Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3232203d3e203437383639.roa
File:                     3133382e33362e31362e302f32322d3232203d3e203437383639.roa (raw, json)
Hash identifier:          gaEFs2oYebt3N/A4LP3wrrN2exGBqkbMySBCFbGPJPU=
Subject key identifier:   5A:6B:A1:85:45:BC:52:77:D3:63:E6:1E:B1:C4:2D:E3:6A:A2:20:12
Certificate issuer:       /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial:       4CF28643259D33A8E650F3C2B1683996DB74F24E
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3232203d3e203437383639.roa
Signing time:             Tue 05 Mar 2024 18:11:16 +0000
ROA not before:           Tue 05 Mar 2024 18:06:16 +0000
ROA not after:            Tue 04 Mar 2025 18:11:16 +0000
asID:                     47869
IP address blocks:        138.36.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f2:86:43:25:9d:33:a8:e6:50:f3:c2:b1:68:39:96:db:74:f2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
        Validity
            Not Before: Mar  5 18:06:16 2024 GMT
            Not After : Mar  4 18:11:16 2025 GMT
        Subject: CN=5A6BA18545BC5277D363E61EB1C42DE36AA22012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:da:2a:02:41:51:3e:6b:d5:ad:a9:d6:89:87:
                    24:82:9e:09:7c:00:7c:16:73:2c:5b:2e:a3:5d:2a:
                    da:66:33:19:a8:53:4f:61:ed:8a:49:cb:4c:33:39:
                    c2:ac:58:18:04:97:4f:32:32:b2:c1:dd:a5:ed:d8:
                    80:4c:a5:ed:4f:98:41:43:74:2b:1b:6b:45:a0:0a:
                    59:23:c6:94:d5:6a:2f:8f:ab:ea:63:23:f1:b6:62:
                    5f:d4:cb:51:67:b5:32:f9:e9:64:d1:b7:14:c7:7c:
                    cb:e4:95:7f:06:71:53:78:82:8d:d2:fa:bf:e2:f5:
                    19:dc:59:18:22:f4:46:22:b8:51:7f:13:ed:c3:a5:
                    43:03:2a:d5:83:3f:e3:b1:c9:03:d8:a1:0f:6f:00:
                    0e:9c:49:bc:1b:1e:5b:b9:75:4d:c3:79:d6:a5:eb:
                    85:a9:4a:ac:64:80:20:a6:52:03:a7:33:1a:fa:83:
                    99:b4:d4:39:7b:b5:23:9a:a4:10:67:06:06:95:df:
                    46:3c:fe:be:32:9c:a5:92:bd:c9:0e:1d:6e:3f:b4:
                    42:ab:4e:ad:49:9b:5a:c3:b5:2d:47:79:83:b9:73:
                    5b:d7:a7:57:8d:f8:61:63:26:5e:a7:ff:d5:e2:ec:
                    0e:23:c9:07:26:13:12:c4:60:fe:20:bb:2d:f7:7c:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6B:A1:85:45:BC:52:77:D3:63:E6:1E:B1:C4:2D:E3:6A:A2:20:12
            X509v3 Authority Key Identifier:
                keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3133382e33362e31362e302f32322d3232203d3e203437383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:34:b2:d9:4d:3a:44:5f:2e:11:b8:07:39:09:c1:2d:61:57:
         8c:f6:ca:01:ae:ba:e3:2a:cb:a3:95:02:30:6a:ca:a4:33:50:
         82:5a:58:d3:60:ef:c9:07:05:0e:1b:7d:b3:82:a7:7d:9e:ad:
         7c:0d:90:de:bc:67:59:c2:72:69:01:74:c0:b5:85:cf:22:fc:
         65:77:97:4b:51:7f:1b:b6:85:00:34:54:ca:fe:ad:3b:4b:4a:
         92:3f:55:27:bb:92:3e:d5:39:40:8e:b2:e9:88:50:1f:e6:05:
         b8:2e:af:69:18:0c:8d:47:ff:64:7d:85:75:23:d0:14:82:71:
         5d:8d:81:73:79:35:1a:78:7b:5b:5c:4b:75:a3:f1:21:0b:a8:
         61:87:c0:80:8d:23:c1:bd:17:6f:35:85:3c:89:8c:71:b1:f5:
         25:93:87:57:4e:80:ba:08:7d:ec:06:78:2c:cb:75:03:c6:43:
         f1:e0:0c:34:da:bf:af:63:4b:ab:91:dc:16:fc:c1:d3:23:3a:
         ee:05:e9:c5:b3:ec:cc:a2:4c:02:8c:fe:eb:fa:19:1c:8d:cf:
         9f:46:02:8c:e6:d1:6b:f9:13:8b:f5:48:ef:d2:6b:28:e5:c2:
         b1:4d:6b:71:be:eb:53:81:60:f0:bb:a4:89:f7:ba:12:9c:5a:
         1a:59:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:04:40 2024 by rpki-client on console-fra.rpki-client.org