Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3130382e302f32332d3234203d3e20323633373935.roa
File:                     3133382e3230342e3130382e302f32332d3234203d3e20323633373935.roa (raw, json)
Hash identifier:          pTfUS2+v2QCOAqP8EAhY5G2L4sTiJMfTXXGkzmW/zdk=
Subject key identifier:   CF:8B:14:FE:D7:91:6B:59:A1:4B:B7:F3:A7:CD:14:BE:A4:65:EF:02
Certificate issuer:       /CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
Certificate serial:       0D86257B6700501239536C411C7A1A6841CD3205
Authority key identifier: 59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3130382e302f32332d3234203d3e20323633373935.roa
Signing time:             Tue 05 Mar 2024 18:00:04 +0000
ROA not before:           Tue 05 Mar 2024 17:55:04 +0000
ROA not after:            Tue 04 Mar 2025 18:00:04 +0000
asID:                     263795
IP address blocks:        138.204.108.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:86:25:7b:67:00:50:12:39:53:6c:41:1c:7a:1a:68:41:cd:32:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
        Validity
            Not Before: Mar  5 17:55:04 2024 GMT
            Not After : Mar  4 18:00:04 2025 GMT
        Subject: CN=CF8B14FED7916B59A14BB7F3A7CD14BEA465EF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:20:eb:01:bb:c0:1f:02:7a:db:23:f5:45:
                    f4:45:55:c7:22:92:9c:be:be:2a:75:3f:85:02:1d:
                    c0:8d:f5:13:2b:46:49:f9:30:11:4b:88:f6:b9:33:
                    7d:bf:f3:57:77:fd:df:98:0b:22:90:90:4e:2f:06:
                    0c:26:b2:16:b8:d9:25:9e:a5:b5:b8:b4:19:1f:51:
                    a3:18:e4:7d:a3:71:99:7f:12:42:ce:2d:63:1f:be:
                    48:8c:e7:a7:60:c9:86:8a:e5:e6:11:c5:9c:c3:6f:
                    c0:d2:db:31:d1:88:23:b9:42:54:31:fb:46:ba:94:
                    48:84:c1:c2:f8:1c:2a:91:c2:fa:17:d4:2e:56:d8:
                    b1:da:bf:a6:7e:75:81:96:4c:ff:44:9b:61:d4:7f:
                    a6:11:f7:98:85:ec:7c:2e:02:5f:d2:2b:f5:3b:2f:
                    aa:d6:1c:62:2d:05:3a:d3:5b:87:7a:06:5e:76:3c:
                    7f:4a:aa:a7:25:4d:a2:05:d5:f5:05:f5:15:f8:5b:
                    23:5a:cf:45:25:94:e5:23:0e:69:d9:94:fb:4b:e7:
                    88:af:21:37:25:35:8c:b7:39:00:c2:69:f8:37:f9:
                    38:45:a4:6a:3b:54:f3:41:ab:e1:98:68:61:e8:dd:
                    17:ef:ac:04:dc:47:1c:a7:b5:8e:eb:11:2d:e5:1f:
                    c0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8B:14:FE:D7:91:6B:59:A1:4B:B7:F3:A7:CD:14:BE:A4:65:EF:02
            X509v3 Authority Key Identifier:
                keyid:59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3130382e302f32332d3234203d3e20323633373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:1d:9c:99:54:24:ee:82:6d:02:b2:8d:cf:78:85:71:2a:a1:
         59:3b:74:ce:85:6c:4f:9e:17:27:a6:fd:7c:c9:4b:33:a7:a8:
         e6:ae:df:3a:73:fd:96:69:79:76:5a:62:45:01:c3:4d:a0:01:
         a1:b9:25:b9:f5:c8:43:c4:d1:2f:0f:36:ec:23:71:1a:05:86:
         ce:a5:1d:79:06:d3:54:49:7e:15:09:16:57:99:6d:d4:e2:0f:
         0f:ef:cb:f9:9a:59:0f:71:f6:86:e3:72:f4:0d:d0:d2:f1:3b:
         f6:94:17:3e:df:86:e8:3e:e4:cb:84:92:5f:5d:bc:8b:71:9e:
         5b:33:c3:3a:ed:83:85:20:66:d5:1c:b8:eb:ab:98:49:24:8b:
         ad:1b:bd:38:69:d7:25:85:d8:51:ad:d8:56:e3:5b:5a:cf:75:
         54:ce:50:47:a5:fd:cc:b4:54:b6:48:c6:e6:95:6f:31:06:89:
         89:db:6c:48:f6:47:d1:ac:5c:96:1b:07:8a:64:1c:d7:ed:28:
         52:fb:6a:c0:80:a9:5e:00:b5:46:a6:34:8b:36:7c:59:51:f2:
         ce:bc:70:79:00:af:f6:23:00:42:7e:dd:8e:64:40:08:c3:45:
         87:92:ba:9a:ce:00:0d:1d:ca:9f:75:3e:26:3b:22:5d:cc:79:
         69:c0:94:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org