Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3133382e3230342e342e302f32322d3234203d3e20323633373737.roa
File:                     3133382e3230342e342e302f32322d3234203d3e20323633373737.roa (raw, json)
Hash identifier:          GmLcssvsUkC9E2TF5cmHdM0xxFYUXtCqNbKF5bPxZNQ=
Subject key identifier:   04:0E:AF:3E:A2:4C:A3:78:81:8E:29:D9:22:1C:5B:E0:8E:BC:1A:98
Certificate issuer:       /CN=765D05128298873F41D1D65632AB25BDBE113398
Certificate serial:       7426FEE11A4FC94329CD740A1067943100D3F3DC
Authority key identifier: 76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3133382e3230342e342e302f32322d3234203d3e20323633373737.roa
Signing time:             Tue 05 Mar 2024 17:52:03 +0000
ROA not before:           Tue 05 Mar 2024 17:47:03 +0000
ROA not after:            Tue 04 Mar 2025 17:52:03 +0000
asID:                     263777
IP address blocks:        138.204.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:26:fe:e1:1a:4f:c9:43:29:cd:74:0a:10:67:94:31:00:d3:f3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765D05128298873F41D1D65632AB25BDBE113398
        Validity
            Not Before: Mar  5 17:47:03 2024 GMT
            Not After : Mar  4 17:52:03 2025 GMT
        Subject: CN=040EAF3EA24CA378818E29D9221C5BE08EBC1A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f0:50:c1:27:d1:d3:ec:1c:ef:d3:aa:11:ac:
                    71:1e:76:2d:5e:1a:c1:34:50:0f:ae:c2:17:68:c5:
                    3f:91:eb:c8:97:ef:25:82:b9:53:ac:b2:0f:d9:26:
                    38:e6:87:f9:11:54:b5:63:b9:8c:c1:4e:0d:99:3e:
                    84:2e:e9:52:f8:47:63:70:ac:09:a6:51:c8:a7:b7:
                    7b:6d:bc:4f:db:a1:3e:f5:ab:a6:a2:0c:d2:dc:21:
                    2e:d7:94:34:ea:92:0a:f4:5d:92:06:0c:6a:7e:3f:
                    f9:f9:4a:4e:a0:88:a4:2f:73:b7:5d:e2:22:b4:8b:
                    fc:ac:fd:97:88:60:4a:43:6f:93:6b:fb:ce:f4:a5:
                    b3:38:76:3c:af:9c:5d:4e:e5:cc:a3:d5:75:88:6c:
                    92:76:66:ec:97:21:44:4c:07:e6:06:9e:25:8b:8e:
                    99:07:f8:0a:9c:b7:22:fe:99:09:36:9c:b8:36:81:
                    71:d9:a3:4b:55:59:a9:a3:fc:63:88:73:63:8a:cd:
                    44:ad:f7:8a:c3:fd:32:5b:a0:75:b4:c0:36:91:2f:
                    10:36:f4:7a:31:ef:af:3c:a5:eb:76:06:71:74:b8:
                    73:88:09:57:16:4a:eb:81:bb:fa:ba:13:a3:db:b2:
                    e3:9b:6e:58:96:19:f0:9d:47:a2:8c:f1:4c:b9:c6:
                    68:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0E:AF:3E:A2:4C:A3:78:81:8E:29:D9:22:1C:5B:E0:8E:BC:1A:98
            X509v3 Authority Key Identifier:
                keyid:76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3133382e3230342e342e302f32322d3234203d3e20323633373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:da:81:bf:3c:14:fe:ce:b8:72:01:5a:3a:38:de:73:1c:e2:
