Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3133382e3131372e31392e302f32342d3234203d3e20323633373933.roa
File:                     3133382e3131372e31392e302f32342d3234203d3e20323633373933.roa (raw, json)
Hash identifier:          VjHC8xIledOGoEsVBVmgzXkmVLXXch7+g3rv05Jyj30=
Subject key identifier:   C7:3E:4B:B2:46:6A:E8:1E:92:D9:06:89:14:10:8E:FF:7C:11:E2:3F
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       47CBBA547787C009FFEDA2D3A63D1F425D250192
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3133382e3131372e31392e302f32342d3234203d3e20323633373933.roa
Signing time:             Tue 05 Mar 2024 18:19:58 +0000
ROA not before:           Tue 05 Mar 2024 18:14:58 +0000
ROA not after:            Tue 04 Mar 2025 18:19:58 +0000
asID:                     263793
IP address blocks:        138.117.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 09:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:cb:ba:54:77:87:c0:09:ff:ed:a2:d3:a6:3d:1f:42:5d:25:01:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Mar  5 18:14:58 2024 GMT
            Not After : Mar  4 18:19:58 2025 GMT
        Subject: CN=C73E4BB2466AE81E92D9068914108EFF7C11E23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:2b:e8:1d:04:c9:1f:f7:03:25:2a:19:f8:
                    60:5d:32:11:df:17:cf:94:18:c0:18:a7:9e:15:1e:
                    4c:97:32:e5:d1:a3:06:7a:a0:fb:bb:cf:0a:ce:26:
                    2f:52:64:14:44:11:b7:d4:1d:ab:06:3b:d6:11:c0:
                    f2:ed:8c:33:c6:b1:e5:0a:75:03:3f:5f:14:af:3d:
                    e3:10:94:e5:b3:c0:e4:2e:d0:69:db:c2:d3:3f:ca:
                    9e:1b:a2:3d:bf:66:55:8a:79:18:96:af:ae:b9:c4:
                    30:18:7b:a8:e2:f3:ff:71:e0:0d:f7:92:d5:75:37:
                    91:e9:33:d5:19:0b:ea:01:8e:40:72:00:65:8d:a0:
                    89:b3:e8:c4:37:67:c1:25:50:a0:d3:91:21:e5:2b:
                    76:ed:d4:61:61:a8:5e:ed:c8:89:63:a5:df:53:b3:
                    49:c6:6b:b5:74:b7:38:d8:df:32:ec:67:3a:f1:65:
                    42:d5:48:a9:5a:68:12:56:30:e3:1f:de:4a:f9:6a:
                    c6:be:18:83:4e:43:ad:14:a2:12:7a:03:91:71:8f:
                    55:9e:c9:f0:04:6a:f7:06:61:43:5e:69:ba:44:1f:
                    d2:d3:40:95:f9:f8:e2:00:86:69:7c:7e:52:5f:2a:
                    9b:45:c9:51:b9:32:18:b2:4c:c7:e4:63:4e:6e:6e:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3E:4B:B2:46:6A:E8:1E:92:D9:06:89:14:10:8E:FF:7C:11:E2:3F
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3133382e3131372e31392e302f32342d3234203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:48:25:68:d0:d9:a9:e8:7d:5e:31:c7:26:ed:db:cc:02:e6:
         2d:76:3d:b2:aa:3a:3d:c6:ef:c2:96:ab:fb:dc:22:23:0d:7a:
         04:de:4a:70:b4:ba:1f:45:17:cd:54:78:6e:12:9f:ca:ed:a6:
         11:c4:3a:94:44:3b:47:fc:a7:6b:00:1b:8e:fe:80:66:18:f4:
         42:6d:38:d3:14:3a:90:e7:98:b5:c5:e3:58:b8:bc:7f:a5:7d:
         84:ca:90:5e:93:83:e4:30:3b:c5:6b:03:41:6c:1e:f0:a6:ad:
         81:b6:86:9d:83:d1:8a:2d:b0:55:f8:f5:e8:49:fc:de:a9:f1:
         64:3b:bf:66:2f:35:c2:3a:84:8e:8e:85:06:f4:9b:d3:95:44:
         27:27:b3:92:92:81:08:a2:0e:e4:1d:dc:f7:9b:e9:d5:a7:2d:
         b1:31:b5:01:d5:05:f1:6e:26:86:da:7a:52:5b:27:1e:cd:01:
         d0:6b:87:47:4a:35:80:13:85:e7:36:47:1e:b2:ba:b6:6d:3f:
         fb:87:d4:38:e4:98:bd:b1:32:e5:16:49:f5:af:a6:3f:a9:aa:
         3e:79:04:36:9e:ac:8c:e6:8c:59:85:5f:38:6b:c1:3c:a2:e5:
         a1:c2:5e:a5:fa:a2:9f:5b:f7:99:10:84:43:b7:ed:9e:98:8a:
         5f:a1:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 06:03:12 2024 by rpki-client on console-fra.rpki-client.org