Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130372e302f32342d3234203d3e20323632323136.roa
File:                     3133382e302e3130372e302f32342d3234203d3e20323632323136.roa (raw, json)
Hash identifier:          UdgCfC3HxkAfeaCTqJ2LdyIL5tK75rQ09sTzyLMmy9o=
Subject key identifier:   F4:24:BC:0C:6E:7E:0B:4E:26:BD:9F:13:BF:84:38:A7:9E:28:29:4E
Certificate issuer:       /CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
Certificate serial:       71EFC947581C4A960CF33C6EA18CF684844D12A2
Authority key identifier: 7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130372e302f32342d3234203d3e20323632323136.roa
Signing time:             Fri 08 Nov 2024 14:10:01 +0000
ROA not before:           Fri 08 Nov 2024 14:05:01 +0000
ROA not after:            Fri 07 Nov 2025 14:10:01 +0000
asID:                     262216
IP address blocks:        138.0.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ef:c9:47:58:1c:4a:96:0c:f3:3c:6e:a1:8c:f6:84:84:4d:12:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1F174BFBB17B7822E82D3AA14E86D385483089
        Validity
            Not Before: Nov  8 14:05:01 2024 GMT
            Not After : Nov  7 14:10:01 2025 GMT
        Subject: CN=F424BC0C6E7E0B4E26BD9F13BF8438A79E28294E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:63:ca:c9:dd:d3:c4:cb:2d:34:23:9a:42:
                    eb:ed:7c:e6:55:b0:ef:8e:46:1a:50:e1:13:d8:00:
                    6c:17:f4:6c:81:89:65:e2:b3:bc:48:95:3e:3c:38:
                    07:4c:0b:7b:d1:86:74:d9:e1:76:3e:0f:55:19:5d:
                    0b:00:ad:57:95:d2:47:64:24:d9:24:e2:38:89:2b:
                    15:38:20:47:43:23:4f:22:06:7e:0e:6f:4f:2d:c6:
                    46:bd:c8:b9:43:de:3c:3a:f6:06:4d:d4:fa:78:8c:
                    ad:4f:f8:c8:ae:c4:8d:6e:a0:8c:e2:1b:93:01:18:
                    7e:c1:11:aa:d6:c3:81:e3:74:b7:2b:d2:80:6f:e5:
                    56:6e:0f:36:2c:b1:e7:e3:d4:e0:00:9e:29:4d:8a:
                    6a:2f:5d:6c:08:20:14:0f:24:30:46:ba:14:72:a2:
                    8d:76:10:cd:60:f3:23:cb:68:6a:32:64:0f:f6:b7:
                    f7:b2:eb:65:bf:88:b8:e8:e7:65:25:59:0c:33:5f:
                    9e:76:76:7e:4c:20:52:84:d4:91:70:99:43:28:a1:
                    5c:7e:84:59:42:c4:e5:80:32:35:e6:6c:09:66:44:
                    d7:09:47:c5:a5:e5:e0:2c:62:41:ab:0d:c8:2a:d6:
                    d4:46:90:05:0a:f7:9c:2a:42:b9:c4:fe:d3:92:ab:
                    8a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:BC:0C:6E:7E:0B:4E:26:BD:9F:13:BF:84:38:A7:9E:28:29:4E
            X509v3 Authority Key Identifier:
                keyid:7D:1F:17:4B:FB:B1:7B:78:22:E8:2D:3A:A1:4E:86:D3:85:48:30:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7D1F174BFBB17B7822E82D3AA14E86D385483089.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBCE33D5A84EC3EBE5803B439879908718B1637FDF020EF9C82DB7BE202007CC/0/3133382e302e3130372e302f32342d3234203d3e20323632323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:38:5a:b2:ec:65:c2:a4:ea:02:89:41:eb:c3:4f:65:c6:d6:
         58:d3:e8:c3:5f:7a:f3:b7:87:da:d3:64:8f:c2:ca:59:5d:22:
         73:f2:fc:a7:7a:fd:13:3e:68:e8:e8:da:37:d7:1d:b6:b0:0b:
         41:51:cb:a0:53:6f:37:2e:29:e7:00:3c:52:ff:49:4f:84:96:
         d8:ba:f9:ed:e3:1e:ce:91:bf:53:81:a4:e9:76:df:41:35:a8:
         66:40:6e:84:77:da:75:aa:a2:9f:e1:53:85:55:af:94:34:78:
         d7:40:15:26:d0:95:bb:7e:f3:50:bc:01:46:60:9c:2a:6e:d3:
         76:47:94:3b:aa:94:28:8e:3f:95:d4:78:ff:2e:86:63:cb:c7:
         7e:9f:68:e5:86:ba:68:d4:cf:bf:0b:02:3a:77:b7:81:87:ef:
         04:00:8c:7b:b3:6c:ce:0d:cb:f6:d8:5e:4d:1b:cc:81:a2:97:
         bd:e8:01:50:87:c9:80:8c:12:ea:b4:da:c3:43:58:59:37:37:
         61:d8:97:b5:53:3e:e4:bb:ab:cf:c8:12:71:67:4b:18:40:cc:
         e6:e8:6c:cc:db:87:e7:01:07:6d:7b:ff:03:cb:1c:71:16:1d:
         2d:a3:6a:75:3a:30:00:2f:61:64:67:52:cc:f5:72:3c:0b:e1:
         c1:98:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:39 2024 by rpki-client on console-ams.rpki-client.org