Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20323633383132.roa
File:                     3133382e3138362e3134302e302f32322d3234203d3e20323633383132.roa (raw, json)
Hash identifier:          aOmBPh2neTcDDe6gtYfE5xxClvoeg5g5byF3BoFF/zk=
Subject key identifier:   B9:BD:56:9E:0A:0D:FA:35:68:16:53:2D:7D:C4:FA:D3:4F:BF:0C:57
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       7528C8CB232091CAA44D63FAE3767F353FC68DCB
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20323633383132.roa
Signing time:             Tue 05 Mar 2024 18:02:25 +0000
ROA not before:           Tue 05 Mar 2024 17:57:25 +0000
ROA not after:            Tue 04 Mar 2025 18:02:25 +0000
asID:                     263812
IP address blocks:        138.186.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:28:c8:cb:23:20:91:ca:a4:4d:63:fa:e3:76:7f:35:3f:c6:8d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Mar  5 17:57:25 2024 GMT
            Not After : Mar  4 18:02:25 2025 GMT
        Subject: CN=B9BD569E0A0DFA356816532D7DC4FAD34FBF0C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:3c:97:71:b1:81:86:1d:9a:3e:45:11:b0:
                    c9:bb:20:e7:f3:f0:c4:b2:88:18:57:8d:0e:cb:3d:
                    6e:bb:77:79:44:d2:b3:0c:e3:31:ed:1e:43:88:e8:
                    bd:04:85:ca:dc:3f:8d:9f:23:f9:b0:02:df:eb:a9:
                    22:8a:88:71:d9:db:50:84:75:5e:86:ef:45:47:c1:
                    39:eb:d8:e2:c3:86:e5:4c:64:20:74:20:47:ca:8c:
                    85:6c:cc:11:8f:d5:91:80:e3:19:b6:b5:a9:ba:78:
                    03:d3:e6:8b:5e:17:b3:af:f1:04:89:44:3f:30:1a:
                    d2:4c:09:9d:bf:b3:f1:6a:ff:e6:a5:8e:2b:ad:5e:
                    9c:2d:f3:cb:15:4a:2b:2a:e0:fe:09:a5:50:91:04:
                    a5:fc:0b:a5:d3:61:37:20:9f:cf:f0:f0:a0:d3:5e:
                    d2:2e:4c:0d:21:09:0d:ce:30:db:a0:52:a8:23:0b:
                    06:ad:65:ce:ab:e6:04:af:af:03:66:15:80:fa:06:
                    42:c8:bd:d0:af:6f:d4:d6:55:35:a0:f4:3a:51:22:
                    3c:a6:e4:03:b9:b7:f2:39:ac:ec:3f:2a:18:e1:d3:
                    59:91:f5:2c:99:fa:dd:90:ab:68:41:7d:b0:c9:68:
                    29:bf:4c:e4:5d:44:91:08:1e:45:ab:bb:0f:2b:9a:
                    80:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BD:56:9E:0A:0D:FA:35:68:16:53:2D:7D:C4:FA:D3:4F:BF:0C:57
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3133382e3138362e3134302e302f32322d3234203d3e20323633383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:de:ee:30:78:0c:96:2d:ef:43:55:79:d0:7c:66:63:ec:3d:
         5d:bd:07:ae:df:90:04:63:c9:40:bc:98:4b:7e:e6:47:16:0c:
         0e:0d:fa:c7:cf:fc:f1:eb:43:70:b7:c3:fc:d2:18:79:82:21:
         a0:04:7d:dc:24:58:c3:c0:53:2e:99:9b:0d:d4:c6:57:63:c3:
         77:08:bb:fa:0f:31:fc:73:35:e5:97:c5:e5:12:4a:35:8f:51:
         b6:ba:4d:07:85:e0:f2:26:d9:d2:0d:5d:8e:a2:cc:e5:9a:f9:
         37:c2:8a:cc:6d:91:cc:5a:d5:03:b2:54:89:03:d0:a8:c8:b5:
         9c:a3:34:ff:5a:1c:5d:c5:79:ea:99:71:15:87:d0:d1:df:6f:
         b7:32:6a:1d:b2:fc:6f:41:67:60:f9:95:31:58:c4:a5:e2:f4:
         a5:08:fd:b8:bd:1e:6b:a2:1a:d2:9d:56:5d:07:3b:11:18:85:
         f9:e7:15:bd:b9:2e:76:f8:b5:a5:8b:18:23:65:ab:2d:c4:b1:
         3f:04:5c:10:b6:77:e6:1a:1a:10:6e:7e:53:ee:da:a1:3a:29:
         97:65:a9:d9:81:e8:df:90:dd:91:ef:36:33:06:a0:2a:f3:2f:
         86:9a:f3:c5:cf:39:4d:8a:05:60:01:bc:d6:c9:e4:84:64:0d:
         02:dc:4c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org