Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa
File:                     3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa (raw, json)
Hash identifier:          xo4f7OeUaDivr+VwX4+INIWgR/yXezj1DTvdo9UWVh8=
Subject key identifier:   AB:45:E4:56:24:EB:6C:C2:85:D0:B7:DC:43:8A:76:4B:53:8F:1A:40
Certificate issuer:       /CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97
Certificate serial:       7F834C2BB45197510E05A68D80778CBAC41772C3
Authority key identifier: C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa
Signing time:             Tue 05 Mar 2024 18:00:21 +0000
ROA not before:           Tue 05 Mar 2024 17:55:21 +0000
ROA not after:            Tue 04 Mar 2025 18:00:21 +0000
asID:                     263775
IP address blocks:        138.121.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:83:4c:2b:b4:51:97:51:0e:05:a6:8d:80:77:8c:ba:c4:17:72:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97
        Validity
            Not Before: Mar  5 17:55:21 2024 GMT
            Not After : Mar  4 18:00:21 2025 GMT
        Subject: CN=AB45E45624EB6CC285D0B7DC438A764B538F1A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:46:45:2d:45:3c:b7:ed:9a:6e:90:5b:7b:
                    8b:0a:c1:78:a5:64:5c:8a:da:19:18:96:0c:92:d0:
                    63:72:27:08:4c:17:11:a7:4f:4f:23:97:ff:5c:ba:
                    79:38:5c:83:8a:64:95:5d:e7:e8:9d:3a:78:de:24:
                    fc:a0:49:f6:80:25:1d:97:d3:ac:58:66:d4:cd:58:
                    48:2a:83:74:cd:dc:23:ac:07:5b:4e:46:0c:d3:1e:
                    79:fb:cd:8c:62:66:b4:8d:8f:2d:99:76:f9:4b:c5:
                    dd:33:90:ec:1f:e2:26:af:ea:34:08:f6:10:84:4c:
                    74:00:f1:d3:6b:79:f3:47:40:9a:05:b6:e1:7d:e7:
                    c7:32:d3:3c:5f:77:00:7d:b4:38:26:9f:6e:df:7e:
                    12:6a:81:c3:2f:ea:44:16:37:a4:56:d5:ce:eb:f0:
                    09:59:b7:48:11:31:33:8a:2d:c3:06:e8:54:b5:dd:
                    1b:b2:13:81:1c:8a:04:0b:2b:96:7d:0d:a1:c3:54:
                    ee:d4:83:ee:eb:47:57:bd:55:ca:9f:c0:4a:79:a6:
                    2f:08:8b:34:3a:6a:0a:8c:42:52:3c:88:60:75:4c:
                    5c:61:42:d9:ae:af:28:41:58:52:84:8e:b8:9b:4c:
                    5d:53:ed:c2:81:f6:b4:4c:bc:12:7a:9c:57:6d:ce:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:45:E4:56:24:EB:6C:C2:85:D0:B7:DC:43:8A:76:4B:53:8F:1A:40
            X509v3 Authority Key Identifier:
                keyid:C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:4b:10:58:65:3e:8b:d6:f7:40:72:01:a4:a7:c5:e3:0b:f5:
         77:39:29:fc:05:4f:79:fe:0d:b0:4c:9e:59:af:34:e9:18:ee:
         58:c4:fb:50:ca:d6:45:54:e3:22:1b:ef:f6:b4:59:66:fb:25:
         1b:d9:6d:4a:6e:04:be:37:de:9d:b9:3e:7a:8b:97:bd:48:af:
         c3:c9:1d:15:a8:f7:4f:b5:87:c7:e6:9a:13:f0:f9:ca:32:df:
         06:ac:4b:36:10:fd:c1:0a:00:59:59:55:1f:6c:8c:89:14:38:
         8f:94:5f:ae:63:30:34:7d:92:40:b7:23:05:41:bd:3d:e9:9b:
         5d:b9:0f:b2:04:f3:8c:c4:c8:79:78:c5:86:ad:12:da:84:bd:
         7d:6b:49:b8:a3:8e:d2:0c:75:20:a6:94:e4:20:54:38:ad:a3:
         ed:c1:d2:7a:d6:3b:36:4d:00:15:a6:90:9f:f3:55:a6:5d:44:
         6e:63:e1:8f:c2:54:e2:8a:2a:36:01:e8:22:62:07:f2:02:95:
         57:c7:a4:8a:d2:b9:ba:45:d6:3f:39:f9:68:27:ca:9e:12:c4:
         6a:f3:ff:e6:fe:9f:15:53:0a:9a:f4:d9:01:0c:b9:4b:b1:29:
         0f:31:85:ad:06:44:7e:ed:11:72:9e:72:e8:51:13:fc:42:da:
         ab:26:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:57 2024 by rpki-client on console-fra.rpki-client.org