Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa
File:                     3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa (raw, json)
Hash identifier:          8Cg3JZRZHvLx4wHamdd7Q1q76e2gPXnRCIt28ov0hqE=
Subject key identifier:   57:DB:5F:5C:43:F4:E3:CA:A9:A3:C5:D6:D5:20:C7:35:2B:D1:CA:9C
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       096082A3C0703A1E3364C96799840E8302C1BF1F
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa
Signing time:             Thu 18 Jul 2024 04:30:00 +0000
ROA not before:           Thu 18 Jul 2024 04:25:00 +0000
ROA not after:            Thu 17 Jul 2025 04:30:00 +0000
asID:                     263681
IP address blocks:        138.204.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:60:82:a3:c0:70:3a:1e:33:64:c9:67:99:84:0e:83:02:c1:bf:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: Jul 18 04:25:00 2024 GMT
            Not After : Jul 17 04:30:00 2025 GMT
        Subject: CN=57DB5F5C43F4E3CAA9A3C5D6D520C7352BD1CA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:5b:2f:84:5f:76:f8:fc:b0:28:42:97:9f:
                    f5:96:2d:19:83:dd:38:23:65:80:5e:f4:7a:cb:c7:
                    e7:d5:81:42:ee:7c:63:76:61:2c:a6:1c:a7:49:8e:
                    25:2e:49:30:3f:70:e4:d1:88:8a:84:2f:89:ea:96:
                    7b:61:98:b8:58:b0:50:c8:03:d3:16:bf:72:b7:ca:
                    f7:40:1b:18:ca:a9:d3:49:f8:a4:6a:20:c6:d1:6c:
                    c7:c9:e2:5a:0d:b8:5c:a5:e3:ba:04:28:6b:7c:37:
                    80:ea:93:30:98:45:d4:19:54:df:f1:ed:83:d6:b8:
                    63:29:8d:ae:50:99:9b:4a:98:3e:64:3f:ce:ed:27:
                    d6:29:36:bd:bf:f6:0a:37:36:4d:d2:d4:9c:ad:d1:
                    15:95:e7:13:d0:8f:32:78:c6:1a:c1:f0:31:f0:ad:
                    b3:9d:0c:e7:e8:3a:c3:70:e1:96:23:40:7b:18:44:
                    38:c9:84:2d:3c:a2:b9:8b:6c:d2:04:e5:21:bf:7c:
                    8e:01:e7:c9:4a:bc:d7:a4:ad:49:6c:d8:91:49:c1:
                    4a:8f:bc:92:29:db:ad:89:ef:cf:d3:a2:3a:8b:5b:
                    f6:b3:5c:bc:21:36:33:ec:39:05:0a:e6:d3:28:f6:
                    d3:fc:cd:b6:87:39:c3:5f:ab:94:44:74:15:fe:cb:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DB:5F:5C:43:F4:E3:CA:A9:A3:C5:D6:D5:20:C7:35:2B:D1:CA:9C
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:5d:5a:15:ef:46:6b:51:39:1e:1e:57:d1:b1:a9:78:41:80:
         d9:65:35:69:bf:e6:1a:8b:c3:ad:ac:d1:b2:94:65:0d:79:7c:
         44:a2:bf:09:e8:1d:3a:55:4c:16:e8:e6:cd:15:4f:20:51:3a:
         b4:8f:f3:be:b0:08:68:12:2d:72:ed:54:26:4a:52:5c:7c:78:
         9a:1c:9a:75:b3:5d:95:10:2a:e4:40:67:89:34:1a:27:1b:c2:
         71:7e:2f:54:69:51:25:f1:4a:cc:93:c4:f7:a9:ba:5d:26:97:
         8d:14:00:76:a7:84:12:14:c1:e3:ec:ed:75:c2:0a:8c:a7:56:
         3f:fb:49:7c:03:8a:11:b7:e5:87:08:e1:83:7d:05:af:6d:5a:
         46:33:e0:21:24:91:a0:1d:05:a9:3a:f4:4a:04:01:dd:db:55:
         59:20:29:3c:5b:fc:0c:a0:91:53:40:67:9f:5c:68:df:91:c5:
         3d:e9:00:c4:04:06:2a:ad:bb:a8:2b:dc:05:ab:86:2b:0f:17:
         81:14:7e:d9:27:10:03:c6:0e:ac:d2:4b:41:01:a4:d2:b9:f6:
         2a:b5:db:db:50:63:6d:02:98:c8:c0:4b:1c:91:06:7a:a3:02:
         6d:4c:57:af:ed:35:26:9f:12:61:24:ba:f7:ed:8c:e2:87:b0:
         04:be:fb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org