Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130392e302f32342d3234203d3e20323633373932.roa
File:                     3133382e3132322e3130392e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          bvr20Xi1Lt7l/4TsNSw55PTPZOOesh0+VzT8PVYqZdI=
Subject key identifier:   2B:13:DF:C8:95:50:2C:B7:B9:DC:25:7E:FE:46:CC:01:51:C5:35:5E
Certificate issuer:       /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial:       190BAE49F96A8074ACBDC26E4FC518628E27F677
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130392e302f32342d3234203d3e20323633373932.roa
Signing time:             Tue 05 Mar 2024 18:15:46 +0000
ROA not before:           Tue 05 Mar 2024 18:10:46 +0000
ROA not after:            Tue 04 Mar 2025 18:15:46 +0000
asID:                     263792
IP address blocks:        138.122.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0b:ae:49:f9:6a:80:74:ac:bd:c2:6e:4f:c5:18:62:8e:27:f6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
        Validity
            Not Before: Mar  5 18:10:46 2024 GMT
            Not After : Mar  4 18:15:46 2025 GMT
        Subject: CN=2B13DFC895502CB7B9DC257EFE46CC0151C5355E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d3:bc:f4:41:74:a3:88:c6:71:1b:34:15:7d:
                    2a:94:5b:de:57:88:05:7a:85:8d:b9:89:39:35:db:
                    a5:43:94:57:18:5a:59:07:6a:3a:6d:03:44:af:bb:
                    c0:98:46:db:0d:92:f2:03:aa:1a:49:27:01:80:93:
                    8f:5f:2e:92:40:bd:67:55:6e:74:cf:0e:31:d2:8c:
                    f7:4c:29:3c:2d:10:7c:a7:3e:ca:6a:68:15:2f:5b:
                    ab:1d:04:01:43:89:e0:82:8e:eb:03:ae:15:3a:f5:
                    2e:f1:e2:0f:43:29:8c:3a:56:ab:1b:c1:1c:d4:2b:
                    f5:3a:9e:a5:20:e9:33:8b:3f:76:6a:65:75:4e:91:
                    0e:b6:c4:cd:6d:94:18:de:aa:8e:08:f9:7d:32:68:
                    e0:2a:f6:33:68:41:39:44:81:a1:1d:68:7b:3f:7e:
                    7b:71:d9:2d:8b:65:f3:74:b2:17:55:7f:4c:6b:9c:
                    f4:2d:21:37:0f:49:24:4a:81:21:fa:91:51:85:ea:
                    31:91:35:03:ca:93:4f:5a:22:f0:cb:3f:57:76:c0:
                    4a:23:69:93:a0:bb:46:4b:95:b8:4f:18:66:81:c1:
                    c9:c9:79:b6:46:c2:af:35:e0:c4:c5:27:ca:37:9f:
                    36:c4:97:90:d9:8f:70:59:14:a3:53:b1:ee:bd:6f:
                    f2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:13:DF:C8:95:50:2C:B7:B9:DC:25:7E:FE:46:CC:01:51:C5:35:5E
            X509v3 Authority Key Identifier:
                keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130392e302f32342d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:52:92:fb:ba:38:36:b0:cf:02:3b:f1:80:fe:33:5a:da:a5:
         3d:a1:d9:64:0f:eb:cd:16:a4:67:11:3c:2b:d0:29:e5:03:a8:
         0b:84:0d:50:08:96:c9:d2:35:f5:8f:46:11:4e:99:ff:f4:6b:
         27:a2:84:79:18:85:4d:40:3d:0f:5a:a2:1c:34:a0:8f:10:4b:
         22:b9:88:43:d5:bb:9e:67:d9:35:7f:89:9f:2b:1c:8e:df:6b:
         52:48:46:e8:0e:18:c4:21:5d:d0:06:ea:d4:37:b1:7a:b3:15:
         1b:89:e1:40:1d:e4:59:b5:07:77:e2:0f:8f:88:38:d8:44:8c:
         d9:c5:9e:8f:d9:8d:03:56:04:3f:d6:16:58:ec:b6:30:be:8f:
         42:d8:ae:42:94:19:28:ec:e7:72:ce:9b:cd:80:20:6d:f5:10:
         be:0c:3f:81:cd:0c:13:9f:a6:9e:c6:f7:5b:f7:3c:fe:4e:46:
         e5:45:f7:54:65:44:ab:ba:bf:d7:d6:90:d3:65:ca:f3:96:66:
         12:e5:72:9f:20:97:23:aa:28:ab:36:e6:70:17:c0:a0:81:76:
         c7:f6:1b:7a:92:04:3b:32:f3:5c:ad:95:35:b2:f5:d6:91:64:
         34:72:7f:8b:34:cf:b9:93:90:e7:fd:81:d5:32:25:64:5d:6d:
         0b:1b:c9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 06:53:22 2024 by rpki-client on console-fra.rpki-client.org