Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131302e302f32342d3234203d3e20323633373935.roa
File:                     3133382e3230342e3131302e302f32342d3234203d3e20323633373935.roa (raw, json)
Hash identifier:          tbXbp7zKv9dfwr6zdbCYwZh0lYiu6pRwz/6yzGkCtgA=
Subject key identifier:   2B:17:10:59:F9:22:2A:FB:CF:F0:A2:37:0A:C8:22:F1:D8:FC:55:02
Certificate issuer:       /CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
Certificate serial:       4511C100177A3711EEE8A8D87803639651964589
Authority key identifier: 59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131302e302f32342d3234203d3e20323633373935.roa
Signing time:             Tue 05 Mar 2024 18:00:04 +0000
ROA not before:           Tue 05 Mar 2024 17:55:04 +0000
ROA not after:            Tue 04 Mar 2025 18:00:04 +0000
asID:                     263795
IP address blocks:        138.204.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:11:c1:00:17:7a:37:11:ee:e8:a8:d8:78:03:63:96:51:96:45:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
        Validity
            Not Before: Mar  5 17:55:04 2024 GMT
            Not After : Mar  4 18:00:04 2025 GMT
        Subject: CN=2B171059F9222AFBCFF0A2370AC822F1D8FC5502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d7:c5:9d:5e:62:8f:da:0b:8a:8e:fd:69:ab:
                    df:2f:4a:a2:eb:64:4d:aa:ef:81:93:f2:ba:6d:79:
                    72:fd:fe:22:ff:a2:f1:60:90:a8:78:ed:0a:6c:ab:
                    33:88:5f:7e:d9:c1:6d:da:52:1f:f2:7d:d2:85:25:
                    de:cb:e0:4c:aa:a4:10:50:7e:95:8b:d2:02:93:99:
                    03:94:62:2a:5f:3f:5b:d8:e9:7e:fd:48:2a:d6:da:
                    8f:a2:8b:d7:02:d2:20:1f:89:a5:b3:d0:d5:4b:76:
                    a2:89:d2:80:be:57:3c:dd:b6:d4:99:2f:9c:8b:c7:
                    c3:09:84:2f:e0:d5:01:c1:12:2d:2b:3b:3d:d6:ea:
                    67:99:f4:58:8f:00:df:d3:60:b4:a3:24:cc:6b:ab:
                    e8:25:64:a0:23:3d:63:45:b3:8f:47:54:62:f5:46:
                    ed:ff:16:36:fe:59:cf:21:61:c5:0a:92:a6:cb:41:
                    32:73:a3:f3:44:e0:26:14:09:11:26:df:b9:09:d3:
                    50:4f:b2:25:06:b2:3a:e3:06:17:1d:fc:05:cd:73:
                    f0:c6:64:9a:c8:e3:45:38:8c:ce:15:4e:5e:21:5f:
                    1e:11:14:19:4b:2a:c0:94:59:eb:72:47:c0:6d:91:
                    7b:62:5d:d6:a3:72:e9:be:7a:d1:08:51:e4:3c:0b:
                    e8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:17:10:59:F9:22:2A:FB:CF:F0:A2:37:0A:C8:22:F1:D8:FC:55:02
            X509v3 Authority Key Identifier:
                keyid:59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131302e302f32342d3234203d3e20323633373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b9:91:53:c9:37:15:ed:12:a6:53:43:83:10:15:4d:27:ba:
         11:55:bf:a8:59:32:05:0a:17:60:42:1f:41:42:d6:b0:4d:95:
         c5:ee:da:9e:3b:e0:35:3b:46:b0:2a:99:06:9b:04:03:a5:d9:
         1f:2d:84:3a:14:1b:89:f9:8f:0f:05:34:7f:bb:b2:79:6d:90:
         7f:f0:8e:aa:cf:2d:00:5c:ef:e3:a4:a7:46:1e:bf:fe:c7:e4:
         7b:f6:ce:d1:b2:6f:64:ff:8a:d1:ee:50:cf:e0:e5:51:85:d0:
         3c:96:e9:20:8e:09:44:b3:7c:22:0c:ab:11:56:7c:27:b2:cf:
         43:65:38:24:cf:43:71:b0:4f:06:54:dd:b6:36:69:47:be:29:
         eb:e9:59:51:bf:36:17:a7:72:f0:47:dd:9c:48:d6:9a:96:fb:
         23:e8:6d:1d:2d:61:71:7a:f3:b4:21:f1:31:12:84:34:d7:57:
         12:45:e4:6e:d4:8a:b4:9a:8a:08:3b:58:64:97:ba:b7:61:dd:
         99:96:fe:bb:69:7f:2f:11:1a:4e:fb:10:92:51:b1:b8:59:0f:
         f3:ee:f5:fc:70:ed:53:e2:df:d2:1e:a2:54:b6:da:e4:12:df:
         34:a7:7a:4f:e5:0b:84:1b:ef:f7:f4:99:4f:b2:b3:fa:00:8e:
         c9:44:af:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org