Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3137302e302f32342d3234203d3e20323633383333.roa
File:                     3133382e3235352e3137302e302f32342d3234203d3e20323633383333.roa (raw, json)
Hash identifier:          Ng2UhccDnGgHzvMEGMiqLn/yPttUz0n8gQMLZqNXDLs=
Subject key identifier:   55:FF:9F:71:C8:74:4E:51:5F:B2:11:8D:8B:32:3E:E3:74:77:20:C6
Certificate issuer:       /CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
Certificate serial:       72C9E49E652DA569073E961E963A7DDCE66C486F
Authority key identifier: 8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3137302e302f32342d3234203d3e20323633383333.roa
Signing time:             Fri 03 May 2024 10:25:00 +0000
ROA not before:           Fri 03 May 2024 10:20:00 +0000
ROA not after:            Fri 02 May 2025 10:25:00 +0000
asID:                     263833
IP address blocks:        138.255.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c9:e4:9e:65:2d:a5:69:07:3e:96:1e:96:3a:7d:dc:e6:6c:48:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
        Validity
            Not Before: May  3 10:20:00 2024 GMT
            Not After : May  2 10:25:00 2025 GMT
        Subject: CN=55FF9F71C8744E515FB2118D8B323EE3747720C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:fe:4a:48:13:04:e2:2c:f1:5e:03:1e:f5:
                    4e:30:7b:bd:fe:81:89:1d:92:a0:cc:73:28:9c:e1:
                    19:c5:dd:37:83:81:a2:97:83:2f:b8:6a:31:af:38:
                    bc:dd:39:3b:f5:c3:d6:4c:c1:84:8b:5d:8c:e1:42:
                    21:f8:ba:00:a6:f7:51:f6:e9:4d:c0:24:6c:8c:3e:
                    0f:3b:12:b4:72:cc:5f:14:ab:14:69:a8:69:00:4f:
                    85:ed:27:3d:65:36:0c:1d:70:c7:7b:af:91:d1:4a:
                    a4:60:15:6b:34:1e:bb:c4:10:cc:ad:c7:76:50:c1:
                    86:7b:94:03:cb:10:00:3f:bb:6a:1f:3e:7d:25:f5:
                    f9:b1:01:b3:5e:f9:97:2b:d0:6b:5d:ed:66:8b:dc:
                    65:a6:33:43:45:9c:35:a4:31:60:36:45:1e:9e:fd:
                    94:fc:1e:d7:b7:e6:92:b1:08:9c:87:be:e8:45:ca:
                    9b:06:ed:ba:d0:61:48:3f:d1:c9:db:32:39:4a:aa:
                    c8:09:9e:1b:29:c8:10:cb:eb:73:00:14:26:d6:8f:
                    9f:40:cb:ec:4d:73:75:ac:1d:b2:23:7e:78:2d:ce:
                    0d:9c:5f:88:21:c1:9d:cb:6a:3a:45:70:1d:dc:a1:
                    96:36:45:17:dc:5a:d7:90:91:53:8d:93:5a:f4:e3:
                    fb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FF:9F:71:C8:74:4E:51:5F:B2:11:8D:8B:32:3E:E3:74:77:20:C6
            X509v3 Authority Key Identifier:
                keyid:8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3137302e302f32342d3234203d3e20323633383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:21:fe:05:85:3e:38:80:9d:20:6a:9d:1e:a9:84:85:a5:87:
         21:fe:f0:22:da:36:87:de:fd:06:22:61:8c:03:bf:a1:df:d7:
         9b:33:c9:e3:2e:6c:ac:b6:50:35:04:b5:36:51:21:dd:55:35:
         48:7c:26:59:c1:d4:a4:43:8d:0b:24:ed:c8:52:f7:7f:b7:3a:
         13:31:15:5a:19:b6:bc:ec:e4:4b:bf:4d:c0:4d:5c:2d:a6:dc:
         21:49:63:9d:c3:5b:ea:7a:61:47:68:4b:fc:16:7c:bd:a7:c3:
         c2:55:b2:fe:10:f9:1a:05:a5:a1:31:ef:94:b0:d2:2b:64:05:
         23:eb:38:b2:d9:5e:68:7b:bc:8a:79:c2:09:64:60:41:d2:6e:
         f6:de:fd:0a:b5:ff:ad:ce:ca:e3:7b:cd:39:2e:76:3d:98:3a:
         e2:36:b9:a2:68:a5:aa:04:5b:b5:3b:86:a8:5e:21:44:14:12:
         f5:e5:f0:25:c0:47:58:6f:38:8d:c8:77:e5:76:d0:c5:90:2b:
         48:b4:10:c5:ab:49:f7:be:ee:8a:f6:6a:d3:e8:24:2e:b0:20:
         70:80:79:ea:ee:f2:4e:47:dc:a3:de:b4:66:7c:62:f2:ec:cb:
         c6:34:08:9d:67:86:09:4e:64:a7:44:98:f0:1d:10:c4:92:25:
         80:ab:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org