Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31342e302f32342d3234203d3e203431303935.roa
File:                     3133382e3230342e31342e302f32342d3234203d3e203431303935.roa (raw, json)
Hash identifier:          0Q8TE79nWrQiNJUt1dNoMP1qJ9dkoLah5skOFwjJpG8=
Subject key identifier:   03:6D:A3:DA:0C:39:44:D7:EA:52:0A:AB:51:74:4A:5C:53:B2:29:D0
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       2DBB4971B8B7E855AF556B023F540E40BAA130EC
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31342e302f32342d3234203d3e203431303935.roa
Signing time:             Thu 11 Apr 2024 14:45:00 +0000
ROA not before:           Thu 11 Apr 2024 14:40:00 +0000
ROA not after:            Thu 10 Apr 2025 14:45:00 +0000
asID:                     41095
IP address blocks:        138.204.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bb:49:71:b8:b7:e8:55:af:55:6b:02:3f:54:0e:40:ba:a1:30:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: Apr 11 14:40:00 2024 GMT
            Not After : Apr 10 14:45:00 2025 GMT
        Subject: CN=036DA3DA0C3944D7EA520AAB51744A5C53B229D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:52:42:e2:46:8d:91:1d:0c:95:44:81:d7:
                    d8:b7:a6:79:43:1a:d7:a4:23:37:9d:54:86:2c:c1:
                    68:f5:2f:4a:ec:1c:09:b6:ae:9b:2d:98:97:2e:ef:
                    4c:38:98:26:73:3d:95:3f:9f:8b:d6:6c:3a:7e:31:
                    91:93:33:d9:da:0a:7c:79:62:ce:0e:cc:ac:89:30:
                    dc:ca:4c:14:f4:d0:3b:77:ae:3a:26:fb:9a:d7:db:
                    20:2a:98:ba:ad:f0:c1:86:77:7e:69:ef:72:30:48:
                    98:b4:78:01:10:50:9c:c0:c1:13:89:30:71:4f:9d:
                    10:30:38:88:f7:3e:7a:1e:49:13:2f:18:15:ca:24:
                    21:77:52:2a:60:6f:50:fb:ae:e9:92:f8:d0:91:e2:
                    d9:77:b6:2c:cb:cb:d9:20:2a:32:b6:fa:c8:89:34:
                    7d:4c:c2:8a:32:ac:c4:3b:24:30:87:93:0f:88:b2:
                    60:ea:cc:e0:60:4c:b3:60:56:b8:91:c8:15:1c:e1:
                    39:c1:89:cb:e4:90:4d:1f:35:a6:f8:2b:05:bb:1d:
                    25:86:02:f3:21:4a:00:20:cd:6d:19:1d:b3:90:67:
                    f7:64:61:64:10:fd:9f:b9:2e:ab:3d:bf:99:79:e7:
                    6f:31:ef:0e:55:6a:54:b4:8a:ee:4b:e0:77:2e:62:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6D:A3:DA:0C:39:44:D7:EA:52:0A:AB:51:74:4A:5C:53:B2:29:D0
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31342e302f32342d3234203d3e203431303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8b:51:4a:46:d9:97:d5:87:a5:e2:59:35:27:a7:95:0f:06:
         3e:11:c7:52:bf:65:9b:00:2f:eb:4c:0a:86:2d:5a:01:99:c2:
         00:7b:7a:98:ea:a7:86:c5:15:f7:68:be:f2:51:80:ef:49:d2:
         05:c5:6d:01:f2:cf:82:ae:68:24:63:90:38:de:59:78:4d:36:
         1c:2e:6f:b9:f8:ce:13:1d:94:70:be:c0:4d:85:70:c1:e9:e3:
         3b:9f:c8:e3:dc:4e:fd:dd:1a:72:ba:12:9e:02:00:bf:b6:b7:
         bd:c9:7b:73:37:12:b1:fd:07:9d:46:9b:c2:d0:1e:2b:e6:d5:
         20:1e:58:c9:ad:3a:82:89:e3:64:37:0c:87:ad:5e:78:70:0f:
         ea:59:94:e7:8f:32:5e:8d:3e:26:1c:31:49:97:3f:22:af:8a:
         1b:50:e3:cf:a6:2c:e8:e7:07:6f:29:ad:08:dd:ab:34:98:ae:
         25:a9:76:d4:fb:aa:88:89:69:6c:b3:0e:1d:ab:8a:77:6e:db:
         55:31:54:a5:9f:e4:50:7a:41:4d:57:f5:c1:89:94:c4:6a:3c:
         a9:b9:a3:b6:6c:47:c2:f3:b0:28:48:bb:e4:09:41:5b:ba:c1:
         e7:e6:15:32:8c:6b:ee:a3:54:44:79:ab:83:b1:89:34:ee:27:
         ae:f5:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org