Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232372e302f32342d3234203d3e20323730303532.roa
File:                     3133382e35392e3232372e302f32342d3234203d3e20323730303532.roa (raw, json)
Hash identifier:          2VRcMvN2+4eRtm4k9/LbrKGzKxj10FDS33O+91c6/R8=
Subject key identifier:   24:38:F4:5F:D9:DF:5A:70:9B:62:B4:CC:C1:F0:9C:B4:2B:73:4E:AA
Certificate issuer:       /CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
Certificate serial:       6CC0E832709E3AC3669E63AF648E57DAC897E0C3
Authority key identifier: 69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232372e302f32342d3234203d3e20323730303532.roa
Signing time:             Sun 26 May 2024 15:00:00 +0000
ROA not before:           Sun 26 May 2024 14:55:00 +0000
ROA not after:            Sun 25 May 2025 15:00:00 +0000
asID:                     270052
IP address blocks:        138.59.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c0:e8:32:70:9e:3a:c3:66:9e:63:af:64:8e:57:da:c8:97:e0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FD3EB23E910C40C36B84893BA0E5D72631240F
        Validity
            Not Before: May 26 14:55:00 2024 GMT
            Not After : May 25 15:00:00 2025 GMT
        Subject: CN=2438F45FD9DF5A709B62B4CCC1F09CB42B734EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f6:96:39:29:88:97:db:a7:99:03:c3:01:a8:
                    6f:02:e3:bf:24:7d:3c:c6:df:28:59:8b:09:5d:36:
                    da:18:bf:19:40:0e:3c:4d:3f:d6:91:25:50:71:fd:
                    85:d9:29:26:97:86:f4:2b:53:a3:b3:25:5f:b5:fb:
                    7f:c7:8d:e1:da:65:a0:b5:b7:26:aa:1a:6f:16:a9:
                    a2:56:4a:61:b7:7d:cf:28:44:89:42:8f:ae:aa:d6:
                    de:02:b5:c6:ac:8e:78:62:67:0e:57:32:cd:f5:af:
                    d4:46:a5:f8:87:f1:53:42:73:d0:05:31:c0:7b:8e:
                    40:20:5f:00:dc:97:83:1f:f3:89:7b:c0:e3:b1:c9:
                    8f:fc:7c:5b:c8:91:ed:cd:17:ff:31:8f:44:77:00:
                    d7:a1:3a:ab:75:a9:74:62:76:70:59:8c:ca:64:5d:
                    75:a0:cb:99:70:6c:21:a8:68:cb:9a:1e:81:dc:f0:
                    a6:ad:ec:38:9d:6d:c5:91:d9:7c:dd:44:e4:1f:6a:
                    35:ca:f0:a1:5b:b1:ff:b1:55:0c:0a:7e:66:51:7f:
                    c8:0b:2c:4b:72:7f:93:ec:10:0c:40:ae:db:90:b2:
                    5d:d1:66:fe:21:4d:f3:6e:41:62:0c:f5:1b:8d:2e:
                    db:0c:0f:76:5f:ba:ea:d5:c1:c6:05:ac:5a:12:71:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:38:F4:5F:D9:DF:5A:70:9B:62:B4:CC:C1:F0:9C:B4:2B:73:4E:AA
            X509v3 Authority Key Identifier:
                keyid:69:FD:3E:B2:3E:91:0C:40:C3:6B:84:89:3B:A0:E5:D7:26:31:24:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FD3EB23E910C40C36B84893BA0E5D72631240F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E64F98E9FF3571310A202169D8D46F0FFE4486FC4B6364B625044D86CBE3CD91/0/3133382e35392e3232372e302f32342d3234203d3e20323730303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:cf:7f:db:72:d4:ae:b4:58:d4:39:31:27:79:f1:f0:e5:6d:
         dc:5a:8f:c2:bb:15:aa:87:03:f9:d7:e2:40:ab:a6:45:37:9d:
         ac:59:48:5b:37:0b:71:dd:e5:7f:6a:0d:45:d1:17:b3:12:d8:
         64:95:0e:5b:1e:d4:65:fb:53:08:55:fb:e1:04:2b:cc:20:8d:
         cf:e5:e5:a2:29:93:53:9f:fc:aa:42:ec:f9:15:82:5b:48:2d:
         a1:bb:3a:61:6a:30:dc:0c:8a:10:a6:37:d9:1a:89:5f:45:88:
         84:a4:15:ce:cf:5a:e9:d7:6d:0c:88:fa:0a:a2:e1:b5:25:c4:
         6a:35:7e:d3:f7:88:2f:54:af:06:7c:f4:bb:1c:cf:e5:9d:82:
         b5:f0:67:f8:4d:85:65:70:51:d7:bd:64:c6:c9:ed:b3:16:80:
         cc:b3:7f:26:01:7c:2d:b9:d0:47:b4:29:18:79:f1:59:af:d1:
         b1:55:32:1e:1e:d2:ac:51:92:f6:2f:41:4d:99:94:7d:6b:a7:
         a4:e6:36:4b:39:00:bb:d3:20:0a:74:42:30:40:96:ec:ab:df:
         e4:9c:10:92:a4:fc:03:b8:69:1b:e7:9a:53:e4:7b:78:8e:eb:
         32:25:2b:5f:fa:b3:d9:6c:a2:06:03:a1:df:6c:f6:ab:51:24:
         26:be:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:49 2024 by rpki-client on console-ams.rpki-client.org