Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132322e302f32332d3234203d3e20323636383436.roa
File:                     3133382e302e3132322e302f32332d3234203d3e20323636383436.roa (raw, json)
Hash identifier:          mCLNuN7qBiok4+ROXQ7S1iDeTcFtmagOfrc+W/p9T4I=
Subject key identifier:   DD:5E:2E:0A:8A:66:69:B3:44:E7:07:2A:EC:77:D1:81:26:1E:78:47
Certificate issuer:       /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial:       341AAE78B0B80BDF8AEA206C303A6D5E38BCB0E8
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132322e302f32332d3234203d3e20323636383436.roa
Signing time:             Tue 05 Mar 2024 17:48:19 +0000
ROA not before:           Tue 05 Mar 2024 17:43:19 +0000
ROA not after:            Tue 04 Mar 2025 17:48:19 +0000
asID:                     266846
IP address blocks:        138.0.122.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1a:ae:78:b0:b8:0b:df:8a:ea:20:6c:30:3a:6d:5e:38:bc:b0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
        Validity
            Not Before: Mar  5 17:43:19 2024 GMT
            Not After : Mar  4 17:48:19 2025 GMT
        Subject: CN=DD5E2E0A8A6669B344E7072AEC77D181261E7847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:97:f8:cd:23:90:89:8d:bf:64:5c:83:49:
                    f5:62:4e:9f:41:0d:d3:b7:47:d8:18:e4:af:72:30:
                    69:3b:50:18:5d:e7:78:3d:28:13:89:bc:d6:c0:ab:
                    ab:35:fd:da:13:c8:e1:5e:92:f9:3f:ca:ff:c6:ea:
                    d2:08:08:3c:15:1d:be:a6:aa:cd:b8:66:81:24:10:
                    ef:30:78:00:0f:fc:71:ec:de:56:73:4f:17:10:20:
                    e1:1a:01:f2:b5:f1:1b:de:09:ca:9b:f3:eb:67:d1:
                    58:3f:d3:11:c9:0c:5a:b6:60:77:62:7b:c2:c1:b8:
                    8e:ef:76:7c:09:5f:64:9c:bf:da:e3:99:be:a4:86:
                    90:f5:cf:22:5b:a7:1a:3f:db:7d:ac:3c:cf:f4:9f:
                    fa:06:33:c4:3f:04:6c:17:c2:8a:b1:66:c7:df:a4:
                    8c:c0:6f:8d:f0:9d:58:5d:91:8e:8b:cf:17:4f:45:
                    99:4f:e2:f8:e7:4a:b8:e0:53:6d:9f:27:b1:42:7c:
                    76:a4:b4:15:90:de:48:09:b2:42:33:05:5f:07:02:
                    8d:b8:e9:2d:ac:6e:97:61:95:51:d2:f3:a9:9d:34:
                    17:42:f8:81:ea:5f:50:d6:c6:49:4c:21:26:cf:81:
                    26:88:6a:f1:41:45:25:a5:eb:8d:2e:22:c8:a7:af:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5E:2E:0A:8A:66:69:B3:44:E7:07:2A:EC:77:D1:81:26:1E:78:47
            X509v3 Authority Key Identifier:
                keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132322e302f32332d3234203d3e20323636383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:79:8f:88:d8:02:54:a5:85:05:62:be:ff:18:74:d6:51:86:
         3c:2c:3a:24:a7:27:a4:80:26:45:fd:7a:35:c9:bb:0b:a7:15:
         60:29:03:a4:01:71:ad:ce:62:82:2c:9d:4f:47:5b:36:d1:bd:
         26:c6:f1:43:f1:7b:b0:98:84:e2:37:09:2d:d7:d7:52:56:9d:
         fc:da:ac:c8:62:48:6d:ad:47:8d:11:b7:e2:06:27:d9:fc:99:
         b3:a7:db:0a:e0:1d:a5:74:0e:41:83:80:89:fe:b2:7c:b7:db:
         48:df:ce:86:c6:94:84:30:d6:f9:33:67:9c:70:d3:27:61:c6:
         c4:25:4a:ce:06:93:95:10:9c:d9:0a:0c:1f:71:9c:07:c7:0f:
         9c:ae:57:7b:34:fd:2a:69:5b:9a:06:37:b3:bd:4d:f3:55:52:
         7f:bd:23:44:81:09:ef:59:54:0c:a9:5f:e0:96:25:62:2f:80:
         48:82:c0:74:15:d0:10:47:7d:c5:09:57:7c:61:18:3f:78:b7:
         bf:c7:9d:d6:23:2a:ce:9a:e2:54:25:3a:3d:f9:78:d7:1f:1c:
         15:02:b9:54:43:d1:6e:40:5e:44:21:6a:ba:98:32:2b:88:d5:
         66:f7:e3:80:ca:b3:93:96:91:f1:dd:e7:74:9b:73:9b:fd:d9:
         85:67:ba:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 01:36:29 2024 by rpki-client on console-ams.rpki-client.org