Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/3133382e35392e31322e302f32322d3232203d3e203237373530.roa
File:                     3133382e35392e31322e302f32322d3232203d3e203237373530.roa (raw, json)
Hash identifier:          mRnjBSS/cavN8Z+QRc+t4+3i/WhDpow4H5sSS6jcjZs=
Subject key identifier:   78:36:06:15:1A:CC:E1:4E:18:A3:65:1B:DD:5E:39:1C:27:78:7B:45
Certificate issuer:       /CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
Certificate serial:       30D122FE5A04D58BF45491240C146E6780481A03
Authority key identifier: A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/3133382e35392e31322e302f32322d3232203d3e203237373530.roa
Signing time:             Tue 05 Mar 2024 17:43:40 +0000
ROA not before:           Tue 05 Mar 2024 17:38:40 +0000
ROA not after:            Tue 04 Mar 2025 17:43:40 +0000
asID:                     27750
IP address blocks:        138.59.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d1:22:fe:5a:04:d5:8b:f4:54:91:24:0c:14:6e:67:80:48:1a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A92A99A5E63D1DE5AF4E61219C731D7933DCC394
        Validity
            Not Before: Mar  5 17:38:40 2024 GMT
            Not After : Mar  4 17:43:40 2025 GMT
        Subject: CN=783606151ACCE14E18A3651BDD5E391C27787B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a2:2e:e1:32:fd:a9:61:a3:c5:d8:f4:06:d5:
                    8a:dc:94:ac:21:bd:f9:e6:0b:64:7f:46:a4:e8:a0:
                    ef:75:85:1d:ff:af:a7:be:b1:7a:3d:ff:28:a6:ba:
                    00:e5:8d:b4:8d:19:46:17:e8:5f:c5:5c:41:1f:cb:
                    49:fd:94:40:41:02:04:51:1d:49:cd:e9:3e:9b:81:
                    d6:aa:76:f4:03:9c:7f:2b:95:9c:69:4f:c8:7f:9d:
                    9c:7a:da:95:26:d6:fe:a5:ba:4d:92:84:d5:a2:8f:
                    26:fb:5f:26:fa:18:b1:f2:e1:cf:63:ca:55:bd:e3:
                    f4:9f:d0:13:f6:b8:b8:0d:6e:71:62:4f:9e:65:7f:
                    83:6d:a4:ad:c4:44:c1:b0:cb:90:e9:06:c8:fb:14:
                    94:52:d4:2e:65:af:5f:f4:73:f0:a4:41:18:f5:ca:
                    5d:8a:0e:70:a5:04:a8:a6:1a:b5:0c:9e:d5:78:a7:
                    e8:11:fc:de:b1:eb:9e:cc:7a:10:4a:55:92:a4:cd:
                    84:54:0c:29:5f:fc:81:46:c2:21:dc:ae:74:aa:aa:
                    91:1c:a7:36:40:17:a0:e1:30:33:fd:97:11:fc:04:
                    f7:5c:c2:14:03:d5:43:60:cf:83:9c:49:9c:d9:05:
                    56:2e:ae:76:b8:ab:b7:c0:27:aa:f8:be:ed:87:a8:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:36:06:15:1A:CC:E1:4E:18:A3:65:1B:DD:5E:39:1C:27:78:7B:45
            X509v3 Authority Key Identifier:
                keyid:A9:2A:99:A5:E6:3D:1D:E5:AF:4E:61:21:9C:73:1D:79:33:DC:C3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A92A99A5E63D1DE5AF4E61219C731D7933DCC394.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE2E0AC7349FAFDE7579E0C2A1289931808EA8BBA9850FB886B1FA77F91CE693/0/3133382e35392e31322e302f32322d3232203d3e203237373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:05:db:42:64:bf:34:38:e5:80:84:05:4f:d6:cb:db:3b:90:
         19:26:dd:c7:7d:e9:fb:67:99:24:9f:f3:86:fb:2e:f1:5a:b3:
         85:af:10:ad:77:11:64:ca:6f:b8:b9:db:55:bb:49:7b:d9:24:
         72:9e:f3:e5:17:e7:5e:74:c4:0d:62:dd:a8:89:04:6d:87:af:
         a0:fa:7f:fd:77:6c:56:8b:60:a6:f5:1d:c3:3d:af:60:56:ad:
         dc:e0:1a:97:f7:20:c5:f8:8c:2e:1e:34:d4:ea:c0:ac:78:84:
         57:89:73:f7:13:06:81:eb:b3:49:d3:11:5f:1d:c5:89:89:ef:
         77:59:12:4a:44:e4:e1:d4:7e:0d:e6:26:e1:fd:fb:d6:84:50:
         7d:3c:77:b2:98:2e:8b:88:68:fa:e8:36:d6:2c:ee:59:f5:3c:
         25:2a:70:fd:78:d0:8d:24:c4:4e:4d:13:a6:ba:fa:19:10:33:
         ac:b6:68:af:34:f0:9f:e0:26:f0:3f:fc:6b:ba:76:4a:fd:42:
         76:01:8d:5d:4d:e1:4d:7f:69:5b:f8:be:38:81:a6:5b:cc:89:
         ae:a4:65:6c:3c:a8:06:a9:c4:da:4c:57:63:c3:3a:e6:49:0a:
         46:0d:5d:95:02:ef:ed:1e:ab:67:b0:61:f0:16:fa:b1:bc:a4:
         3a:b5:b5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org