Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38342e302f32332d3233203d3e20323635363838.roa
File:                     3133382e3131372e38342e302f32332d3233203d3e20323635363838.roa (raw, json)
Hash identifier:          pu5mWfrwjR+hDZ0PxCvJq4war1bikn0iMYVopK0hlLc=
Subject key identifier:   F6:7D:0E:C6:72:4D:F1:FF:00:74:27:E4:20:25:97:79:27:15:13:45
Certificate issuer:       /CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
Certificate serial:       7DD307A4DFC8320CD6F8DF86BB59B779CDAF5EE0
Authority key identifier: EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38342e302f32332d3233203d3e20323635363838.roa
Signing time:             Fri 05 Apr 2024 15:15:00 +0000
ROA not before:           Fri 05 Apr 2024 15:10:00 +0000
ROA not after:            Fri 04 Apr 2025 15:15:00 +0000
asID:                     265688
IP address blocks:        138.117.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d3:07:a4:df:c8:32:0c:d6:f8:df:86:bb:59:b7:79:cd:af:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
        Validity
            Not Before: Apr  5 15:10:00 2024 GMT
            Not After : Apr  4 15:15:00 2025 GMT
        Subject: CN=F67D0EC6724DF1FF007427E42025977927151345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:90:90:ef:d2:83:ac:54:08:00:09:9e:58:2a:
                    0d:f0:71:1b:33:c4:22:e9:94:a8:f3:dc:82:31:8d:
                    04:5b:3b:e3:79:cc:46:b5:3a:fe:84:05:7f:15:13:
                    ed:d5:89:1a:2e:cb:9c:b4:03:56:ae:aa:c5:5f:85:
                    6b:c8:2f:13:49:14:19:8f:6a:d4:a0:7f:b7:eb:4f:
                    a3:16:64:00:f3:49:7f:64:b1:47:08:b4:c9:78:42:
                    22:63:b5:05:f8:bb:c2:80:27:e4:82:5b:b8:3b:17:
                    32:5c:44:0e:53:a0:1f:b6:5a:da:3f:83:8d:11:33:
                    c0:27:59:d2:c0:ef:74:93:18:e9:db:29:bb:b8:7f:
                    05:b8:5b:ce:e8:b7:a4:0a:5a:cc:2b:26:65:f9:ce:
                    cc:a8:ed:8a:52:11:9a:27:d5:bd:86:0d:eb:d8:22:
                    9f:8e:39:8b:ab:90:6b:d3:20:9b:a9:6c:e2:de:ce:
                    fd:4f:16:0f:b2:07:c9:f2:b7:6a:7b:21:2b:5c:1c:
                    fc:d0:0c:f1:e5:ca:21:5f:b9:b9:1d:a4:b0:f7:70:
                    8b:54:f4:36:cf:85:ad:6d:8a:02:e1:13:36:00:27:
                    5a:7f:b4:b1:34:53:d8:c6:d8:78:56:a2:f2:ab:a8:
                    2a:50:1f:de:22:fe:5c:66:49:2a:3d:27:6d:cc:cd:
                    4e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7D:0E:C6:72:4D:F1:FF:00:74:27:E4:20:25:97:79:27:15:13:45
            X509v3 Authority Key Identifier:
                keyid:EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38342e302f32332d3233203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:00:f9:c8:27:c4:eb:66:aa:16:7e:4f:5f:19:5f:39:f0:07:
         62:db:e0:8e:ce:82:2a:d1:1f:9f:ee:48:e2:96:ee:09:99:52:
         0b:fd:24:f0:cd:62:ca:44:a4:86:54:40:57:8f:16:74:cb:f2:
         be:4b:d0:3a:94:ab:32:ee:59:6f:a6:fd:ef:6e:79:3f:c7:80:
         59:01:0e:c3:ad:a8:7a:45:7e:5d:54:4c:ad:72:5e:22:47:84:
         5d:b3:5e:7a:95:75:02:ba:0e:c9:dd:9f:95:0f:01:fd:c0:8e:
         cb:d1:7b:64:ab:7b:b7:23:1d:63:7e:67:7a:7f:5b:37:9b:c8:
         49:1a:b0:88:6e:ab:83:7d:a4:92:d2:ad:46:a6:30:cb:51:2a:
         a5:ac:19:99:3a:27:4f:9b:6f:c6:6a:df:15:07:18:f5:bd:d4:
         3c:a0:7e:82:f8:05:ba:66:cb:4c:03:95:33:af:fa:d6:d7:d0:
         86:70:a9:4a:2b:59:c3:d3:6f:da:56:11:fc:1e:fd:af:c0:47:
         af:aa:2d:1b:6e:0d:db:b4:a8:c2:03:7d:46:41:70:94:9d:7e:
         d0:13:c0:1c:72:78:07:ff:20:59:a0:15:1f:01:50:46:f2:1f:
         5f:de:f3:2a:45:f9:79:e7:1d:92:b1:17:9f:6a:9b:6b:18:1d:
         43:65:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 04:27:08 2024 by rpki-client on console-ams.rpki-client.org