Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F4E0D369BDA1BE128FD6B1B238232DB4F414B5B64EB3F6DF8B03D93DE6FBA072/0/3133382e3230342e34302e302f32322d3234203d3e20323633373536.roa
File:                     3133382e3230342e34302e302f32322d3234203d3e20323633373536.roa (raw, json)
Hash identifier:          ypn2mVPc5m77zE9yqtJWvyRtc91I6w4ThasbuZjjAwI=
Subject key identifier:   D1:DD:40:43:65:19:1B:50:AD:77:4F:B3:C9:BD:B6:9D:97:AE:E3:AD
Certificate issuer:       /CN=C08E42881CA1FD152E117E3F6E43B23302A768EF
Certificate serial:       70BBD1B8F9B1BE718438AAC0EEEAE7D0188A3AF9
Authority key identifier: C0:8E:42:88:1C:A1:FD:15:2E:11:7E:3F:6E:43:B2:33:02:A7:68:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C08E42881CA1FD152E117E3F6E43B23302A768EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F4E0D369BDA1BE128FD6B1B238232DB4F414B5B64EB3F6DF8B03D93DE6FBA072/0/3133382e3230342e34302e302f32322d3234203d3e20323633373536.roa
Signing time:             Tue 05 Mar 2024 17:42:02 +0000
ROA not before:           Tue 05 Mar 2024 17:37:02 +0000
ROA not after:            Tue 04 Mar 2025 17:42:02 +0000
asID:                     263756
IP address blocks:        138.204.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F4E0D369BDA1BE128FD6B1B238232DB4F414B5B64EB3F6DF8B03D93DE6FBA072/0/C08E42881CA1FD152E117E3F6E43B23302A768EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F4E0D369BDA1BE128FD6B1B238232DB4F414B5B64EB3F6DF8B03D93DE6FBA072/0/C08E42881CA1FD152E117E3F6E43B23302A768EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C08E42881CA1FD152E117E3F6E43B23302A768EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bb:d1:b8:f9:b1:be:71:84:38:aa:c0:ee:ea:e7:d0:18:8a:3a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C08E42881CA1FD152E117E3F6E43B23302A768EF
        Validity
            Not Before: Mar  5 17:37:02 2024 GMT
            Not After : Mar  4 17:42:02 2025 GMT
        Subject: CN=D1DD404365191B50AD774FB3C9BDB69D97AEE3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b9:2d:5a:f1:39:d8:e8:e4:03:91:7f:21:68:
                    1c:f7:88:e3:42:da:82:73:b8:16:7c:53:5a:10:42:
                    90:fb:71:fc:48:fd:ff:e9:d6:82:b2:82:29:a1:e1:
                    9e:f3:a8:c0:bc:0d:a4:31:45:fd:36:f0:cf:33:ff:
                    4c:f0:5a:55:fb:a5:bb:bf:54:04:39:fa:57:46:0d:
                    1b:44:14:a3:5d:dd:de:c2:2f:96:12:1b:54:c5:f0:
                    bb:d4:eb:4c:b0:f7:a9:b0:6d:c1:c0:03:a2:04:ab:
                    69:37:e3:1c:34:8e:02:f2:0f:05:82:fe:22:2b:f0:
                    87:f2:01:34:87:9a:0f:39:33:83:50:f6:3d:7e:be:
                    6a:20:bd:1f:ca:44:a9:c3:ea:48:8a:dd:ef:10:0a:
                    c4:9d:4b:52:2a:f0:8d:06:10:26:c9:25:a9:9d:00:
                    59:a6:07:88:d1:ea:1b:90:82:9c:15:a4:a6:66:af:
                    2b:d0:53:91:18:a1:5a:13:29:40:0c:75:81:53:e2:
                    d1:77:3a:cd:ac:ea:3b:a7:6f:08:a0:cd:41:ea:50:
                    65:26:cf:6e:ca:e8:8d:6c:19:84:40:78:b0:09:bf:
                    8f:07:bf:cc:33:ce:bb:6b:a2:f0:73:59:33:69:b1:
                    81:36:61:fc:37:88:b0:0d:33:4d:7d:36:72:65:cd:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DD:40:43:65:19:1B:50:AD:77:4F:B3:C9:BD:B6:9D:97:AE:E3:AD
            X509v3 Authority Key Identifier:
