Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130342e302f32322d3232203d3e20323632323136.roa
File:                     3133382e302e3130342e302f32322d3232203d3e20323632323136.roa (raw, json)
Hash identifier:          nJeDhoauvrffEl49E2+Tmlh0fmWXzvz1SzL+u3QvLOw=
Subject key identifier:   B0:9D:96:07:F5:B0:8C:3A:E1:5C:E2:08:FD:B2:23:D3:53:6C:03:80
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       4287A6FC987B255FA0C4FFC7FABCADD9851E9A31
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130342e302f32322d3232203d3e20323632323136.roa
Signing time:             Fri 08 Nov 2024 14:10:03 +0000
ROA not before:           Fri 08 Nov 2024 14:05:03 +0000
ROA not after:            Fri 07 Nov 2025 14:10:03 +0000
asID:                     262216
IP address blocks:        138.0.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:87:a6:fc:98:7b:25:5f:a0:c4:ff:c7:fa:bc:ad:d9:85:1e:9a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Nov  8 14:05:03 2024 GMT
            Not After : Nov  7 14:10:03 2025 GMT
        Subject: CN=B09D9607F5B08C3AE15CE208FDB223D3536C0380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:62:aa:9e:0c:87:b7:af:e4:ea:7e:0f:ea:
                    a4:88:05:2c:5d:5a:83:8f:9d:4d:78:af:92:2e:a2:
                    5e:5f:1f:86:5d:b0:54:70:2b:c8:3c:15:ab:4f:5c:
                    5a:f6:ec:42:88:c7:2f:f8:3a:19:a6:68:98:22:5e:
                    cf:75:a3:93:6f:b6:a8:36:41:cf:e4:65:56:51:c6:
                    2b:b4:13:61:e2:d3:f2:35:ff:07:a3:8f:02:00:cc:
                    9c:ce:b9:51:fe:5c:e7:4a:24:80:61:7f:1b:6f:9a:
                    b4:04:5e:7a:10:1e:f7:f9:64:be:58:cc:b4:30:ed:
                    52:10:d5:50:eb:a6:4e:b1:23:88:c3:28:e4:8f:df:
                    02:d7:b6:08:bd:20:d3:63:45:68:d8:86:a7:10:2d:
                    6f:9e:88:82:5d:7e:11:2d:9c:57:68:83:c2:bd:04:
                    11:cf:b8:76:fc:c2:64:4b:e9:75:45:28:1e:8a:77:
                    6e:c0:f7:62:d1:76:7d:0c:00:3c:f9:dd:76:ee:3f:
                    ff:71:1f:c7:b0:dd:07:a7:51:ab:9d:bc:cc:ff:eb:
                    2b:ee:b3:62:81:64:a8:36:cb:86:d9:a3:65:41:a1:
                    76:1f:fc:76:52:1e:85:ff:d5:e0:2d:e5:d5:c1:71:
                    68:92:2f:fd:c9:9f:b2:df:19:06:09:5c:92:17:08:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9D:96:07:F5:B0:8C:3A:E1:5C:E2:08:FD:B2:23:D3:53:6C:03:80
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130342e302f32322d3232203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:7e:7a:1a:5b:3d:14:36:59:4d:c3:d5:79:92:20:99:7a:b5:
         a2:55:48:74:19:a3:c1:6f:bd:0d:8d:c4:12:90:fe:4d:a7:a4:
         c1:ae:5e:d0:7a:90:dc:b7:34:d4:ca:f1:9c:c4:36:45:a8:fc:
         bb:7a:9a:f1:b9:f5:4a:8b:62:0d:63:bb:03:ae:a4:46:37:20:
         cd:f9:4c:c2:7d:1d:e1:4f:50:3c:50:ec:84:b4:3e:8c:c2:ba:
         f1:1d:2c:8d:a7:71:8d:af:7e:df:23:52:6c:88:5a:cc:c1:d7:
         2a:0c:ec:6f:92:7c:72:5e:89:d0:30:0f:e2:c2:3c:5d:69:da:
         b9:06:30:f1:2a:c1:6f:b5:cb:fa:a8:28:13:6d:fb:20:c8:eb:
         69:eb:94:1d:34:08:78:e1:e3:82:37:f6:42:c6:21:d4:89:7a:
         ca:17:44:ae:a9:f7:f0:70:6c:90:96:54:7e:b1:18:f3:bb:31:
         f6:13:fe:4c:9a:6c:86:a8:a7:c6:6e:86:af:c9:33:99:73:77:
         f1:cd:21:f9:1e:f4:1d:ed:6c:3d:7a:96:5e:e0:d7:56:d8:50:
         d1:20:09:6d:21:18:90:67:1b:e3:b5:db:8b:0a:02:f8:5f:e4:
         bc:4b:4a:13:a2:c4:a9:8d:5b:f2:e2:78:58:4d:9e:f7:9e:c2:
         93:8c:c8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org