         f1:c1:dd:6b:cd:45:61:17:5d:28:06:07:26:30:49:64:95:a8:
         1c:b3:03:72:4d:ea:a2:fe:00:f8:67:b8:6e:97:af:80:14:78:
         d2:73:65:a4:f8:77:70:70:d5:cb:b3:10:7d:aa:10:12:c9:a4:
         c6:69:a8:2a:c1:9b:4f:bf:e4:bc:16:ca:6e:f6:c6:d6:2a:a7:
         65:fb:fd:6a:6e:50:f4:f7:07:02:79:e7:be:85:fc:fb:2c:4e:
         8e:a5:ea:87:79:63:69:dc:fe:ed:7f:36:c7:4f:be:d4:71:01:
         3e:63:a0:83:d0:c1:e3:f1:ff:1d:dc:82:af:c2:31:3a:ec:27:
         a7:a4:39:bd:d0:55:83:35:9d:d2:0a:9c:57:16:5b:af:bc:0e:
         71:99:8f:96:2c:d3:d7:b4:c8:f0:8c:05:8e:03:fe:56:89:38:
         1f:51:8d:23:5c:2d:15:91:4b:ed:85:ac:f5:92:75:8e:e1:5a:
         4b:64:b5:72:13:dd:a9:db:46:d6:ee:57:45:d7:1d:0b:a9:39:
         9e:12:84:22:f7:b3:b6:c3:e2:a7:b6:48:c6:b8:39:9d:30:4a:
         eb:d9:85:57:18:3e:b2:45:80:37:c4:05:12:cd:92:51:18:f3:
         81:b1:b8:d9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdCb+4RpPyUMpzXQKEGeUMQDT89wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1RDA1MTI4Mjk4ODczRjQxRDFENjU2MzJBQjI1QkRC
RTExMzM5ODAeFw0yNDAzMDUxNzQ3MDNaFw0yNTAzMDQxNzUyMDNaMDMxMTAvBgNV
BAMTKDA0MEVBRjNFQTI0Q0EzNzg4MThFMjlEOTIyMUM1QkUwOEVCQzFBOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38FDBJ9HT7Bzv06oRrHEedi1e
GsE0UA+uwhdoxT+R68iX7yWCuVOssg/ZJjjmh/kRVLVjuYzBTg2ZPoQu6VL4R2Nw
rAmmUcint3ttvE/boT71q6aiDNLcIS7XlDTqkgr0XZIGDGp+P/n5Sk6giKQvc7dd
4iK0i/ys/ZeIYEpDb5Nr+870pbM4djyvnF1O5cyj1XWIbJJ2ZuyXIURMB+YGniWL
jpkH+AqctyL+mQk2nLg2gXHZo0tVWamj/GOIc2OKzUSt94rD/TJboHW0wDaRLxA2
9Hox7688pet2BnF0uHOICVcWSuuBu/q6E6PbsuObbliWGfCdR6KM8Uy5xmhVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBA6vPqJMo3iBjinZIhxb4I68GpgwHwYDVR0j
BBgwFoAUdl0FEoKYhz9B0dZWMqslvb4RM5gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMzM2MjI5MjRFNUY4RDRCRDBGMUE2MUZBRjc3MTZEQUQ4
REJFNjZGRTlBRUJEQTE3OUQ5NUFFRDU2QjJCNjk3LzAvNzY1RDA1MTI4Mjk4ODcz
RjQxRDFENjU2MzJBQjI1QkRCRTExMzM5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NjVEMDUxMjgyOTg4NzNGNDFE
MUQ2NTYzMkFCMjVCREJFMTEzMzk4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjMzNjIyOTI0RTVGOEQ0QkQwRjFBNjFGQUY3NzE2REFEOERCRTY2RkU5
QUVCREExNzlEOTVBRUQ1NkIyQjY5Ny8wLzMxMzMzODJlMzIzMDM0MmUzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMzM3MzczNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAorMBDAN
BgkqhkiG9w0BAQsFAAOCAQEABtqBvzwU/s64cgFaOjjecxzi8cHda81FYRddKAYH
JjBJZJWoHLMDck3qov4A+Ge4bpevgBR40nNlpPh3cHDVy7MQfaoQEsmkxmmoKsGb
T7/kvBbKbvbG1iqnZfv9am5Q9PcHAnnnvoX8+yxOjqXqh3ljadz+7X82x0++1HEB
PmOgg9DB4/H/HdyCr8IxOuwnp6Q5vdBVgzWd0gqcVxZbr7wOcZmPlizT17TI8IwF
jgP+Vok4H1GNI1wtFZFL7YWs9ZJ1juFaS2S1chPdqdtG1u5XRdcdC6k5nhKEIvez
tsPip7ZIxrg5nTBK69mFVxg+skWAN8QFEs2SURjzgbG42Q==
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:24 2024 by rpki-client on console-ams.rpki-client.org