Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131312e302f32342d3234203d3e203233343730.roa
File:                     3133382e3230342e3131312e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          wYFkJ+9LW0kzMqIvs/4wc73ymTPM2PoD49O+hQ/8bJA=
Subject key identifier:   13:89:B1:AE:39:12:D4:12:8B:69:24:48:92:95:D5:6A:DC:E4:82:9B
Certificate issuer:       /CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
Certificate serial:       7E18BA1FA675ACFD58804AADDB1EAD1CF7AEA30D
Authority key identifier: 59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131312e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 05 Mar 2024 18:00:05 +0000
ROA not before:           Tue 05 Mar 2024 17:55:05 +0000
ROA not after:            Tue 04 Mar 2025 18:00:05 +0000
asID:                     23470
IP address blocks:        138.204.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:18:ba:1f:a6:75:ac:fd:58:80:4a:ad:db:1e:ad:1c:f7:ae:a3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
        Validity
            Not Before: Mar  5 17:55:05 2024 GMT
            Not After : Mar  4 18:00:05 2025 GMT
        Subject: CN=1389B1AE3912D4128B6924489295D56ADCE4829B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:76:24:6c:8a:45:05:0e:07:11:a6:89:ae:
                    9c:97:e1:14:e2:d9:79:83:c0:3f:48:86:ab:a6:79:
                    16:28:5f:05:75:0a:76:33:e8:ef:12:c8:af:5f:dc:
                    e4:41:a6:0b:2e:fa:69:e5:31:ba:ea:f1:d5:aa:a9:
                    16:6b:55:c2:6a:43:14:a6:76:98:ed:94:93:7d:1e:
                    9c:c8:11:45:63:14:b1:ad:0a:38:50:a7:58:4e:7a:
                    96:1b:f9:08:25:d8:b7:2a:8a:eb:96:e2:e0:b6:5e:
                    68:0c:c6:89:7f:d4:60:ad:a3:6b:12:8b:84:6a:47:
                    05:aa:bb:b5:a0:75:c8:d3:b8:a4:fe:f6:39:98:be:
                    7c:4c:f2:cb:e1:33:8b:cb:2f:6b:67:9c:67:e2:c3:
                    88:29:53:db:d7:a1:d2:da:01:b2:e7:81:f2:2d:df:
                    95:13:09:3c:ee:25:f5:e4:6a:16:71:1d:7b:38:da:
                    90:20:3c:f7:46:fd:55:c7:dc:ce:cf:d2:5d:33:3f:
                    82:f2:52:00:65:74:e9:20:c1:d9:3c:10:93:15:df:
                    5c:a5:29:2b:1b:85:5d:8d:6f:1c:f0:70:c4:1b:fe:
                    3b:a4:18:66:1f:ad:e7:4d:b4:e9:30:f5:5a:c3:eb:
                    02:69:a9:31:0f:79:33:d8:c5:d1:40:3f:24:20:06:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:89:B1:AE:39:12:D4:12:8B:69:24:48:92:95:D5:6A:DC:E4:82:9B
            X509v3 Authority Key Identifier:
                keyid:59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131312e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a0:83:3f:e0:9d:b9:89:55:2c:bb:38:d0:5d:cd:3f:fc:d4:
         be:eb:83:ba:a9:46:b9:74:ba:5f:1e:54:17:b1:e7:ef:09:8b:
         74:2e:00:65:59:24:5d:2b:7f:fc:dc:bf:73:66:74:08:6b:8a:
         49:4a:f8:f9:96:7e:2b:2a:f7:53:c7:ea:ec:64:c1:64:49:3b:
         ed:0d:d9:14:75:2b:57:3f:35:3b:26:58:d7:d3:b0:bc:22:90:
         59:9b:8c:77:56:ff:1e:35:46:5e:4b:17:aa:5d:c6:fe:5f:47:
         10:2b:49:46:39:16:d7:15:95:ac:e7:a1:00:3d:20:f9:eb:46:
         19:d1:29:84:20:0a:ac:72:4f:0f:4f:e0:2e:57:f7:d7:64:ad:
         41:15:fa:1f:fb:32:00:c7:14:1a:1f:f9:91:98:e2:a5:60:76:
         25:79:86:17:fe:ff:61:f7:92:cd:7f:61:40:d2:ed:18:8a:48:
         2f:df:f2:05:91:8e:47:94:c5:ab:42:32:0d:d2:4e:e6:2c:1e:
         11:d3:fd:07:65:fd:66:f6:76:cf:d9:e1:aa:16:63:ad:a4:80:
         a5:6f:24:81:dd:be:5a:01:98:db:8e:7a:0b:65:56:4e:41:e3:
         ed:a7:96:34:44:7f:9c:35:33:39:f9:b8:34:31:ec:04:60:7c:
         81:dc:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org