Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3133382e39372e3137362e302f32322d3234203d3e203532343336.roa
File:                     3133382e39372e3137362e302f32322d3234203d3e203532343336.roa (raw, json)
Hash identifier:          gYMj8L9k0G+h7qO+ouNpsjH1KpkGnUraXvrdidVB7VI=
Subject key identifier:   72:87:75:22:CE:D7:C8:CB:0F:22:1A:A4:CD:49:7F:E1:99:07:E0:D4
Certificate issuer:       /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial:       6AA3DCDFD7DA8718F15165DA3C696278EBC1E861
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3133382e39372e3137362e302f32322d3234203d3e203532343336.roa
Signing time:             Tue 05 Mar 2024 18:00:13 +0000
ROA not before:           Tue 05 Mar 2024 17:55:13 +0000
ROA not after:            Tue 04 Mar 2025 18:00:13 +0000
asID:                     52436
IP address blocks:        138.97.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 06:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a3:dc:df:d7:da:87:18:f1:51:65:da:3c:69:62:78:eb:c1:e8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
        Validity
            Not Before: Mar  5 17:55:13 2024 GMT
            Not After : Mar  4 18:00:13 2025 GMT
        Subject: CN=72877522CED7C8CB0F221AA4CD497FE19907E0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:aa:7b:c4:81:3e:e6:04:cc:60:ee:99:1a:47:
                    4c:ae:26:e4:af:88:d0:9e:65:fd:b9:3e:98:41:d7:
                    13:25:ce:bc:7d:88:f8:45:ec:48:6a:d0:ba:59:c4:
                    62:e6:d3:c6:12:08:5e:da:aa:54:3d:53:b0:c0:8d:
                    86:30:e8:f0:eb:53:da:06:d4:7e:65:b7:d6:79:3e:
                    05:29:34:5d:df:2d:9d:73:bc:34:12:74:85:1d:f6:
                    21:c6:1d:b9:30:96:ec:73:20:a8:a2:b4:88:26:88:
                    98:bd:c9:94:25:00:d3:36:34:86:53:2e:c9:37:eb:
                    17:71:8f:8d:61:72:35:6a:14:a6:e8:df:5f:f7:ed:
                    8b:fb:36:0f:0d:8f:49:69:13:0c:b8:ba:a8:e9:52:
                    94:ec:80:ab:c3:66:bd:43:5e:7b:bf:09:cd:13:04:
                    dc:42:25:9f:82:f2:52:11:34:9b:3b:58:99:15:cd:
                    f2:54:00:a4:57:a1:b9:23:16:aa:57:31:e0:59:9e:
                    a9:b9:1c:9c:e4:1c:94:66:86:b4:2c:16:71:04:57:
                    e0:e9:7f:34:4e:e2:8f:f4:35:5f:d5:69:25:4d:23:
                    bd:31:55:5b:2c:57:3e:0b:c8:a6:24:cf:8f:c4:e4:
                    1d:09:42:4a:c7:59:2e:7b:c7:d8:63:2c:d4:82:b0:
                    d1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:87:75:22:CE:D7:C8:CB:0F:22:1A:A4:CD:49:7F:E1:99:07:E0:D4
            X509v3 Authority Key Identifier:
                keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3133382e39372e3137362e302f32322d3234203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:a7:43:01:42:70:64:72:c0:d7:6f:f5:b0:72:6b:cb:fe:1b:
