Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132332e302f32342d3234203d3e203634313339.roa
File:                     3133382e302e3132332e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier:          8K1cgyiTzH7iAwE0MD841sSyL/ZuOivSLJVFBL0tozM=
Subject key identifier:   19:EE:4E:44:CC:59:2B:9F:85:44:ED:AB:1C:21:D0:38:03:E0:3A:46
Certificate issuer:       /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial:       5FB50E2A4C10E9F03A6C34AD6AB158FAB5BB1FE3
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132332e302f32342d3234203d3e203634313339.roa
Signing time:             Tue 05 Mar 2024 17:48:20 +0000
ROA not before:           Tue 05 Mar 2024 17:43:20 +0000
ROA not after:            Tue 04 Mar 2025 17:48:20 +0000
asID:                     64139
IP address blocks:        138.0.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b5:0e:2a:4c:10:e9:f0:3a:6c:34:ad:6a:b1:58:fa:b5:bb:1f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
        Validity
            Not Before: Mar  5 17:43:20 2024 GMT
            Not After : Mar  4 17:48:20 2025 GMT
        Subject: CN=19EE4E44CC592B9F8544EDAB1C21D03803E03A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:66:a2:1b:ac:30:4f:55:3a:67:c2:05:7f:31:
                    4b:7a:1b:65:a3:15:d4:80:f7:4f:4d:3c:6d:41:d0:
                    a8:53:2a:42:21:cc:29:0b:23:b9:ef:e8:51:ec:ec:
                    c2:9e:18:7a:42:7c:24:24:b9:f6:0e:5e:ce:3a:90:
                    e6:60:c6:9a:0e:c3:13:14:b5:a0:20:ef:5d:24:40:
                    54:11:e3:ec:90:10:81:e5:26:a3:4f:9b:71:5b:ad:
                    1c:3d:a3:a4:d3:23:28:32:0c:08:44:3b:86:00:aa:
                    b3:ba:13:a2:73:32:4d:bc:bd:a0:0f:fc:6f:0c:65:
                    ca:24:2b:f9:69:18:ff:27:be:7c:00:22:cc:3b:e6:
                    a3:50:f9:32:12:a9:94:7e:a2:0d:df:67:52:e6:ca:
                    47:38:9b:89:9d:19:c3:46:a7:e2:ad:68:c2:b3:b2:
                    0e:90:60:a5:b2:b1:0d:ad:95:a6:86:cc:37:0b:70:
                    98:fe:3a:d0:41:b7:5b:0e:ae:91:9f:b2:ba:b6:67:
                    f2:b3:b6:c4:89:07:32:ae:a3:a9:c0:78:c1:a7:31:
                    af:d1:4c:38:04:53:70:b7:50:bb:12:1a:2d:3c:c7:
                    b4:b1:a0:66:6b:96:5b:b8:ed:3b:06:b1:ab:46:c5:
                    d0:45:70:5f:34:e1:f1:8a:9b:0d:5f:4a:7d:69:69:
                    7d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EE:4E:44:CC:59:2B:9F:85:44:ED:AB:1C:21:D0:38:03:E0:3A:46
            X509v3 Authority Key Identifier:
                keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132332e302f32342d3234203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:db:8c:67:19:46:83:8d:b2:6f:7f:5a:2b:80:df:d8:b7:13:
         24:6b:24:31:59:f7:ba:7b:a7:c6:00:a6:92:9b:90:29:24:7a:
