Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232342e302f32342d3234203d3e20323730303532.roa
File:                     3133382e35392e3232342e302f32342d3234203d3e20323730303532.roa (raw, json)
Hash identifier:          YvIrFZSfI5ykKsytPvSL3qWxTFNfK7Pzfd9fY4dywCI=
Subject key identifier:   C7:72:24:B5:5C:F8:67:7B:37:71:2D:1F:9D:67:B3:0B:B6:37:6A:C0
Certificate issuer:       /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Certificate serial:       69A81D8C58B7D24B45DE71FD9731B64FEFF1234B
Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232342e302f32342d3234203d3e20323730303532.roa
Signing time:             Sun 26 May 2024 15:00:01 +0000
ROA not before:           Sun 26 May 2024 14:55:01 +0000
ROA not after:            Sun 25 May 2025 15:00:01 +0000
asID:                     270052
IP address blocks:        138.59.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a8:1d:8c:58:b7:d2:4b:45:de:71:fd:97:31:b6:4f:ef:f1:23:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
        Validity
            Not Before: May 26 14:55:01 2024 GMT
            Not After : May 25 15:00:01 2025 GMT
        Subject: CN=C77224B55CF8677B37712D1F9D67B30BB6376AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:e8:be:65:90:eb:4b:f4:5a:0a:03:68:5c:
                    3b:60:f8:c5:1c:cd:ea:ea:53:8d:3d:51:57:3c:43:
                    10:38:b2:03:98:fd:8f:76:c6:5d:84:a8:83:8d:ec:
                    fe:ed:c7:f2:26:94:93:b3:ee:a9:c2:69:ee:0b:f3:
                    23:03:4d:16:7d:09:5a:d1:6a:24:24:86:b3:4c:89:
                    63:94:8e:ad:33:02:8c:c1:60:d0:0c:e4:00:26:70:
                    cd:6d:d9:ae:7a:18:4b:30:10:74:b7:cb:6e:53:2f:
                    eb:93:93:83:d8:e2:bf:31:eb:3c:04:32:c4:9b:80:
                    4f:44:16:06:f3:dc:9e:05:c5:e4:81:e8:c0:fa:5e:
                    b7:13:2d:2e:2f:52:77:c8:f2:58:48:4a:6b:10:74:
                    2d:30:8d:35:99:a1:a3:3b:ca:99:94:99:4a:ea:3d:
                    1f:cc:22:f7:c0:ce:08:23:f1:ea:db:f5:98:bf:fe:
                    71:12:da:69:00:31:50:0b:da:ca:1b:5d:2d:9e:8c:
                    c0:98:60:55:d8:4e:e7:6a:10:bd:91:c1:fb:bc:6c:
                    86:73:fa:8e:69:b2:21:70:2f:3b:c6:8f:a1:cb:3f:
                    f6:5e:64:d5:25:a2:8b:a0:d1:79:54:51:8a:0f:8e:
                    6b:da:d3:73:5b:4b:9d:e2:c0:cf:24:cf:79:5b:eb:
                    b1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:72:24:B5:5C:F8:67:7B:37:71:2D:1F:9D:67:B3:0B:B6:37:6A:C0
            X509v3 Authority Key Identifier:
                keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232342e302f32342d3234203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:33:db:16:0b:0e:8b:43:f8:bc:1b:e5:70:9f:7d:8a:8f:49:
