Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/3133382e3138352e36342e302f32322d3234203d3e20323633383036.roa
File:                     3133382e3138352e36342e302f32322d3234203d3e20323633383036.roa (raw, json)
Hash identifier:          Vt+GnukSz2/rbDQYmfve7h5tScqNuNENqNAGZkS1F1o=
Subject key identifier:   EE:7A:C0:77:CC:94:E2:45:5C:BB:BA:59:AB:14:CA:3E:72:34:FD:3D
Certificate issuer:       /CN=875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66
Certificate serial:       433D010444958F6FAF059457F37840A39E9A8027
Authority key identifier: 87:59:40:C4:F9:B5:CD:3C:1E:15:58:5A:4B:9B:1F:F4:BD:E9:BD:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/3133382e3138352e36342e302f32322d3234203d3e20323633383036.roa
Signing time:             Tue 05 Mar 2024 17:58:42 +0000
ROA not before:           Tue 05 Mar 2024 17:53:42 +0000
ROA not after:            Tue 04 Mar 2025 17:58:42 +0000
asID:                     263806
IP address blocks:        138.185.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3d:01:04:44:95:8f:6f:af:05:94:57:f3:78:40:a3:9e:9a:80:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66
        Validity
            Not Before: Mar  5 17:53:42 2024 GMT
            Not After : Mar  4 17:58:42 2025 GMT
        Subject: CN=EE7AC077CC94E2455CBBBA59AB14CA3E7234FD3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:24:a4:82:d5:cb:77:30:d7:54:de:f0:9d:
                    d5:4a:6d:bd:20:8d:02:07:0d:33:04:08:7e:34:3d:
                    f0:82:32:a6:42:2e:7f:a1:ab:0c:20:07:71:fe:68:
                    7d:ef:66:18:7d:41:ce:5f:0f:53:e2:c5:ed:03:fd:
                    35:42:b2:02:f8:d7:62:6e:a8:14:c3:6e:2b:c3:09:
                    4b:f2:95:e3:d1:86:1e:d7:d3:b0:f5:57:54:b5:9c:
                    f5:dc:8a:c9:b3:5e:6c:79:27:4d:e6:90:e7:06:e1:
                    96:6b:e8:27:6c:f8:65:ed:aa:f1:35:39:95:59:53:
                    79:03:b9:f3:1f:12:43:d9:d0:82:4e:55:c0:8b:bf:
                    6f:c9:ec:d0:66:6d:89:1d:7e:3d:bf:03:f6:1f:df:
                    13:29:01:f9:84:08:b7:1c:e7:44:89:c6:9c:2d:3d:
                    0b:12:7c:3f:e1:00:8d:a0:0d:7e:52:d6:a4:fd:0e:
                    b9:f9:70:6b:7b:1e:d6:71:14:17:aa:36:cf:cd:43:
                    ba:7a:fd:be:8e:af:c4:bc:86:11:b0:55:7a:12:0d:
                    34:f1:e7:1e:a2:71:74:62:91:18:d7:b6:8a:ef:32:
                    a1:01:58:07:24:29:81:d2:43:23:7d:ed:f0:f2:e5:
                    6b:04:78:19:d4:53:30:14:d4:5d:ad:8d:8b:0e:19:
                    d0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7A:C0:77:CC:94:E2:45:5C:BB:BA:59:AB:14:CA:3E:72:34:FD:3D
            X509v3 Authority Key Identifier:
                keyid:87:59:40:C4:F9:B5:CD:3C:1E:15:58:5A:4B:9B:1F:F4:BD:E9:BD:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/875940C4F9B5CD3C1E15585A4B9B1FF4BDE9BD66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4BA3363CCEE000D21E126DD2B47011679D48768DA81D84221847B57C4E0122A/0/3133382e3138352e36342e302f32322d3234203d3e20323633383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:1a:42:ba:b6:b8:21:30:2d:49:40:05:63:3b:5b:e9:5e:55:
         69:f9:7b:7a:de:91:f9:dc:a6:95:bb:cb:11:ec:c9:22:81:fb:
         b7:07:94:1e:87:1f:13:a0:a7:e4:8f:d2:61:ec:97:fe:13:e6:
         39:64:0b:40:c8:8a:0f:60:3e:a1:a8:0d:2d:8e:71:0b:e6:54:
         58:03:68:be:f4:09:19:05:5b:13:3e:c5:23:e0:40:d1:7c:0d:
         05:c1:cb:f6:3b:c3:16:38:fb:17:b8:d9:31:51:a2:23:d7:c3:
         d2:d4:06:7c:85:26:7d:df:b3:ca:52:a2:f7:dd:a1:27:9b:09:
         78:54:2d:e7:42:3e:4b:ba:ab:76:e8:65:5b:ef:90:37:a6:e1:
         c4:cf:a4:94:21:cc:37:ea:6e:bf:c9:b8:c2:42:c6:8d:53:00:
         e7:9f:23:f1:1f:b1:15:a1:5b:b8:88:0d:85:25:07:db:48:57:
         66:d1:df:dd:f0:98:54:2e:b9:68:60:34:ac:b8:9c:69:8b:62:
         21:61:ea:29:f8:58:11:30:1e:28:88:8d:bc:97:8c:ea:b0:75:
         c2:bb:c3:6e:2b:0f:90:9d:87:df:d6:81:18:4b:a5:54:c3:d8:
         e7:aa:43:d8:cc:92:f9:9c:4b:79:2a:ad:ef:2e:35:f5:f8:b5:
         fd:83:96:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org