Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3133382e33362e3133362e302f32322d3232203d3e20323633383239.roa
File:                     3133382e33362e3133362e302f32322d3232203d3e20323633383239.roa (raw, json)
Hash identifier:          X9h8bhXO0dmerN+dLveN9yj7FcbHeIjDXRNdDi/cJ68=
Subject key identifier:   1B:08:01:88:02:48:EF:C9:18:ED:3D:25:B0:D4:C9:BB:63:39:E9:49
Certificate issuer:       /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial:       34B4DA8B504DD8A3C9A0827D2B51E65274CF924C
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3133382e33362e3133362e302f32322d3232203d3e20323633383239.roa
Signing time:             Tue 05 Mar 2024 18:21:02 +0000
ROA not before:           Tue 05 Mar 2024 18:16:02 +0000
ROA not after:            Tue 04 Mar 2025 18:21:02 +0000
asID:                     263829
IP address blocks:        138.36.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b4:da:8b:50:4d:d8:a3:c9:a0:82:7d:2b:51:e6:52:74:cf:92:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
        Validity
            Not Before: Mar  5 18:16:02 2024 GMT
            Not After : Mar  4 18:21:02 2025 GMT
        Subject: CN=1B0801880248EFC918ED3D25B0D4C9BB6339E949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:22:b1:70:d6:9f:e3:e6:b5:89:af:47:40:
                    65:75:ac:02:79:37:a4:04:7b:c0:4f:4d:1c:2d:2b:
                    b8:e1:9f:f0:24:31:6f:67:bb:fa:cf:7c:cd:59:b5:
                    14:65:92:7f:fb:80:8e:92:19:99:aa:fe:ad:dc:1a:
                    55:aa:5f:73:10:e6:92:ce:72:8c:9a:c6:15:9a:d3:
                    a2:90:b4:d3:98:2d:9c:cc:82:58:b4:93:27:ae:e5:
                    d7:ff:f3:db:0d:11:bc:ca:8b:16:a4:5d:17:03:4a:
                    fe:bb:93:76:7d:ae:c6:a6:2f:2f:fb:12:54:be:77:
                    88:29:41:3b:79:01:62:c2:24:b6:0a:7a:02:6d:9b:
                    b4:a2:99:79:0a:b2:10:65:99:28:6c:27:0c:16:d4:
                    f7:07:5c:e9:61:e9:7f:38:44:fe:25:03:2a:07:f1:
                    27:26:e6:f6:5d:ae:ff:db:a6:a8:04:df:4d:0a:65:
                    f3:e3:77:2c:1e:29:b8:34:05:9e:b5:07:d1:5c:9b:
                    92:7b:70:98:07:d6:e9:28:25:11:e5:ec:82:43:ec:
                    c5:05:23:a5:4d:5e:69:66:cb:b6:c4:cb:15:20:a5:
                    75:5d:68:48:0b:a2:ba:16:29:3c:6e:b5:18:9c:c3:
                    6e:18:12:23:0c:1c:40:47:1a:d7:0c:05:27:e9:78:
                    c7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:08:01:88:02:48:EF:C9:18:ED:3D:25:B0:D4:C9:BB:63:39:E9:49
            X509v3 Authority Key Identifier:
                keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3133382e33362e3133362e302f32322d3232203d3e20323633383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:37:c7:41:01:e8:92:3e:e0:05:05:83:7b:31:e8:af:9b:74:
         c4:b0:23:f5:1b:b0:9f:fa:e5:73:52:5e:08:1b:e9:d8:29:01:
         79:dd:95:66:05:88:3e:24:82:b6:c6:eb:79:06:0b:07:4b:20:
         8d:54:21:5f:84:f0:41:24:f8:5a:9f:e1:70:80:d0:b6:83:cc:
         8b:cd:c5:d2:d8:83:dc:f6:f9:7d:d7:9a:04:aa:0c:23:62:bb:
         3b:dd:81:6c:f3:c3:51:d8:e7:05:6b:1a:5d:64:21:4d:97:b2:
         2a:23:ba:e6:e4:d7:93:1b:be:c1:c6:0e:b9:d3:d9:33:c0:15:
         0f:99:a2:e6:7d:d7:35:f9:ef:59:83:71:b7:28:d8:37:e1:2a:
         1d:70:05:ce:52:3f:16:6e:ac:30:96:42:07:89:50:fa:ff:4b:
         ca:64:03:39:19:90:f5:84:05:76:47:04:4b:f1:33:bc:aa:4a:
         67:9e:96:80:27:49:bd:b8:94:ff:35:b5:16:11:d6:97:5a:a8:
         9a:3d:ed:e8:33:c8:46:05:45:e7:75:