Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/3133382e3235352e3130302e302f32322d3234203d3e20323633373032.roa
File:                     3133382e3235352e3130302e302f32322d3234203d3e20323633373032.roa (raw, json)
Hash identifier:          O9NGAmab08wZRPN31gn6dJ0eWwj3E/lZkIATNFgMLl0=
Subject key identifier:   53:D5:F5:E2:4D:0B:71:CD:A3:CF:EC:EE:47:76:A3:D1:E5:E4:03:F6
Certificate issuer:       /CN=6E90D630525F8D2B3768945D2D18476B244030E8
Certificate serial:       02AB97765CBE6B4E2D7A408EFF3EF455D8149222
Authority key identifier: 6E:90:D6:30:52:5F:8D:2B:37:68:94:5D:2D:18:47:6B:24:40:30:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/3133382e3235352e3130302e302f32322d3234203d3e20323633373032.roa
Signing time:             Tue 05 Mar 2024 17:57:11 +0000
ROA not before:           Tue 05 Mar 2024 17:52:11 +0000
ROA not after:            Tue 04 Mar 2025 17:57:11 +0000
asID:                     263702
IP address blocks:        138.255.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ab:97:76:5c:be:6b:4e:2d:7a:40:8e:ff:3e:f4:55:d8:14:92:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E90D630525F8D2B3768945D2D18476B244030E8
        Validity
            Not Before: Mar  5 17:52:11 2024 GMT
            Not After : Mar  4 17:57:11 2025 GMT
        Subject: CN=53D5F5E24D0B71CDA3CFECEE4776A3D1E5E403F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:90:72:dc:05:b3:c3:5c:2c:28:4a:3c:54:b2:
                    e3:a2:70:a7:3d:36:18:a4:c5:6f:9c:48:76:ab:9f:
                    7b:44:6c:b6:aa:93:26:1f:9e:7c:19:bc:a0:f8:bf:
                    c2:f0:e1:44:33:52:8e:19:10:fa:60:19:05:72:9b:
                    4f:e4:db:99:47:0c:ee:05:ac:e0:24:14:48:f0:e6:
                    cc:f9:90:ad:3b:ed:c8:c8:79:4b:8a:81:93:b9:b0:
                    b5:dd:c1:1f:56:48:6c:68:c6:43:d7:2b:fc:30:91:
                    c2:38:85:4d:d9:72:ee:fd:31:49:f6:94:1d:09:f0:
                    72:be:40:0d:e6:7a:b9:19:d3:51:b1:13:26:13:8c:
                    52:c6:0d:b1:05:26:cd:d9:89:80:9b:c3:f1:b3:44:
                    77:85:f8:f7:25:69:25:87:5a:b0:db:37:79:e4:9e:
                    c2:b0:0f:9e:58:3f:55:8c:79:49:da:9c:73:46:e7:
                    74:f6:50:69:a0:0c:33:62:04:e1:57:c9:45:69:27:
                    fe:5c:d1:92:4f:d8:18:bc:d8:bd:7b:9b:f4:04:e0:
                    1b:ee:7c:e9:fa:90:b1:cf:31:6d:99:e9:30:e6:98:
                    b0:95:cf:43:d0:28:ad:ed:cf:29:94:4f:e9:23:6b:
                    55:64:f9:6c:b4:d0:ca:ba:96:79:5c:5f:87:56:f8:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D5:F5:E2:4D:0B:71:CD:A3:CF:EC:EE:47:76:A3:D1:E5:E4:03:F6
            X509v3 Authority Key Identifier:
                keyid:6E:90:D6:30:52:5F:8D:2B:37:68:94:5D:2D:18:47:6B:24:40:30:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/6E90D630525F8D2B3768945D2D18476B244030E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E90D630525F8D2B3768945D2D18476B244030E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBF53C8DE4ABD1D5E6B5CBE67FC7AC179E24B68E23837A483B3EB4D595604C8A/0/3133382e3235352e3130302e302f32322d3234203d3e20323633373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:78:b1:6f:e6:39:42:47:1b:df:a5:db:aa:6f:15:ef:8f:f6:
         e7:83:47:bd:f9:40:5c:aa:03:98:51:c5:c7:8a:25:70:37:77:
         49:84:ac:1c:48:5a:2a:98:22:1d:73:bc:cf:29:55:aa:f5:64:
         7b:a7:d0:dd:40:9c:19:f4:e8:9a:24:8a:78:7c:c3:20:97:68:
         d4:e7:52:eb:38:56:7c:68:b3:13:e0:43:77:73:f7:89:b2:29:
         fe:31:dc:37:ee:e6:2c:dd:50:ab:df:e0:f8:96:be:54:ed:87:
         31:52:9e:cf:94:c2:49:f1:e1:34:7c:ee:42:77:44:d0:2b:d2:
         ba:da:d2:00:3d:81:25:fa:31:97:d0:f4:4e:fd:18:4b:c2:17:
         20:83:61:b6:c8:d9:e1:5f:c3:61:19:4f:d1:22:24:e0:ea:b3:
         0b:ec:e3:4d:19:f6:20:a6:d3:27:e3:5e:62:f3:63:c6:f1:ff:
         05:95:f5:8d:c8:3a:81:68:91:58:c4:4f:c1:0d:95:a0:ff:de:
         7b:72:fc:29:09:22:02:eb:a5:54:fe:4d:65:36:80:c1:a9:46:
         b0:39:e7:81:8e:36:57:8e:e5:d1:9d:fc:ee:63:67:11:f0:dd:
         c0:78:9d:6d:97:1a:fa:d1:1a:6f:da:31:27:a1:62:82:79:6e:
         ec:6d:47:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:33:26 2024 by rpki-client on console-fra.rpki-client.org