Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3232392e302f32342d3234203d3e203238343631.roa
File:                     3133382e3131372e3232392e302f32342d3234203d3e203238343631.roa (raw, json)
Hash identifier:          hd5RwFA8v1Lxg1/4mqoAClGjPlKAPIwXxXObq58L6S8=
Subject key identifier:   AB:4C:46:B2:E4:32:77:1E:FE:B1:75:8F:14:47:85:F7:D5:EA:DB:CA
Certificate issuer:       /CN=3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6
Certificate serial:       16C2C762FBA7E3F70365BE425B332E690102190F
Authority key identifier: 36:32:90:0A:5F:3F:72:A0:6C:F6:EC:B7:B9:D3:B1:E3:35:6D:A9:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3232392e302f32342d3234203d3e203238343631.roa
Signing time:             Mon 20 May 2024 18:35:00 +0000
ROA not before:           Mon 20 May 2024 18:30:00 +0000
ROA not after:            Mon 19 May 2025 18:35:00 +0000
asID:                     28461
IP address blocks:        138.117.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c2:c7:62:fb:a7:e3:f7:03:65:be:42:5b:33:2e:69:01:02:19:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6
        Validity
            Not Before: May 20 18:30:00 2024 GMT
            Not After : May 19 18:35:00 2025 GMT
        Subject: CN=AB4C46B2E432771EFEB1758F144785F7D5EADBCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:a5:f5:29:31:61:27:11:d9:b3:df:a6:66:
                    44:14:5f:b4:62:14:8a:0d:9b:01:3d:84:26:73:16:
                    c6:83:69:dc:05:49:db:43:da:8b:94:4a:67:7f:4c:
                    e8:2e:9e:8d:c2:22:00:50:ba:59:cf:c9:2d:e5:c4:
                    2a:18:95:6f:2e:03:3c:6e:b6:55:12:b1:a4:51:e3:
                    c7:30:a8:82:c2:ef:82:33:83:14:41:d4:0c:ea:d3:
                    18:c8:e0:5d:49:94:c2:90:a1:02:2a:18:74:76:b0:
                    95:6b:a2:df:e3:a1:93:61:34:fb:74:23:c3:cc:90:
                    94:5c:70:f3:32:e2:95:22:c9:39:aa:64:59:98:2f:
                    0b:30:c8:79:25:20:b1:20:1d:c7:86:24:d4:d0:3b:
                    bd:28:cb:30:75:40:75:4d:ac:65:01:80:a9:ef:cb:
                    81:32:ca:58:d5:b9:ac:b9:21:6a:20:c8:83:62:1d:
                    f0:80:64:ac:19:7a:e9:22:86:62:98:17:8d:49:8d:
                    db:d7:88:e9:ac:03:a3:21:d8:48:50:e4:31:81:af:
                    d2:0e:a0:a0:63:25:12:a4:f3:7c:d3:18:dc:e7:ed:
                    44:a5:cb:78:6a:96:14:9a:ed:b5:52:bb:71:3d:d7:
                    f4:36:01:52:18:eb:4f:28:75:b5:08:6e:2d:6e:fe:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4C:46:B2:E4:32:77:1E:FE:B1:75:8F:14:47:85:F7:D5:EA:DB:CA
            X509v3 Authority Key Identifier:
                keyid:36:32:90:0A:5F:3F:72:A0:6C:F6:EC:B7:B9:D3:B1:E3:35:6D:A9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3232392e302f32342d3234203d3e203238343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ff:98:46:4c:96:4d:08:92:62:6d:9c:f7:95:6e:4f:b6:8f:
         6d:33:6e:3b:40:73:e8:ad:65:35:d8:6a:d7:07:aa:df:30:d0:
         9d:97:d3:62:15:a5:01:2f:df:8b:44:8f:79:e4:a8:27:b6:e9:
         fb:08:4a:5b:c7:2e:96:52:e8:51:30:c6:b0:b1:ec:75:ba:e4:
         40:b8:6c:fb:45:42:fb:a8:a7:f4:d6:55:9b:66:99:f1:2e:f4:
         f4:11:c6:6a:29:fd:ad:ad:55:57:ba:54:1c:a2:c6:d9:70:2c:
         b7:32:67:36:bb:e0:17:55:ed:ea:53:66:37:78:4b:89:ad:6f:
         1a:b8:3f:8f:61:09:81:aa:e6:c9:f2:d8:c7:4f:8f:04:51:cc:
         0e:88:b2:6c:2d:fb:43:96:41:3c:be:0d:07:54:29:c7:3c:e6:
         f9:2e:db:22:8b:7f:69:5d:ab:44:2f:75:84:75:79:20:4b:78:
         3f:e5:c0:b9:f7:e7:fb:4b:b5:59:ae:85:83:bf:02:e7:6f:86:
         4f:73:5a:26:50:94:70:77:0f:e9:0a:ae:8a:03:9c:dd:e3:bc:
         3d:67:75:62:4c:ac:f1:4b:a2:2c:89:bb:59:09:84:c0:bf:7f:
         1c:83:1d:73:b7:d5:75:87:3e:47:7e:9f:c3:24:23:a8:a5:8b:
         69:62:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org