Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130362e302f32342d3234203d3e20323632323136.roa
File:                     3133382e302e3130362e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          hlWzuZhp3R6ftPOqEtvrgTF48Uc2OsjrO4BOLZX60Ts=
Subject key identifier:   AD:4C:C4:DF:23:A2:0D:BC:32:EC:7A:3B:82:20:13:AC:1E:CC:E7:71
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       2B116BD1E62F2AB07308E9C18CA49445D8DF667B
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130362e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 08 Nov 2024 14:10:04 +0000
ROA not before:           Fri 08 Nov 2024 14:05:04 +0000
ROA not after:            Fri 07 Nov 2025 14:10:04 +0000
asID:                     262216
IP address blocks:        138.0.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:11:6b:d1:e6:2f:2a:b0:73:08:e9:c1:8c:a4:94:45:d8:df:66:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Nov  8 14:05:04 2024 GMT
            Not After : Nov  7 14:10:04 2025 GMT
        Subject: CN=AD4CC4DF23A20DBC32EC7A3B822013AC1ECCE771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:33:b1:33:60:c4:50:08:54:34:47:de:49:
                    bd:d1:13:1b:5d:5f:38:52:4b:1d:ae:1d:ad:e1:09:
                    33:7e:69:5f:5b:ec:cd:96:aa:a1:91:3e:5a:23:48:
                    47:29:52:b9:28:2e:fb:79:b5:c8:46:0e:29:ae:aa:
                    8c:a5:8e:a0:0f:a5:0b:85:3a:13:77:4c:45:6d:4e:
                    eb:60:f5:81:50:33:b0:5f:8b:35:09:a8:10:1d:0c:
                    b6:42:58:40:70:bc:67:0d:90:eb:21:79:b3:00:9b:
                    ad:44:26:c3:5c:2d:2e:e2:31:e9:e4:3c:c9:8d:9e:
                    df:b0:c4:64:9e:d0:c1:9f:7c:09:20:45:9d:31:26:
                    36:cc:65:a8:6c:b9:30:9e:71:d2:d6:0c:d2:47:c3:
                    83:2a:99:e3:75:68:e5:f2:28:41:40:c5:76:c2:37:
                    92:6e:7a:c8:68:ab:a1:eb:97:85:1e:95:de:64:02:
                    88:37:9c:fd:6a:91:2d:a7:d8:29:54:dd:f8:f9:03:
                    61:62:03:32:46:83:dc:b3:fc:e4:5b:58:18:53:e1:
                    d3:6a:85:2e:3a:94:8b:51:a3:5f:98:07:d2:28:44:
                    32:c9:8f:1a:63:64:1e:49:43:9d:91:fe:12:b7:bc:
                    f5:04:06:6a:7a:c9:25:03:91:0a:cc:a1:92:c5:ff:
                    dd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4C:C4:DF:23:A2:0D:BC:32:EC:7A:3B:82:20:13:AC:1E:CC:E7:71
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130362e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:3c:ed:e6:d2:8c:99:ab:23:7d:fa:9e:ef:8c:53:96:86:
         d0:7f:d8:dc:64:8a:9b:1b:1c:a2:ca:74:96:6c:8d:80:35:31:
         88:86:6f:9f:ec:0a:d6:b0:4e:ab:2b:05:e2:11:84:55:fa:1a:
         cc:c8:2f:9b:b1:04:69:f9:43:a4:ba:61:bf:12:cf:e6:6c:38:
         2a:2d:47:03:65:a7:c1:be:b6:e8:81:84:b7:51:0c:ac:e9:17:
         ca:98:64:39:24:3d:52:52:8b:53:2e:bc:6a:16:1f:4c:05:fc:
         f6:74:c4:0d:d7:00:28:b8:d9:ea:c3:c2:d5:45:ff:63:73:22:
         b1:fb:61:9b:14:64:b3:56:62:c8:5b:17:f4:2d:61:08:c2:51:
         ec:7c:87:6a:19:ac:0b:12:35:23:92:cd:d8:27:ca:0c:ac:91:
         ca:76:9c:e0:0e:e4:9a:43:4c:d1:e4:5a:12:f4:64:00:ce:da:
         f1:82:c2:7f:a7:57:ea:83:58:12:09:c7:42:94:53:1b:9b:a1:
         2e:8b:5c:14:4e:97:68:36:fa:76:21:ac:0d:3a:5e:46:2b:9e:
         9c:c7:7e:71:fb:a1:80:c6:65:1a:69:3e:d8:03:23:8d:9a:0b:
         0e:03:0b:bb:45:cd:d8:ba:49:a2:0a:e5:1c:e1:eb:e1:e7:f2:
         85:75:bc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:39 2024 by rpki-client on console-ams.rpki-client.org