Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3133382e3132322e3232382e302f32322d3234203d3e203237393535.roa
File:                     3133382e3132322e3232382e302f32322d3234203d3e203237393535.roa (raw, json)
Hash identifier:          aisH2fhSc2hVBCpFjSfJZ3QNFb65O+R7wpBwQC4UiYQ=
Subject key identifier:   DD:0D:9B:32:E4:01:FC:70:E8:6D:13:90:C5:BA:82:F3:A3:6A:22:AF
Certificate issuer:       /CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
Certificate serial:       6AFDC70AC86F429A7A3832223CB84E80302C7998
Authority key identifier: 93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3133382e3132322e3232382e302f32322d3234203d3e203237393535.roa
Signing time:             Tue 05 Mar 2024 17:45:09 +0000
ROA not before:           Tue 05 Mar 2024 17:40:09 +0000
ROA not after:            Tue 04 Mar 2025 17:45:09 +0000
asID:                     27955
IP address blocks:        138.122.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fd:c7:0a:c8:6f:42:9a:7a:38:32:22:3c:b8:4e:80:30:2c:79:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
        Validity
            Not Before: Mar  5 17:40:09 2024 GMT
            Not After : Mar  4 17:45:09 2025 GMT
        Subject: CN=DD0D9B32E401FC70E86D1390C5BA82F3A36A22AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:92:2b:a0:35:60:49:33:15:20:5c:f4:bb:
                    fc:a7:14:3a:51:9a:a7:78:36:17:83:64:e7:29:5c:
                    6d:b8:8f:aa:b2:97:78:e0:17:33:0c:28:62:3b:4f:
                    e3:71:a2:93:f0:ea:2d:6f:ca:b5:45:5b:9b:fd:84:
                    c7:c6:c1:99:ec:74:88:7a:e9:83:ee:e9:34:29:1e:
                    c9:d3:6c:e5:c7:1c:b2:0e:6d:e6:69:88:07:13:d2:
                    1e:91:aa:f0:50:db:0c:c7:a6:1b:bd:1d:af:f5:3a:
                    c7:96:95:2f:04:ff:9a:dd:51:0a:e6:e3:67:8e:4d:
                    40:cc:bf:e4:82:19:ea:ec:7a:24:86:a6:cd:61:e3:
                    e1:61:1a:98:38:37:66:67:d7:2d:b7:73:65:11:35:
                    94:f6:65:d7:11:22:af:03:94:37:f2:82:7d:21:29:
                    b9:40:12:df:79:da:39:c4:7d:57:39:91:d9:07:3c:
                    03:30:51:06:8e:fd:b1:4a:8b:11:c0:f0:dc:9a:d8:
                    54:03:fc:16:6a:4b:47:40:29:ec:09:85:12:d4:19:
                    f5:54:5b:e6:cd:52:46:cd:db:86:a4:29:57:1d:93:
                    f1:99:95:13:54:50:b7:6a:4e:09:84:fc:50:ae:d8:
                    99:dd:b1:74:3d:23:91:e5:2c:1d:eb:29:68:f1:13:
                    0d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0D:9B:32:E4:01:FC:70:E8:6D:13:90:C5:BA:82:F3:A3:6A:22:AF
            X509v3 Authority Key Identifier:
                keyid:93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3133382e3132322e3232382e302f32322d3234203d3e203237393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:26:81:48:94:0f:98:37:d3:21:df:c6:52:0a:cd:a7:4d:
         74:d2:93:63:40:db:0c:e4:6c:f4:49:93:28:dc:b5:c7:0a:0c:
         ad:84:61:97:47:4c:d7:23:f7:1b:17:e2:b7:40:73:ff:7c:81:
         a8:ce:75:7c:b4:7a:48:13:87:97:07:cd:53:8c:93:c6:30:4f:
         bb:cc:de:ae:77:b2:c3:9f:6c:57:dc:b6:ef:ae:23:bd:7c:8b:
         89:91:79:c7:d3:61:2d:a8:b4:88:a2:42:6d:d6:fa:1e:ef:32:
         24:ee:ca:d9:a2:ff:e7:dc:33:a3:42:c9:33:99:a5:c5:3b:37:
         e1:cf:cd:60:05:52:c0:63:7f:0a:0d:aa:3a:d9:f5:47:94:4f:
         d6:43:bf:78:8e:55:d9:88:d2:d3:40:92:08:11:05:3d:d9:bc:
         ad:4e:b4:d8:e8:e4:d5:37:69:dd:76:89:af:28:16:cf:1f:f8:
         5a:fc:ab:42:92:83:66:3d:db:f3:24:05:7e:30:67:c4:39:45:
         a6:5f:60:7f:af:57:82:12:4c:c9:e6:c5:d4:a8:62:38:10:0a:
         46:cf:db:2c:79:13:94:0b:98:0d:9f:d7:92:2c:83:52:8a:e4:
         8d:86:e6:e4:f5:8e:14:d5:e0:79:43:6e:57:51:4d:a5:b7:0c:
         73:d6:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:33 2024 by rpki-client on console-fra.rpki-client.org