Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130342e302f32342d3234203d3e20323632323136.roa
File:                     3133382e302e3130342e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          sESKZUVzqySzJpYF+6s7prgb5hP5XjLo197FjhQ5+2w=
Subject key identifier:   02:2A:99:5E:0A:3A:C6:3D:A1:3B:3A:61:66:B0:C2:46:5B:EF:FB:57
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       13FA747CE432377994A8F907D116A32B261ECCFD
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130342e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 08 Nov 2024 14:10:00 +0000
ROA not before:           Fri 08 Nov 2024 14:05:00 +0000
ROA not after:            Fri 07 Nov 2025 14:10:00 +0000
asID:                     262216
IP address blocks:        138.0.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fa:74:7c:e4:32:37:79:94:a8:f9:07:d1:16:a3:2b:26:1e:cc:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Nov  8 14:05:00 2024 GMT
            Not After : Nov  7 14:10:00 2025 GMT
        Subject: CN=022A995E0A3AC63DA13B3A6166B0C2465BEFFB57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:54:74:3a:8f:7e:4d:a2:bf:a4:ee:94:06:81:
                    37:b0:98:4f:f5:e5:e3:72:47:23:f0:6d:d1:10:3a:
                    92:22:f2:5e:15:44:35:d1:e8:f4:28:ca:ba:53:b1:
                    34:09:4b:a7:cf:f1:e1:2e:92:9a:57:c0:59:6d:7a:
                    79:09:a5:35:ed:ae:7d:85:34:78:b6:77:8a:16:59:
                    a3:d5:2d:8c:47:68:42:91:fd:ff:a0:c1:55:49:7d:
                    b4:29:76:be:78:7e:ca:10:de:ec:c7:f5:c4:a4:18:
                    01:25:22:c7:64:97:3d:3a:74:2f:6e:5f:b8:fa:63:
                    14:0b:9d:2b:01:e1:d7:fb:6d:83:09:41:21:bf:bc:
                    62:b5:a2:46:2f:5b:95:63:6a:76:15:5b:73:30:86:
                    cb:a2:ec:a9:84:7c:db:3c:13:e3:df:8a:71:c6:07:
                    be:c3:35:ee:76:ef:8f:a4:e9:e5:af:59:d0:8b:4e:
                    96:b7:07:00:ae:62:a2:5d:75:29:20:95:52:58:5c:
                    aa:c3:b5:44:d4:15:40:27:f7:3d:b2:2a:99:01:18:
                    eb:5f:fa:87:9c:6e:d9:fd:8c:b3:c7:73:75:0f:1d:
                    5b:4c:3f:92:6a:9f:7e:bc:1e:05:cd:ff:c3:e0:2f:
                    25:10:bf:f9:f2:93:fd:8d:65:8f:ee:ad:c6:94:90:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2A:99:5E:0A:3A:C6:3D:A1:3B:3A:61:66:B0:C2:46:5B:EF:FB:57
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130342e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:fd:b0:2f:a1:e1:c9:64:38:8b:e7:7a:b0:c0:0c:fa:b4:8c:
         b7:d0:86:89:2e:9e:c8:dd:83:e1:34:8c:90:cf:c1:d2:9a:dd:
         6d:88:27:2b:a8:a0:65:44:7a:e9:b8:a5:dc:04:af:e2:43:2b:
         90:28:ac:4b:39:d3:ad:d0:e7:a6:bf:65:8a:df:e7:39:32:62:
         52:da:ce:db:45:59:40:b0:50:56:0f:20:75:bc:ee:41:89:95:
         62:db:48:8c:61:f3:ff:d8:64:f8:c9:fa:84:1f:8b:17:96:0b:
         6f:93:b6:14:73:16:eb:7f:d5:21:a0:bd:5f:2b:bd:ff:8d:c9:
         55:8d:b4:ff:08:9a:0d:9b:ac:1f:63:67:c1:d3:1b:2d:d8:1a:
         9e:bc:df:1c:55:8d:68:01:ae:fa:54:20:df:86:19:4c:2e:85:
         be:3e:44:ef:ba:a0:15:ef:e8:25:fe:44:6f:8c:c4:56:9e:63:
         06:dd:ba:ae:83:df:d1:27:23:b6:51:5c:7d:d8:d9:f8:09:8a:
         06:21:38:00:ac:6d:bd:fd:0c:1c:53:17:98:e1:0b:5c:df:56:
         05:c8:52:3c:d1:37:63:1a:9f:e2:26:9c:a1:51:3d:4e:f2:58:
         24:16:e6:16:bc:a2:1e:6c:7f:96:16:94:4b:5f:ff:fc:b6:05:
         e5:d0:73:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org