                keyid:C0:8E:42:88:1C:A1:FD:15:2E:11:7E:3F:6E:43:B2:33:02:A7:68:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F4E0D369BDA1BE128FD6B1B238232DB4F414B5B64EB3F6DF8B03D93DE6FBA072/0/C08E42881CA1FD152E117E3F6E43B23302A768EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C08E42881CA1FD152E117E3F6E43B23302A768EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F4E0D369BDA1BE128FD6B1B238232DB4F414B5B64EB3F6DF8B03D93DE6FBA072/0/3133382e3230342e34302e302f32322d3234203d3e20323633373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:ac:0a:2f:b0:22:28:0d:31:27:d6:14:7b:85:3f:a7:2b:11:
         72:8a:02:9d:2b:89:4a:b9:51:27:11:9b:e3:c0:8e:23:fb:03:
         99:b8:50:2e:18:26:8c:49:1b:75:64:88:0e:d3:44:a4:ad:c1:
         35:71:57:f1:a4:fb:a5:1b:52:5d:36:8f:30:b9:d8:c5:7b:4e:
         43:35:98:d0:94:fd:01:91:68:6c:d7:3c:15:9c:05:31:bb:4e:
         9d:eb:f1:17:e2:8e:fb:c5:79:ff:91:23:9b:3b:0c:93:e5:7e:
         3f:d6:26:00:82:cb:17:95:d4:1d:a4:f4:c0:00:4d:cc:39:9f:
         df:a2:b0:d8:04:65:33:fd:de:bd:74:84:6f:41:65:d0:39:11:
         15:6b:41:e5:30:ea:10:4a:a3:86:ee:6f:b9:00:a0:ee:3d:6f:
         2e:f4:85:cb:8f:d8:b9:ce:fd:b1:83:2c:a3:53:98:43:c8:68:
         8a:c3:ad:a0:87:1a:51:c2:f8:fa:35:b1:26:ae:5f:be:e9:f1:
         d5:9e:47:31:6d:ff:a6:20:3f:3a:2d:9b:c0:3a:6d:17:f3:2e:
         15:12:7f:df:00:65:7e:a5:a6:66:e9:62:de:76:9f:6d:7b:c5:
         81:8a:1c:32:9c:55:21:bb:51:c3:b4:ce:05:ce:5b:7a:40:58:
         e2:5e:7f:2d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcLvRuPmxvnGEOKrA7urn0BiKOvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzA4RTQyODgxQ0ExRkQxNTJFMTE3RTNGNkU0M0IyMzMw
MkE3NjhFRjAeFw0yNDAzMDUxNzM3MDJaFw0yNTAzMDQxNzQyMDJaMDMxMTAvBgNV
BAMTKEQxREQ0MDQzNjUxOTFCNTBBRDc3NEZCM0M5QkRCNjlEOTdBRUUzQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOuS1a8TnY6OQDkX8haBz3iONC
2oJzuBZ8U1oQQpD7cfxI/f/p1oKygimh4Z7zqMC8DaQxRf028M8z/0zwWlX7pbu/
VAQ5+ldGDRtEFKNd3d7CL5YSG1TF8LvU60yw96mwbcHAA6IEq2k34xw0jgLyDwWC
/iIr8IfyATSHmg85M4NQ9j1+vmogvR/KRKnD6kiK3e8QCsSdS1Iq8I0GECbJJamd
AFmmB4jR6huQgpwVpKZmryvQU5EYoVoTKUAMdYFT4tF3Os2s6junbwigzUHqUGUm
z27K6I1sGYRAeLAJv48Hv8wzzrtrovBzWTNpsYE2Yfw3iLANM019NnJlzSttAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0d1AQ2UZG1Ctd0+zyb22nZeu460wHwYDVR0j
BBgwFoAUwI5CiByh/RUuEX4/bkOyMwKnaO8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNEUwRDM2OUJEQTFCRTEyOEZENkIxQjIzODIzMkRCNEY0
MTRCNUI2NEVCM0Y2REY4QjAzRDkzREU2RkJBMDcyLzAvQzA4RTQyODgxQ0ExRkQx
NTJFMTE3RTNGNkU0M0IyMzMwMkE3NjhFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDhFNDI4ODFDQTFGRDE1MkUx
MTdFM0Y2RTQzQjIzMzAyQTc2OEVGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjRFMEQzNjlCREExQkUxMjhGRDZCMUIyMzgyMzJEQjRGNDE0QjVCNjRF
QjNGNkRGOEIwM0Q5M0RFNkZCQTA3Mi8wLzMxMzMzODJlMzIzMDM0MmUzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzczNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiswo
MA0GCSqGSIb3DQEBCwUAA4IBAQBXrAovsCIoDTEn1hR7hT+nKxFyigKdK4lKuVEn
EZvjwI4j+wOZuFAuGCaMSRt1ZIgO00SkrcE1cVfxpPulG1JdNo8wudjFe05DNZjQ
lP0BkWhs1zwVnAUxu06d6/EX4o77xXn/kSObOwyT5X4/1iYAgssXldQdpPTAAE3M
OZ/forDYBGUz/d69dIRvQWXQOREVa0HlMOoQSqOG7m+5AKDuPW8u9IXLj9i5zv2x
gyyjU5hDyGiKw62ghxpRwvj6NbEmrl++6fHVnkcxbf+mID86LZvAOm0X8y4VEn/f
AGV+paZm6WLedp9te8WBihwynFUhu1HDtM4Fzlt6QFjiXn8t
-----END CERTIFICATE-----
Generated at Tue Nov 19 10:29:39 2024 by rpki-client on console-fra.rpki-client.org