C66A102FD27C942E9C2E0E29491B93
Authority key identifier: B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133382e3132312e3136382e302f32322d3232203d3e20323633373030.roa
Signing time:             Tue 05 Mar 2024 18:21:31 +0000
ROA not before:           Tue 05 Mar 2024 18:16:31 +0000
ROA not after:            Tue 04 Mar 2025 18:21:31 +0000
asID:                     263700
IP address blocks:        138.121.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:24:b6:f1:73:c6:6a:10:2f:d2:7c:94:2e:9c:2e:0e:29:49:1b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
        Validity
            Not Before: Mar  5 18:16:31 2024 GMT
            Not After : Mar  4 18:21:31 2025 GMT
        Subject: CN=16A0DA699D1AD290292CFE465740D919A251EA12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:c2:44:9c:7b:70:3f:5a:ba:57:ee:77:91:
                    1c:80:39:15:a6:2a:49:3e:e9:ba:17:b1:c5:6f:27:
                    39:ad:63:65:57:11:15:4c:99:d3:b8:32:a2:db:99:
                    f5:92:03:42:af:e6:14:23:b3:a0:a2:c5:04:38:cc:
                    76:30:b9:fa:ed:68:c7:4f:3a:a0:36:7c:9e:84:98:
                    78:98:0f:19:de:f5:03:cf:8e:41:52:a5:30:8f:0c:
                    90:c7:d5:78:50:2a:8e:a4:d5:57:5f:76:76:cc:24:
                    93:ba:49:15:cc:2e:be:c8:9a:59:ce:08:e6:aa:5e:
                    d4:f5:46:5b:d7:29:6d:c7:86:ae:56:f0:bd:4e:91:
                    fc:77:00:05:9b:30:d5:99:ce:f4:7c:c3:94:cd:4f:
                    f0:a9:fd:8e:43:80:89:08:01:5e:68:6e:bf:9d:78:
                    81:72:b7:54:e4:87:4b:16:f7:b1:60:f4:79:5e:30:
                    98:8e:95:08:f8:74:10:f7:99:09:a6:5d:02:4e:51:
                    aa:04:46:1f:6a:78:a1:24:8a:2b:22:79:dd:35:bb:
                    f0:36:71:63:bb:9c:d3:c3:2a:7e:79:86:d8:9a:25:
                    ef:30:5f:d9:2b:56:6d:c5:54:6f:31:99:70:0c:d4:
                    87:95:6d:ef:ba:bc:1d:5f:70:a6:c6:2c:4f:a3:a4:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A0:DA:69:9D:1A:D2:90:29:2C:FE:46:57:40:D9:19:A2:51:EA:12
            X509v3 Authority Key Identifier:
                keyid:B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133382e3132312e3136382e302f32322d3232203d3e20323633373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:32:63:89:7f:3e:fc:84:e8:36:b5:45:88:87:a1:64:e6:32:
         ab:e7:95:15:53:52:7c:d6:bb:1a:cc:1e:90:54:04:d8:7a:e8:
         c9:17:84:c5:06:4e:5e:82:18:5d:68:7a:c2:b8:16:a4:af:aa:
         2b:df:7f:c2:ad:22:91:db:cb:0f:cf:e6:52:01:d4:c4:47:e2:
         cf:b2:00:6b:e8:f1:26:ec:2b:31:41:6b:e1:5a:a3:cc:19:68:
         55:3e:ca:eb:69:a8:07:34:7b:c0:93:b6:ee:0c:19:fb:00:24:
         cb:e0:8d:d1:2b:f0:33:c1:1b:54:0e:ad:1c:60:56:24:57:e1:
         21:8d:4a:7b:96:bd:e1:c4:37:0e:a4:70:13:9d:8b:84:05:f3:
         33:d6:34:d4:7e:fa:1a:ed:12:d3:36:f5:41:38:c1:ac:69:77:
         34:4f:58:87:ed:37:13:f8:63:bc:37:16:a7:38:b6:d1:c3:bd:
         d1:0d:56:4e:75:63:48:cc:9e:da:85:8c:52:a0:42:5c:83:24:
         b5:38:74:56:ea:b0:62:e7:71:f6:04:65:5d:a3:48:e2:52:2a:
         bb:cf:63:6c:b7:49:55:a5:8e:6c:6a:69:8d:bc:67:fa:d1:9e:
         40:7d:0a:24:f1:94:90:05:ed:9d:a6:76:f4:1a:04:6a:26:9a:
         b0:0f:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:53 2024 by rpki-client on console-ams.rpki-client.org