Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3133382e3231392e3135362e302f32322d3234203d3e203236363137.roa
File:                     3133382e3231392e3135362e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier:          P0vzx5h+o21yCl4pnA6aHTJz8eShUWZTwox+pUgfGIo=
Subject key identifier:   F1:9C:9A:C3:BA:3A:B7:D1:91:AE:F1:F4:1D:BA:10:89:7E:8F:F3:6F
Certificate issuer:       /CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
Certificate serial:       04723EB2295127641A401BA5E757C0D298B58126
Authority key identifier: 5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3133382e3231392e3135362e302f32322d3234203d3e203236363137.roa
Signing time:             Tue 05 Mar 2024 18:05:07 +0000
ROA not before:           Tue 05 Mar 2024 18:00:07 +0000
ROA not after:            Tue 04 Mar 2025 18:05:07 +0000
asID:                     26617
IP address blocks:        138.219.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:72:3e:b2:29:51:27:64:1a:40:1b:a5:e7:57:c0:d2:98:b5:81:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
        Validity
            Not Before: Mar  5 18:00:07 2024 GMT
            Not After : Mar  4 18:05:07 2025 GMT
        Subject: CN=F19C9AC3BA3AB7D191AEF1F41DBA10897E8FF36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1d:e0:df:fd:84:0e:e5:0e:97:c1:18:27:59:
                    ae:d2:83:5b:29:10:97:eb:99:eb:b8:ab:ad:ed:e4:
                    c9:36:fb:98:cf:e9:f6:e2:a0:b7:42:40:d1:a1:5c:
                    7f:80:f5:11:9e:e2:88:80:7b:3e:65:39:c5:38:57:
                    33:22:43:c4:39:78:5b:f0:c7:b6:a8:e1:43:56:9c:
                    7c:2c:00:a1:e8:51:c7:68:32:a5:bc:ac:69:3b:3b:
                    6d:90:ce:6f:bd:e1:23:e9:92:54:69:17:08:40:dc:
                    29:be:7c:27:78:9b:51:93:ac:f9:25:a1:a3:9d:c5:
                    73:bb:b8:d4:75:13:c6:ae:99:d6:8e:a7:7d:ca:b3:
                    ee:4c:42:f4:c7:f2:e0:c8:63:b2:a2:c0:1f:71:76:
                    07:db:9f:48:66:16:2c:9a:78:df:22:4c:8a:5a:3b:
                    33:0e:b7:d8:28:5c:f4:5a:4a:d6:12:70:e7:f2:9f:
                    0b:44:5a:e1:9b:da:4b:b2:fa:26:ef:11:7c:2c:74:
                    06:cb:d5:70:39:f6:00:3e:a9:05:70:7d:87:cb:eb:
                    74:db:54:a7:ef:42:5c:38:01:38:c6:78:60:a9:31:
                    bb:fc:90:3d:62:58:8c:a2:10:5b:4e:0e:89:b3:8d:
                    14:e9:07:6a:44:f2:7c:8c:75:5a:63:7b:cc:f7:c3:
                    f2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9C:9A:C3:BA:3A:B7:D1:91:AE:F1:F4:1D:BA:10:89:7E:8F:F3:6F
            X509v3 Authority Key Identifier:
                keyid:5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3133382e3231392e3135362e302f32322d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:d8:1e:60:99:85:ce:b4:f7:46:81:d9:e0:c8:f8:4c:ca:07:
         49:27:e0:54:a7:9b:27:82:ea:41:31:35:fa:26:0a:54:3b:e6:
         74:50:43:63:9a:fa:ac:b8:4f:92:ca:e3:a9:11:0c:b1:75:71:
         e3:95:49:2b:70:86:f9:70:e4:47:ab:10:66:eb:06:c0:3d:7b:
         9f:26:5d:04:79:79:13:0d:74:7a:c9:5f:d5:ed:a0:a6:f9:f6:
         9f:87:15:0a:89:2f:a7:da:9a:67:a3:52:94:dd:6b:9f:31:77:
         00:c2:a7:cc:a8:4b:f9:45:17:64:93:c9:5d:8b:56:d6:00:f7:
         7a:7e:dd:de:65:87:9e:59:76:7c:8d:c9:06:89:74:16:2d:81:
         c8:c2:0b:66:d5:b4:ed:f4:44:77:96:28:63:78:05:8a:00:c2:
         e3:00:ac:6c:2d:0e:9b:ed:f2:cb:7f:29:c6:fa:ee:41:53:c8:
         47:0e:5b:fa:16:05:4a:47:d4:5e:55:d5:02:8f:a9:4b:e4:b7:
         f0:89:ac:e7:05:22:00:57:d4:33:70:67:0d:5f:e2:b2:58:b4:
         e3:c6:20:75:b3:b2:a7:44:0a:2c:46:44:ac:6e:4e:fa:01:b9:
         4c:a1:4e:60:62:1a:55:50:71:9f:4f:6e:4e:0c:92:5a:28:05:
         45:57:7f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:58 2024 by rpki-client on console-fra.rpki-client.org