Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35372e302f32342d3234203d3e203532353130.roa
File:                     3133382e3231392e35372e302f32342d3234203d3e203532353130.roa (raw, json)
Hash identifier:          AmbxcWscwh6Kvep0MvncuSufX+nbasYgUffMaXw2zWU=
Subject key identifier:   AD:BC:25:53:2B:CC:D7:31:AE:CE:F1:F1:4F:D7:FC:CE:5F:3D:FB:5A
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       39B7E96C15AC0C8057C96DF620C2EA40E0204C22
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35372e302f32342d3234203d3e203532353130.roa
Signing time:             Tue 05 Mar 2024 17:52:45 +0000
ROA not before:           Tue 05 Mar 2024 17:47:45 +0000
ROA not after:            Tue 04 Mar 2025 17:52:45 +0000
asID:                     52510
IP address blocks:        138.219.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b7:e9:6c:15:ac:0c:80:57:c9:6d:f6:20:c2:ea:40:e0:20:4c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Mar  5 17:47:45 2024 GMT
            Not After : Mar  4 17:52:45 2025 GMT
        Subject: CN=ADBC25532BCCD731AECEF1F14FD7FCCE5F3DFB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:f6:7f:ff:bc:0f:5e:db:4f:24:89:70:69:
                    c0:46:26:02:2e:da:48:c0:66:55:a8:a8:97:dc:d9:
                    4b:3a:92:cc:5d:28:03:af:be:6f:cd:a6:f4:71:58:
                    45:87:e5:1f:93:17:b3:08:84:5a:10:ff:02:d7:57:
                    f5:ec:6c:28:e8:0d:2b:4f:85:cc:b7:62:ba:fa:be:
                    ab:53:1b:7c:97:d3:08:f8:0b:08:63:21:9c:98:15:
                    83:77:2f:c9:44:63:66:7a:5e:e6:58:98:61:94:fc:
                    8d:77:a9:b6:79:da:6a:76:f5:ab:cb:65:04:62:bb:
                    3d:a9:e8:5c:58:c9:01:26:07:e1:29:99:03:ac:fa:
                    f4:c7:8c:a3:f1:91:0e:0c:d3:da:a0:5c:ac:4a:10:
                    09:01:7d:78:a0:25:be:97:e3:56:1b:39:05:a3:da:
                    fb:b5:a1:fe:b9:10:88:89:c0:64:72:a1:0c:f8:c6:
                    98:a1:35:ed:eb:e1:d3:d0:77:e0:e8:71:c0:8f:f9:
                    9a:f5:e7:86:8f:9f:22:28:4c:ee:fa:a8:69:64:06:
                    3a:cf:ce:2f:dd:05:18:72:b4:ac:84:f0:52:85:6b:
                    8f:db:f9:14:6a:19:b4:e4:56:57:02:9a:73:7b:ba:
                    cf:1f:ed:ea:0c:35:c9:c0:74:0f:d4:34:17:2e:84:
                    46:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BC:25:53:2B:CC:D7:31:AE:CE:F1:F1:4F:D7:FC:CE:5F:3D:FB:5A
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35372e302f32342d3234203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:cd:a5:12:6a:f5:0d:c8:51:bf:a9:8a:61:66:cc:fc:1b:a0:
         fb:ed:09:e6:4f:52:d0:c9:86:a6:23:04:d2:c6:b8:32:eb:8e:
         27:3a:7c:5a:af:22:da:73:61:15:97:4a:ef:8d:99:1d:cd:a2:
         9b:c0:15:98:07:74:4d:66:a6:38:5a:f3:4e:3e:c9:c2:80:16:
         18:da:ac:02:77:93:64:d8:85:ce:33:1c:d0:a4:fc:28:7a:17:
         b0:63:b8:cf:1d:16:7e:f4:f9:24:e4:e2:b3:4b:17:13:3e:05:
         6a:c2:a0:a7:68:a9:e5:0b:e3:c8:cb:d9:23:7d:4e:5e:b1:69:
         48:8a:9d:57:9b:d7:3b:f2:ef:4f:bd:4f:16:89:02:91:14:02:
         77:12:5b:14:90:09:a1:fe:bc:2a:26:74:9b:4b:76:05:64:8b:
         a0:c1:36:44:21:77:76:92:eb:a0:df:ba:62:4a:c9:22:9f:a2:
         1a:e6:a0:be:c3:0f:ea:fe:db:b2:df:22:36:99:a7:0f:13:83:
         b4:b3:f8:a5:6b:c5:67:c4:81:fb:0e:a6:82:18:8d:f0:fc:5a:
         16:ba:ec:ea:0c:9e:4d:16:f4:18:e5:90:b5:24:29:55:96:b8:
         53:72:04:0e:76:60:b1:96:75:20:15:f2:fe:81:b1:55:0b:d0:
         27:09:9d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:44 2024 by rpki-client on console-fra.rpki-client.org