Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/3133382e35392e3136342e302f32322d3234203d3e20323633373332.roa
File:                     3133382e35392e3136342e302f32322d3234203d3e20323633373332.roa (raw, json)
Hash identifier:          DnhypI69EWIWn8InwT2pSNSyZWout3Cd3+ocyPgPOh0=
Subject key identifier:   68:EE:27:04:7F:4F:A6:88:9B:FC:B8:5D:48:6B:D6:E4:3E:45:77:33
Certificate issuer:       /CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
Certificate serial:       7157245F6C0E9349EAAB60657FDE05870F25B097
Authority key identifier: D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/3133382e35392e3136342e302f32322d3234203d3e20323633373332.roa
Signing time:             Tue 29 Oct 2024 09:55:00 +0000
ROA not before:           Tue 29 Oct 2024 09:50:00 +0000
ROA not after:            Tue 28 Oct 2025 09:55:00 +0000
asID:                     263732
IP address blocks:        138.59.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:57:24:5f:6c:0e:93:49:ea:ab:60:65:7f:de:05:87:0f:25:b0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
        Validity
            Not Before: Oct 29 09:50:00 2024 GMT
            Not After : Oct 28 09:55:00 2025 GMT
        Subject: CN=68EE27047F4FA6889BFCB85D486BD6E43E457733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:f0:cb:e7:1f:40:e7:8c:40:de:85:74:7f:
                    eb:35:ea:ae:9d:b8:c2:7e:d7:43:a5:8d:48:91:8f:
                    fd:90:aa:23:2d:75:27:09:28:c5:7e:14:03:de:41:
                    0d:98:65:1a:7c:ad:dc:93:e4:ea:38:2b:6a:26:1a:
                    48:8b:d7:b4:b8:ea:09:da:14:bd:b5:a6:78:b0:ff:
                    ea:1a:8f:92:fc:19:98:8f:77:fc:0b:7c:fa:59:d3:
                    89:4f:79:48:c8:e2:25:bc:b7:06:a3:fe:ff:94:4e:
                    96:96:c5:6f:b1:69:0a:d7:01:79:1f:5f:8a:dc:50:
                    61:2d:de:60:07:17:4b:36:0d:a9:d6:38:08:6e:ec:
                    32:d8:f0:48:c4:c0:3f:46:b4:6c:83:7d:39:69:f1:
                    41:d1:dc:73:ca:50:ce:c6:8c:9d:fd:6b:49:6d:53:
                    81:b4:32:05:ca:a9:80:13:d1:ef:c4:08:ef:37:f2:
                    11:8b:34:bf:0f:56:62:a7:40:d8:d5:a7:95:0c:eb:
                    6c:60:c6:89:0a:7d:8b:86:b6:60:0b:62:71:78:3e:
                    24:a4:e0:73:72:c4:d2:1d:b7:a8:32:2c:28:bc:83:
                    0a:02:8b:99:db:12:38:32:a1:ee:32:44:61:3b:af:
                    52:35:3f:d9:8e:cd:46:7d:59:29:30:d4:7c:a0:b3:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EE:27:04:7F:4F:A6:88:9B:FC:B8:5D:48:6B:D6:E4:3E:45:77:33
            X509v3 Authority Key Identifier:
                keyid:D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/3133382e35392e3136342e302f32322d3234203d3e20323633373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:be:b0:e1:9b:e6:8e:ee:71:c1:ed:d8:54:74:d6:07:dd:d4:
         c1:25:3f:25:94:9d:4e:df:37:8b:82:af:e1:5f:33:b7:88:bb:
         3f:ce:9b:d3:1a:33:80:3f:80:f9:e8:a5:56:ee:61:07:e3:93:
         59:97:35:ba:54:7b:bb:ad:93:e9:f3:1f:30:4f:b5:26:c9:9a:
         62:e8:8a:71:ec:ec:19:4b:fe:3e:91:a9:f3:c4:3c:c8:f0:f2:
         d7:f6:f6:b5:3a:6d:dc:44:e7:e3:2e:db:b0:da:b9:5e:f3:f1:
         5b:3b:48:f0:ed:a9:d3:4e:71:60:e4:af:d2:18:d9:c5:83:be:
         95:67:7b:ff:32:36:17:18:f1:19:14:06:21:ec:ee:70:88:8d:
         7d:40:6b:de:d0:87:ee:80:c7:87:c0:45:42:ff:99:60:40:a1:
         48:d3:f1:30:16:60:64:3d:ad:f2:fa:39:55:cd:28:1b:91:e4:
         f2:f1:38:06:87:68:29:6b:7b:89:e3:04:99:41:36:73:66:12:
         29:9e:ac:0b:fc:00:e5:08:40:45:1d:87:f3:7b:15:34:7e:11:
         a1:c9:4e:39:4c:07:d4:7d:02:01:1a:12:a8:0e:f9:86:7c:fa:
         3c:fa:ed:4f:65:09:cb:29:eb:5e:b7:6f:be:3b:8b:9b:23:71:
         8f:26:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:17 2024 by rpki-client on console-ams.rpki-client.org