Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3131302e302f32342d3234203d3e20323633373932.roa
File:                     3133382e3132322e3131302e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          lZpWpSEGGgOQNoNQIvGlTqVUOmu8nDujBYsz/qw6tZk=
Subject key identifier:   9F:EE:73:F8:75:2B:41:AB:7A:44:5E:97:FA:D8:FE:99:8C:1C:A1:73
Certificate issuer:       /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial:       1C3145A7AF03B2EC388B26A3CBC075932D617DD5
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3131302e302f32342d3234203d3e20323633373932.roa
Signing time:             Tue 05 Mar 2024 18:15:47 +0000
ROA not before:           Tue 05 Mar 2024 18:10:47 +0000
ROA not after:            Tue 04 Mar 2025 18:15:47 +0000
asID:                     263792
IP address blocks:        138.122.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:31:45:a7:af:03:b2:ec:38:8b:26:a3:cb:c0:75:93:2d:61:7d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
        Validity
            Not Before: Mar  5 18:10:47 2024 GMT
            Not After : Mar  4 18:15:47 2025 GMT
        Subject: CN=9FEE73F8752B41AB7A445E97FAD8FE998C1CA173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:50:4f:29:fc:e1:17:1b:35:5e:26:8e:7f:16:
                    0d:01:b6:72:51:06:97:d3:8d:bb:6f:60:8b:12:fb:
                    77:5e:88:d7:37:32:e5:3a:b3:02:1d:5e:13:a7:12:
                    d2:85:03:81:14:bd:c7:b2:b4:d3:e0:2a:ff:6e:cb:
                    a3:75:bb:53:bc:f9:46:80:42:1c:a9:c2:76:b1:97:
                    cb:fb:30:89:f8:16:54:eb:41:c0:76:2e:50:ec:62:
                    04:97:94:a1:7f:60:17:d8:1d:90:c9:b0:9e:3a:98:
                    f8:2d:90:99:71:76:90:19:fc:90:03:07:62:52:2d:
                    af:2a:44:a3:bb:b5:cd:d3:88:d1:ec:48:04:e9:db:
                    1d:6c:6e:4c:b9:f2:74:2a:12:08:aa:67:dc:ed:b8:
                    c3:6c:6e:50:c8:2d:23:4d:13:43:ce:6f:78:42:74:
                    35:bb:5e:ae:a6:b8:08:18:35:60:77:93:b8:24:a2:
                    a5:a2:a5:67:3b:dd:3c:57:74:35:3b:73:d9:5a:39:
                    22:4e:76:13:8d:b6:43:3b:06:67:92:a3:a3:1b:d6:
                    71:59:1d:80:35:49:a7:ad:e2:76:fa:55:be:9b:3a:
                    69:d6:64:a4:b5:e6:71:4d:15:c6:9c:39:96:f3:5e:
                    31:9a:0e:e0:f0:cb:86:65:88:7f:46:46:2f:ed:8d:
                    0d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EE:73:F8:75:2B:41:AB:7A:44:5E:97:FA:D8:FE:99:8C:1C:A1:73
            X509v3 Authority Key Identifier:
                keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3131302e302f32342d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:82:c5:2c:9f:c7:15:b3:4c:53:6f:d4:70:56:89:c5:65:f7:
         fa:af:9d:b1:17:ab:4e:09:e9:69:df:31:97:40:37:51:40:59:
         17:04:f8:c7:07:87:45:87:04:ec:81:5a:64:6e:d6:72:f0:3a:
         ca:68:54:c2:f6:ae:d6:11:8f:00:6e:f7:47:3b:e8:23:27:08:
         6c:b5:65:95:2e:af:9f:78:14:1c:d9:cd:42:d1:dc:44:58:84:
         2f:f4:b1:af:8f:a8:61:ed:eb:73:63:a5:01:13:bc:ed:0b:26:
         19:97:11:49:78:59:26:c2:3a:61:ea:d9:d1:6b:33:8a:3f:a9:
         73:3b:f6:fe:32:03:6a:ea:e3:23:da:5d:b5:dd:79:44:ee:62:
         41:ed:85:ef:81:a0:ec:71:32:59:10:28:c9:83:3c:5b:0c:81:
         d8:52:e8:25:aa:04:e5:dd:64:21:b0:8c:c7:09:ea:9d:71:f1:
         a3:87:3c:64:3b:20:dc:24:df:f7:69:9b:73:a9:5e:d7:2e:49:
         f0:be:e7:60:ac:b8:b7:47:c6:19:fa:67:76:c7:6a:a0:14:1d:
         dc:19:e1:a3:0d:a5:b1:fe:3b:fc:e6:ed:ef:3f:ec:7d:c9:f3:
         8e:6c:47:39:ba:d7:85:d4:30:c5:6b:6a:d5:a8:e9:c4:85:8a:
         df:14:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 06:45:12 2024 by rpki-client on console-ams.rpki-client.org