Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38372e302f32342d3234203d3e20323635363838.roa
File:                     3133382e3131372e38372e302f32342d3234203d3e20323635363838.roa (raw, json)
Hash identifier:          1pfy2cHssGE76DpXFbZUJuIRHb2OvQXzrjmld7ifI7A=
Subject key identifier:   6B:50:1E:72:78:26:73:DA:EE:EC:D3:79:ED:7B:93:A5:02:77:24:20
Certificate issuer:       /CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
Certificate serial:       40BB8FD602369D58F10155972E45E6E8251C1F3E
Authority key identifier: EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38372e302f32342d3234203d3e20323635363838.roa
Signing time:             Fri 05 Apr 2024 15:15:00 +0000
ROA not before:           Fri 05 Apr 2024 15:10:00 +0000
ROA not after:            Fri 04 Apr 2025 15:15:00 +0000
asID:                     265688
IP address blocks:        138.117.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:bb:8f:d6:02:36:9d:58:f1:01:55:97:2e:45:e6:e8:25:1c:1f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDDE091CD51F6714942A5267FBC4B80AFB4E022
        Validity
            Not Before: Apr  5 15:10:00 2024 GMT
            Not After : Apr  4 15:15:00 2025 GMT
        Subject: CN=6B501E72782673DAEEECD379ED7B93A502772420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cb:09:6d:fe:22:08:0c:2b:5b:f8:45:c7:82:
                    37:3a:e6:01:f4:e9:c9:f2:3e:43:6d:aa:59:b4:cd:
                    c5:60:31:35:d6:2d:e6:bb:c6:6f:b1:06:83:37:5f:
                    92:72:90:ee:e9:a3:ab:0d:ca:9e:c7:64:d9:99:99:
                    fc:c9:dc:d9:50:99:64:86:7a:ba:45:ad:e7:ac:c6:
                    6d:2d:32:bd:85:79:51:cf:fd:1d:0b:3b:72:1c:3b:
                    da:70:42:97:11:83:a1:29:21:84:72:82:8a:26:2f:
                    61:a1:57:eb:12:27:ea:54:37:b8:a8:0f:ce:1e:d3:
                    d2:f3:d5:2c:81:0e:6b:4b:5c:72:a8:27:8e:15:11:
                    51:fa:37:31:91:69:c6:58:27:56:ce:d3:c6:73:e1:
                    e5:7a:dd:33:eb:8c:d1:68:b6:0a:ed:6e:39:69:27:
                    15:a3:5a:fc:2b:ee:f7:4d:5a:08:9d:b9:12:65:41:
                    8b:30:e7:15:25:d7:9c:fa:96:15:53:2f:fc:df:25:
                    76:6d:65:ca:00:59:65:c2:f8:e8:ec:34:bc:bb:73:
                    fc:50:7f:74:65:cc:b3:34:48:89:4d:ad:79:a8:60:
                    64:fc:1e:28:93:74:2c:5a:3a:bb:85:87:20:26:2f:
                    b1:73:98:52:2b:e2:69:bd:20:47:cb:9d:98:0e:b7:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:50:1E:72:78:26:73:DA:EE:EC:D3:79:ED:7B:93:A5:02:77:24:20
            X509v3 Authority Key Identifier:
                keyid:EB:DD:E0:91:CD:51:F6:71:49:42:A5:26:7F:BC:4B:80:AF:B4:E0:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBDDE091CD51F6714942A5267FBC4B80AFB4E022.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C10F84743706253A9E919BFC714C4D6DDC4E73D5DD27CD55DA27ADCDB862A15C/0/3133382e3131372e38372e302f32342d3234203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:62:a5:0d:fc:96:36:b9:79:d6:72:07:98:df:26:fd:45:92:
         33:21:e5:63:32:c4:65:e1:4a:21:4d:98:9c:7f:66:28:a7:12:
         f6:a7:7a:d0:86:29:19:af:b7:11:4e:e4:08:c9:01:a9:b1:2a:
         4a:f9:a5:87:53:f2:05:a5:e5:d7:ff:9c:d9:cb:ef:ac:9d:ea:
         7d:ba:65:e9:d9:e7:8c:54:bc:bb:ce:d3:9f:b2:ae:6d:65:86:
         f8:6b:28:7f:fb:dc:2c:7b:8a:ef:02:d5:f6:5a:38:5e:97:42:
         1f:dc:91:4f:48:f1:75:78:e8:ff:b4:1f:06:ea:a1:20:fe:a3:
         ac:0b:62:73:96:f2:77:7d:ca:59:3f:1d:aa:69:87:ed:81:e7:
         24:4c:cf:97:27:8f:bf:bb:21:27:f7:fa:27:3c:ab:09:7e:71:
         4a:98:b1:6a:c0:6d:aa:aa:79:71:c1:93:fc:4c:04:e0:af:9b:
         38:b1:2d:a7:f5:2b:f3:48:91:a7:b7:71:9f:53:82:d4:8b:d0:
         23:51:dc:36:01:a9:5d:ce:7e:f0:8d:0c:48:14:fc:c2:73:9f:
         10:08:06:f9:f8:16:50:1b:84:85:f6:39:98:7d:94:ab:6b:09:
         fe:85:c8:25:2f:7c:de:89:30:8c:c2:8c:84:f3:56:5e:71:49:
         23:67:51:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 04:27:08 2024 by rpki-client on console-ams.rpki-client.org