         62:77:b3:c8:5d:ed:fd:3d:73:f2:df:6e:06:67:ca:56:21:bd:
         33:9a:72:14:d2:df:55:f8:97:a0:5c:c8:ab:b6:66:e9:2c:2d:
         dc:94:b3:c6:fe:fa:18:40:58:82:d2:ac:24:f2:4d:fe:da:60:
         79:30:be:4d:ec:7d:3a:75:fb:3d:c1:b4:11:bb:70:c3:9c:fc:
         e7:66:96:83:f9:8d:c4:da:57:d6:4f:3a:5f:42:dc:c9:05:a4:
         4d:91:99:7a:8b:a4:2a:04:97:fc:4a:27:5d:51:7b:ec:eb:99:
         b4:e6:ac:4e:3c:ce:6b:e8:43:0f:df:0d:6e:4a:7b:77:3b:45:
         1d:ea:58:7a:ba:bd:c5:20:ce:54:26:15:5d:fe:2e:b5:db:e6:
         cd:77:f2:8b:1a:dd:dd:56:04:ec:6a:2a:e9:f7:e8:13:5b:2a:
         b2:1b:87:2e:41:99:3c:8f:25:21:30:ca:ec:53:b1:94:be:0f:
         c1:62:26:0a:7e:dd:7a:d9:37:0c:d4:79:e4:92:76:b3:6a:55:
         f1:af:e8:2b:90:47:08:64:84:c6:12:92:f7:1a:49:62:57:c6:
         33:e3:ac:c5:b7:eb:54:81:0b:5f:c2:f3:35:e5:57:56:a7:7c:
         22:31:cd:b9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaqPc39fahxjxUWXaPGlieOvB6GEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEREOEM4ODZFN0Q2NDFFNTUzNzAzREM1RTE5Njk1N0Yx
MzY4OTAyQzAeFw0yNDAzMDUxNzU1MTNaFw0yNTAzMDQxODAwMTNaMDMxMTAvBgNV
BAMTKDcyODc3NTIyQ0VEN0M4Q0IwRjIyMUFBNENENDk3RkUxOTkwN0UwRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeqnvEgT7mBMxg7pkaR0yuJuSv
iNCeZf25PphB1xMlzrx9iPhF7Ehq0LpZxGLm08YSCF7aqlQ9U7DAjYYw6PDrU9oG
1H5lt9Z5PgUpNF3fLZ1zvDQSdIUd9iHGHbkwluxzIKiitIgmiJi9yZQlANM2NIZT
Lsk36xdxj41hcjVqFKbo31/37Yv7Ng8Nj0lpEwy4uqjpUpTsgKvDZr1DXnu/Cc0T
BNxCJZ+C8lIRNJs7WJkVzfJUAKRXobkjFqpXMeBZnqm5HJzkHJRmhrQsFnEEV+Dp
fzRO4o/0NV/VaSVNI70xVVssVz4LyKYkz4/E5B0JQkrHWS57x9hjLNSCsNFtAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcod1Is7XyMsPIhqkzUl/4ZkH4NQwHwYDVR0j
BBgwFoAUDdjIhufWQeVTcD3F4ZaVfxNokCwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQjU1NEM0NzFBNzBBQjczQjk2NUIxNTY5QUE0NTRGQTMy
MTFGRDE0MkM4MzFBRUUxRUFGODlGQTBGRDEyRUI4LzAvMEREOEM4ODZFN0Q2NDFF
NTUzNzAzREM1RTE5Njk1N0YxMzY4OTAyQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wREQ4Qzg4NkU3RDY0MUU1NTM3
MDNEQzVFMTk2OTU3RjEzNjg5MDJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkI1NTRDNDcxQTcwQUI3M0I5NjVCMTU2OUFBNDU0RkEzMjExRkQxNDJD
ODMxQUVFMUVBRjg5RkEwRkQxMkVCOC8wLzMxMzMzODJlMzkzNzJlMzEzNzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzMzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAophsDAN
BgkqhkiG9w0BAQsFAAOCAQEAoadDAUJwZHLA12/1sHJry/4bYnezyF3t/T1z8t9u
BmfKViG9M5pyFNLfVfiXoFzIq7Zm6Swt3JSzxv76GEBYgtKsJPJN/tpgeTC+Tex9
OnX7PcG0Ebtww5z852aWg/mNxNpX1k86X0LcyQWkTZGZeoukKgSX/EonXVF77OuZ
tOasTjzOa+hDD98Nbkp7dztFHepYerq9xSDOVCYVXf4utdvmzXfyixrd3VYE7Goq
6ffoE1sqshuHLkGZPI8lITDK7FOxlL4PwWImCn7detk3DNR55JJ2s2pV8a/oK5BH
CGSExhKS9xpJYlfGM+OsxbfrVIELX8LzNeVXVqd8IjHNuQ==
-----END CERTIFICATE-----
Generated at Wed May 15 05:59:15 2024 by rpki-client on console-fra.rpki-client.org