         02:09:77:33:ba:b4:d1:b5:bc:9b:e1:f5:b1:db:11:2f:19:00:
         9e:79:b0:df:77:4c:33:36:8d:e6:dd:8b:70:97:35:1a:9d:af:
         65:42:90:2b:74:2a:ef:9a:52:dd:cf:4e:cb:6d:09:a9:91:47:
         6d:51:42:97:35:66:7c:c1:20:04:65:f6:ed:19:f2:1c:f3:f6:
         98:ae:16:52:53:b3:70:0c:d2:d3:4b:cc:7a:10:aa:c9:6f:4e:
         1b:c2:70:6e:a6:cb:6a:80:28:96:89:99:d3:f0:bb:d7:d8:30:
         f0:0a:67:ec:1e:6a:27:11:ef:0f:61:34:c4:d3:38:36:1a:93:
         54:34:78:95:f0:7f:f3:87:8a:1f:b3:98:73:d0:ab:46:99:e3:
         3c:8e:dc:78:f4:4a:5e:ac:8e:43:2d:70:04:cc:15:e3:96:7c:
         33:77:14:2b:55:9c:f6:71:ae:c7:b6:3a:b4:ad:69:97:fb:f5:
         cb:5b:98:24:8e:5d:9c:86:29:ae:67:4a:d0:9b:18:0a:58:56:
         4e:fd:73:e7:4c:26:6d:e4:c4:17:55:41:88:09:dc:40:e5:c6:
         2f:17:f6:53:89:cc:81:64:bd:b2:5a:77:7e:0e:2b:61:9c:c5:
         47:75:4c:59
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaagdjFi30ktF3nH9lzG2T+/xI0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlGRDNFQjIzRTkxMEM0MEMzNkI4NDg5M0JBMEU1RDcy
NjMxMjQwRjAeFw0yNDA1MjYxNDU1MDFaFw0yNTA1MjUxNTAwMDFaMDMxMTAvBgNV
BAMTKEM3NzIyNEI1NUNGODY3N0IzNzcxMkQxRjlENjdCMzBCQjYzNzZBQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCluOi+ZZDrS/RaCgNoXDtg+MUc
zerqU409UVc8QxA4sgOY/Y92xl2EqION7P7tx/ImlJOz7qnCae4L8yMDTRZ9CVrR
aiQkhrNMiWOUjq0zAozBYNAM5AAmcM1t2a56GEswEHS3y25TL+uTk4PY4r8x6zwE
MsSbgE9EFgbz3J4FxeSB6MD6XrcTLS4vUnfI8lhISmsQdC0wjTWZoaM7ypmUmUrq
PR/MIvfAzggj8erb9Zi//nES2mkAMVAL2sobXS2ejMCYYFXYTudqEL2Rwfu8bIZz
+o5psiFwLzvGj6HLP/ZeZNUlooug0XlUUYoPjmva03NbS53iwM8kz3lb67HDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUx3IktVz4Z3s3cS0fnWezC7Y3asAwHwYDVR0j
BBgwFoAUaf0+sj6RDEDDa4SJO6Dl1yYxJA8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjRGOThFOUZGMzU3MTMxMEEyMDIxNjlEOEQ0NkYwRkZF
NDQ4NkZDNEI2MzY0QjYyNTA0NEQ4NkNCRTNDRDkxLzAvNjlGRDNFQjIzRTkxMEM0
MEMzNkI4NDg5M0JBMEU1RDcyNjMxMjQwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OUZEM0VCMjNFOTEwQzQwQzM2
Qjg0ODkzQkEwRTVENzI2MzEyNDBGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTY0Rjk4RTlGRjM1NzEzMTBBMjAyMTY5RDhENDZGMEZGRTQ0ODZGQzRC
NjM2NEI2MjUwNDREODZDQkUzQ0Q5MS8wLzMxMzMzODJlMzUzOTJlMzIzMjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzNTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAijvg
MA0GCSqGSIb3DQEBCwUAA4IBAQAUM9sWCw6LQ/i8G+Vwn32Kj0kCCXczurTRtbyb
4fWx2xEvGQCeebDfd0wzNo3m3YtwlzUana9lQpArdCrvmlLdz07LbQmpkUdtUUKX
NWZ8wSAEZfbtGfIc8/aYrhZSU7NwDNLTS8x6EKrJb04bwnBupstqgCiWiZnT8LvX
2DDwCmfsHmonEe8PYTTE0zg2GpNUNHiV8H/zh4ofs5hz0KtGmeM8jtx49EperI5D
LXAEzBXjlnwzdxQrVZz2ca7Htjq0rWmX+/XLW5gkjl2chimuZ0rQmxgKWFZO/XPn
TCZt5MQXVUGICdxA5cYvF/ZTicyBZL2yWnd+DithnMVHdUxZ
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org