Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3133382e3131382e3132342e302f32322d3234203d3e203237373936.roa
File:                     3133382e3131382e3132342e302f32322d3234203d3e203237373936.roa (raw, json)
Hash identifier:          LT3VF1xXol3SwCZeN1pQJ2sku4Mff/sHcKyxMqEhKnY=
Subject key identifier:   00:F6:8E:EB:56:63:EB:6B:4A:68:12:44:01:26:A2:E8:EA:1D:77:0B
Certificate issuer:       /CN=8F0ED550857A433130395BAAF91EB758467C8A1E
Certificate serial:       1AF85C330C16801A9FB3F39B8581723B2376CB61
Authority key identifier: 8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3133382e3131382e3132342e302f32322d3234203d3e203237373936.roa
Signing time:             Tue 16 Jul 2024 21:10:00 +0000
ROA not before:           Tue 16 Jul 2024 21:05:00 +0000
ROA not after:            Tue 15 Jul 2025 21:10:00 +0000
asID:                     27796
IP address blocks:        138.118.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f8:5c:33:0c:16:80:1a:9f:b3:f3:9b:85:81:72:3b:23:76:cb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F0ED550857A433130395BAAF91EB758467C8A1E
        Validity
            Not Before: Jul 16 21:05:00 2024 GMT
            Not After : Jul 15 21:10:00 2025 GMT
        Subject: CN=00F68EEB5663EB6B4A6812440126A2E8EA1D770B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:31:4b:d4:5a:e3:ef:a9:45:9c:8f:1b:b2:
                    8a:88:30:c7:77:b3:ac:d8:18:5d:7a:2b:d2:c1:6c:
                    8f:20:b2:29:88:13:e3:13:3b:75:60:0a:0b:a7:36:
                    28:44:09:3a:d4:43:ba:59:a1:f3:18:b0:77:65:bf:
                    c2:a4:f2:77:f4:ae:3d:c1:33:21:5d:91:b0:e1:4d:
                    fc:53:b2:58:5c:82:f1:cf:bc:4a:66:27:3f:05:cc:
                    63:a1:f0:48:bf:c2:76:3b:a1:c2:6d:d4:3a:f8:5f:
                    b1:a9:58:68:e9:17:ee:2b:b1:f5:6d:27:da:8f:89:
                    fa:06:2d:d1:77:ce:93:dd:14:80:bd:1b:1a:15:3f:
                    2d:b7:a0:a4:13:eb:8a:a1:fb:ec:be:dc:54:22:90:
                    dc:94:9c:ba:5a:6d:e4:80:89:f3:cf:8e:a6:ff:5b:
                    e5:e0:4f:73:e9:8b:ba:84:bb:ad:2d:ae:1b:04:bf:
                    c8:7c:8e:61:d1:02:29:0d:44:b6:5a:37:93:7f:20:
                    9b:1c:dc:7d:3e:1d:27:2e:73:9e:04:2a:02:6e:36:
                    e3:54:d8:f8:37:f6:87:6f:1b:d9:4b:80:b2:2d:d5:
                    bc:79:8b:d7:9a:d8:a7:ca:53:b8:81:38:f2:1c:4b:
                    4a:b4:c9:6d:5a:71:4b:58:97:32:38:64:f3:65:dc:
                    70:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F6:8E:EB:56:63:EB:6B:4A:68:12:44:01:26:A2:E8:EA:1D:77:0B
            X509v3 Authority Key Identifier:
                keyid:8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3133382e3131382e3132342e302f32322d3234203d3e203237373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:ce:78:04:df:cd:07:c6:c1:6e:cf:b8:7a:ee:da:c3:ac:5b:
         16:d6:4c:8d:d5:ad:ad:dd:2f:2b:08:5a:92:59:8e:46:71:af:
         ff:3b:fc:11:0c:20:87:86:09:f6:3b:6d:73:cb:f0:be:15:ca:
         27:06:bc:8f:72:7a:03:d1:7f:f4:a7:5a:a5:f1:d2:12:28:57:
         a4:63:44:24:8a:e7:da:9b:8f:fe:b1:b6:95:4e:36:aa:0b:fa:
         6c:f0:82:9d:59:b5:f3:f1:9d:9d:60:db:47:b8:09:b9:46:8d:
         b6:78:cd:d0:31:f2:4b:a9:a4:6c:99:de:af:66:d6:34:61:c9:
         e3:e0:ab:d8:1e:fa:bc:15:ea:c8:21:77:67:9d:8a:6c:7d:71:
         16:6f:96:73:7b:f0:df:b1:a7:30:c9:89:aa:1f:e4:61:f8:65:
         9b:56:bd:33:4b:1c:85:b2:51:86:a9:b5:60:cb:63:d8:f6:0b:
         18:b7:81:21:49:f9:6e:a1:18:73:4f:ed:7c:6e:0a:c9:7c:3f:
         c6:42:1e:0f:30:fb:f9:94:c4:82:6b:46:c2:0c:37:c9:6e:eb:
         44:9c:42:6e:9e:0a:e2:11:b3:27:96:89:c3:64:97:1f:8a:bb:
         a1:a2:05:7b:f0:99:a2:b2:a5:17:f3:94:e0:59:f6:07:cb:da:
         d9:2b:92:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:42:05 2024 by rpki-client on console-fra.rpki-client.org