         b7:78:1b:b1:56:4b:82:b9:4e:3f:c8:53:1d:b8:d3:1c:ca:ff:
         50:1e:91:83:c0:16:be:a6:4f:50:89:9b:22:75:5d:a7:de:e4:
         81:d3:59:58:bc:a7:18:98:57:c4:b0:a3:83:3d:92:d2:78:61:
         74:f5:ae:ee:63:26:8c:01:70:c2:2d:cc:8b:bb:f9:85:a7:9c:
         e8:f6:b8:3e:d6:95:27:b5:32:a3:11:0c:90:ae:03:eb:dd:7b:
         5f:5c:dc:dc:8b:df:b6:ff:77:3d:b0:49:c1:87:50:cf:37:fa:
         f6:3d:af:00:a8:f6:6e:c4:4d:26:e2:be:b1:8f:48:a9:2e:9a:
         3d:7a:74:20:16:a4:19:79:28:84:c7:2f:3d:12:fe:5a:d3:bb:
         92:5a:a3:b7:23:3a:96:4f:12:89:49:cf:5d:f6:d9:1f:64:88:
         f5:09:5f:1e:63:e1:01:e3:32:91:cd:93:2c:ab:42:d5:63:65:
         3f:0d:0b:47:f9:c1:1e:5e:05:a2:ec:f1:8e:0d:86:a5:42:ac:
         25:32:7f:df:59:31:e9:f6:19:8b:5b:1c:47:74:38:87:b6:76:
         27:dc:04:66
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUX7UOKkwQ6fA6bDStarFY+rW7H+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgxQUE0M0RGMDMxRTAzMTIxQjEwMzc0QzA1QjUyQkJC
MTdBQ0JFQTAeFw0yNDAzMDUxNzQzMjBaFw0yNTAzMDQxNzQ4MjBaMDMxMTAvBgNV
BAMTKDE5RUU0RTQ0Q0M1OTJCOUY4NTQ0RURBQjFDMjFEMDM4MDNFMDNBNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdZqIbrDBPVTpnwgV/MUt6G2Wj
FdSA909NPG1B0KhTKkIhzCkLI7nv6FHs7MKeGHpCfCQkufYOXs46kOZgxpoOwxMU
taAg710kQFQR4+yQEIHlJqNPm3FbrRw9o6TTIygyDAhEO4YAqrO6E6JzMk28vaAP
/G8MZcokK/lpGP8nvnwAIsw75qNQ+TISqZR+og3fZ1Lmykc4m4mdGcNGp+KtaMKz
sg6QYKWysQ2tlaaGzDcLcJj+OtBBt1sOrpGfsrq2Z/KztsSJBzKuo6nAeMGnMa/R
TDgEU3C3ULsSGi08x7SxoGZrllu47TsGsatGxdBFcF804fGKmw1fSn1paX23AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUGe5ORMxZK5+FRO2rHCHQOAPgOkYwHwYDVR0j
BBgwFoAU2BqkPfAx4DEhsQN0wFtSu7F6y+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERkYxQjgxRUFCODhFQ0QxMTQwODhEOTkyNjBGRkFCNDhE
NjgwRURGNTE2QTQzQURCMjkxODdBRDI1NTkxRTFCLzAvRDgxQUE0M0RGMDMxRTAz
MTIxQjEwMzc0QzA1QjUyQkJCMTdBQ0JFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EODFBQTQzREYwMzFFMDMxMjFC
MTAzNzRDMDVCNTJCQkIxN0FDQkVBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREZGMUI4MUVBQjg4RUNEMTE0MDg4RDk5MjYwRkZBQjQ4RDY4MEVERjUx
NkE0M0FEQjI5MTg3QUQyNTU5MUUxQi8wLzMxMzMzODJlMzAyZTMxMzIzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzQzMTMzMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACKAHswDQYJ
KoZIhvcNAQELBQADggEBABPbjGcZRoONsm9/WiuA39i3EyRrJDFZ97p7p8YAppKb
kCkkerd4G7FWS4K5Tj/IUx240xzK/1AekYPAFr6mT1CJmyJ1Xafe5IHTWVi8pxiY
V8Swo4M9ktJ4YXT1ru5jJowBcMItzIu7+YWnnOj2uD7WlSe1MqMRDJCuA+vde19c
3NyL37b/dz2wScGHUM83+vY9rwCo9m7ETSbivrGPSKkumj16dCAWpBl5KITHLz0S
/lrTu5Jao7cjOpZPEolJz1322R9kiPUJXx5j4QHjMpHNkyyrQtVjZT8NC0f5wR5e
BaLs8Y4NhqVCrCUyf99ZMen2GYtbHEd0OIe2difcBGY=
-----END CERTIFICATE-----
Generated at Tue Nov 19 01:52:47 2024 by rpki-client on console-fra.rpki-client.org