Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130382e302f32322d3234203d3e20323633373932.roa
File:                     3133382e3132322e3130382e302f32322d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          e3OjWduU36QBqwek/IfB51C+hXnMo8iCKLlW7mCsVo4=
Subject key identifier:   21:FC:1E:44:83:91:F2:96:69:0C:3A:82:2B:87:38:17:BB:B0:DE:88
Certificate issuer:       /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial:       372A28A91BC255DB667EDD9C825968CCAECAFB10
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130382e302f32322d3234203d3e20323633373932.roa
Signing time:             Wed 10 Jul 2024 14:45:00 +0000
ROA not before:           Wed 10 Jul 2024 14:40:00 +0000
ROA not after:            Wed 09 Jul 2025 14:45:00 +0000
asID:                     263792
IP address blocks:        138.122.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2a:28:a9:1b:c2:55:db:66:7e:dd:9c:82:59:68:cc:ae:ca:fb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
        Validity
            Not Before: Jul 10 14:40:00 2024 GMT
            Not After : Jul  9 14:45:00 2025 GMT
        Subject: CN=21FC1E448391F296690C3A822B873817BBB0DE88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:69:79:15:5c:8f:f0:6d:1f:c4:74:f5:4a:
                    7b:d3:d0:46:62:11:c2:8d:ad:10:6a:8a:5f:94:6e:
                    c4:fc:b3:c1:b6:15:fd:63:78:15:be:86:c7:76:a5:
                    f6:86:d1:e1:00:ea:03:94:81:5b:74:2d:b0:2b:3a:
                    43:d3:f8:bd:45:17:c9:4c:4e:0d:f7:ba:99:bc:85:
                    02:92:f3:33:36:63:9b:2e:74:60:2b:10:07:de:ee:
                    ab:36:d5:88:d4:33:ff:5c:99:e8:5e:79:4f:af:13:
                    38:ca:50:1e:52:b1:68:ca:b1:88:99:54:48:63:44:
                    6b:1a:89:91:da:aa:f0:35:34:d4:85:6f:e6:c2:16:
                    b8:f6:73:86:e1:b9:f7:bd:d9:3b:8a:e5:b6:fe:00:
                    c7:98:75:e2:e3:76:b1:40:df:cd:d3:80:11:43:f4:
                    a2:e9:ab:4d:72:41:4f:c5:cc:e9:f5:79:cb:95:e0:
                    7f:00:cc:b9:a2:36:4f:9b:62:f2:31:13:58:de:74:
                    9e:61:6a:f4:cb:34:9f:5d:5f:1e:34:7c:21:8e:4d:
                    90:88:53:27:ed:82:30:5c:16:02:56:3c:f2:9d:81:
                    a7:58:92:11:62:91:df:e3:37:98:f5:bf:15:d5:dc:
                    25:6c:a0:78:bf:40:53:31:46:7c:5f:a8:a7:cd:93:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FC:1E:44:83:91:F2:96:69:0C:3A:82:2B:87:38:17:BB:B0:DE:88
            X509v3 Authority Key Identifier:
                keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130382e302f32322d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:2f:3d:0e:0e:ec:75:43:38:89:20:13:67:d6:3e:fc:64:a9:
         2f:87:7a:24:de:d3:5e:5d:3f:66:a0:1c:da:14:3e:f2:ff:9b:
         00:0a:44:1f:15:99:5f:f5:74:aa:0a:a9:bf:36:b8:b7:e7:77:
         da:be:d2:be:b8:f6:75:ee:4a:ba:c7:b8:51:eb:54:25:0b:b5:
         af:df:64:a6:38:75:3b:61:48:ff:ab:25:85:7e:65:d2:74:db:
         a7:88:2d:bc:e2:49:13:ef:64:ba:77:4a:c4:f5:44:31:87:22:
         2c:b9:84:d4:71:36:40:70:c0:70:4f:90:13:01:b7:e1:0b:02:
         99:45:fb:19:0f:94:b8:81:71:18:e1:27:67:38:1e:b7:a4:62:
         05:cb:db:6c:fb:ba:dd:0e:fe:e5:4d:d6:8d:26:4a:bb:cc:3d:
         d3:c5:c3:7b:ba:b3:0b:59:bd:88:87:40:12:c5:d6:0f:11:35:
         88:a5:72:3d:ca:37:83:8e:27:82:56:1c:fa:1f:77:d2:af:a1:
         73:cf:e8:a1:8d:61:06:db:c5:4f:5a:bf:28:95:33:b5:0b:e5:
         99:21:e8:0b:32:51:90:8f:04:80:f8:d0:b7:03:01:6c:fb:4e:
         f1:6b:d8:b3:3c:69:ae:c8:67:30:04:81:13:2d:48:38:ba:e7:
         47:8d:8e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org