Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35382e302f32332d3233203d3e203532353130.roa
File:                     3133382e3231392e35382e302f32332d3233203d3e203532353130.roa (raw, json)
Hash identifier:          JNYiqdCwLCO9WipMdoetfyZHrBhIVe/BCIQAGiTrsCI=
Subject key identifier:   DB:48:FA:E4:4B:EC:32:F0:AF:F4:45:5B:15:5B:E9:FF:14:69:EB:6E
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       08CE1DD3DB50D28639EDB9AC7A8E42F276A50576
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35382e302f32332d3233203d3e203532353130.roa
Signing time:             Tue 05 Mar 2024 17:52:42 +0000
ROA not before:           Tue 05 Mar 2024 17:47:42 +0000
ROA not after:            Tue 04 Mar 2025 17:52:42 +0000
asID:                     52510
IP address blocks:        138.219.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ce:1d:d3:db:50:d2:86:39:ed:b9:ac:7a:8e:42:f2:76:a5:05:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Mar  5 17:47:42 2024 GMT
            Not After : Mar  4 17:52:42 2025 GMT
        Subject: CN=DB48FAE44BEC32F0AFF4455B155BE9FF1469EB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:ee:e2:b6:04:cb:f7:72:84:0f:76:1f:78:
                    80:1f:ca:c4:a6:b3:c6:28:a2:da:c1:64:a2:df:39:
                    0a:1f:a9:cf:cc:0f:65:a8:49:b9:a3:6d:d2:ae:0e:
                    d3:e4:1e:11:d8:17:65:3e:69:d8:22:1a:93:26:78:
                    90:6e:27:eb:ce:07:f6:64:e5:66:a0:ba:55:09:6f:
                    a1:8d:af:54:14:6c:15:e4:d9:75:8e:ea:08:ab:d2:
                    97:85:f2:25:46:e7:28:40:0f:7b:22:0b:dc:ac:71:
                    0b:02:14:3b:6b:f4:23:3f:61:09:39:6b:e3:ca:6b:
                    f9:1f:5d:a9:b9:87:c8:f8:08:e0:9b:0e:b1:2a:59:
                    42:cc:db:f8:67:8e:8c:dd:d7:41:60:9c:82:f8:37:
                    3b:e7:72:29:d5:b4:d6:e9:64:a4:21:01:6b:22:18:
                    c4:99:ad:96:1b:09:34:8b:cb:5a:8b:1a:f4:d6:01:
                    2c:51:34:1b:b1:2c:42:d6:0b:8e:a2:05:21:73:ee:
                    da:ba:5e:7a:da:11:4b:74:bf:d8:6e:66:04:cc:1e:
                    24:40:94:51:12:1d:8a:08:19:22:d3:d8:f8:02:19:
                    73:25:d1:dd:5c:04:5b:66:70:ee:88:d1:f0:3d:9e:
                    b2:38:16:8c:45:1e:53:17:62:32:dd:81:ee:fa:98:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:48:FA:E4:4B:EC:32:F0:AF:F4:45:5B:15:5B:E9:FF:14:69:EB:6E
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3133382e3231392e35382e302f32332d3233203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:89:e2:01:83:ad:d2:bc:e0:d9:c4:91:a4:f5:a5:69:93:
         5f:b3:24:7f:a4:28:22:53:68:0f:bc:b4:76:29:58:d1:28:a8:
         16:ff:b4:69:6c:b5:e5:81:1a:70:e4:f1:67:e8:78:2d:fc:59:
         d5:f0:29:9b:1d:29:aa:4b:2e:ef:62:fa:3f:d0:4e:d2:09:eb:
         07:4b:d8:08:bb:e6:d8:7b:50:f8:d1:d8:44:ac:de:77:48:76:
         b4:6e:71:7e:c2:53:38:58:b0:bf:ce:86:84:b0:a5:ca:5e:cf:
         c6:f3:9d:a8:d8:31:13:de:52:03:29:47:66:c9:7c:ba:2b:98:
         91:82:f8:4f:e8:6b:73:11:65:50:f5:1f:4a:b8:93:58:11:5a:
         35:56:b9:51:50:2d:67:25:9d:9a:64:d5:34:e3:9c:53:d2:8a:
         70:65:0a:d8:d9:7a:6b:8a:79:02:64:29:2e:25:4a:8d:6e:61:
         e7:2a:2f:da:c9:76:c1:f9:3d:9b:e0:c3:40:4f:0a:a7:f6:ee:
         a5:7a:99:3c:a8:c1:a9:df:19:9f:7a:86:0a:0f:42:7a:40:59:
         70:63:3f:a7:31:b2:f9:bb:b2:78:e6:45:97:6d:9a:27:96:de:
         ae:5b:6f:42:72:32:74:a2:71:be:cd:ab:ef:1a:0d:0f:c9:12:
         1b:31:77:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:59 2024 by rpki-client on console-ams.rpki-client.org