Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3133382e3131372e31382e302f32342d3234203d3e20323633373933.roa
File:                     3133382e3131372e31382e302f32342d3234203d3e20323633373933.roa (raw, json)
Hash identifier:          Q5lDLWxvY7j+vl2EGRhySU5ErDie3Q+f/nFM8haLgek=
Subject key identifier:   ED:DA:0B:DF:7B:B0:4A:F6:B7:1D:A7:E3:F0:EA:5B:01:3E:10:40:E2
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       080F8407A85B7C81A147B79D5A011064C39A006C
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3133382e3131372e31382e302f32342d3234203d3e20323633373933.roa
Signing time:             Tue 05 Mar 2024 18:19:58 +0000
ROA not before:           Tue 05 Mar 2024 18:14:58 +0000
ROA not after:            Tue 04 Mar 2025 18:19:58 +0000
asID:                     263793
IP address blocks:        138.117.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 09:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0f:84:07:a8:5b:7c:81:a1:47:b7:9d:5a:01:10:64:c3:9a:00:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Mar  5 18:14:58 2024 GMT
            Not After : Mar  4 18:19:58 2025 GMT
        Subject: CN=EDDA0BDF7BB04AF6B71DA7E3F0EA5B013E1040E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c8:1c:b0:38:73:22:87:e7:e5:ef:0d:1b:af:
                    be:f5:f3:bf:aa:dc:79:ed:b2:87:c5:4e:0a:eb:84:
                    aa:db:56:50:85:bc:6d:20:d8:33:9d:ca:91:a8:0d:
                    84:17:99:4a:07:03:bf:ab:fe:9f:20:e2:03:c3:aa:
                    c1:e0:d6:47:52:8b:84:50:45:be:11:a7:ef:ac:bd:
                    e3:42:80:66:0c:31:0b:06:99:87:26:e6:c7:49:47:
                    2f:0a:09:79:41:a8:bf:ed:28:6a:83:5a:18:1d:ec:
                    ac:f4:e9:1a:3e:44:f3:52:9c:b0:8e:1a:9f:bf:91:
                    a2:dd:46:7f:c3:a2:cb:a9:68:cb:08:3c:c4:b7:9a:
                    72:d0:37:98:df:d3:9b:7b:d7:39:eb:7f:00:b8:41:
                    44:08:c4:85:38:4c:1e:6d:46:a4:ba:03:34:74:4f:
                    99:a9:95:87:d9:db:b3:37:64:7e:71:8b:6a:4b:5b:
                    80:37:f7:8a:54:9f:28:b6:56:a3:75:d1:ab:5b:23:
                    a9:ef:a2:d9:22:d6:b0:14:44:3b:08:5d:d0:e1:0b:
                    72:ad:e1:1e:6f:41:25:60:43:11:27:3a:bb:c8:7d:
                    78:23:51:5d:67:0c:fc:79:93:73:6d:76:ae:9f:53:
                    d8:64:76:e9:f6:7f:30:1c:8b:25:09:f0:56:73:fe:
                    de:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DA:0B:DF:7B:B0:4A:F6:B7:1D:A7:E3:F0:EA:5B:01:3E:10:40:E2
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3133382e3131372e31382e302f32342d3234203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ba:f0:a4:51:e4:8b:f0:30:1c:04:0a:9b:aa:9c:29:79:2e:
         82:c1:fe:d2:9d:ac:a9:29:c0:cd:b4:4e:6c:85:71:3e:5c:c8:
         b3:cd:ea:93:3e:f8:53:73:ce:69:44:19:c3:5c:52:66:1f:64:
         eb:d0:5f:b6:c2:63:f6:34:be:9c:ae:61:6f:af:7b:d8:55:3a:
         5d:53:da:76:5c:24:a6:53:27:85:6f:80:0e:35:44:ab:0d:f7:
         4f:0c:e1:09:24:90:3b:63:5e:19:19:24:b2:11:27:e4:82:54:
         a9:32:17:5b:96:a7:fe:a4:9b:65:eb:6d:52:ed:37:46:39:13:
         53:f5:05:ef:72:96:e2:f6:b7:7f:b2:af:bf:14:c2:d6:64:8e:
         51:71:88:78:46:9e:86:de:a1:33:75:45:96:a2:2a:b9:17:14:
         e2:c7:d4:32:12:eb:f6:71:67:02:47:79:ed:96:28:c4:93:9f:
         d4:58:d3:c1:b8:05:20:e7:ba:a5:92:56:d7:a4:c2:93:24:f3:
         a5:ba:ef:22:9a:0f:f1:58:dc:57:9c:65:74:d9:c1:d3:14:0e:
         6d:e9:d1:a4:51:21:f6:65:ab:9d:98:1f:6c:fb:f1:d0:49:9a:
         72:4e:55:aa:7d:2d:80:1a:90:a0:d4:48:1f:5a:63:34:a1:38:
         81:d9:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 04:09:51 2024 by rpki-client on console-ams.rpki-client.org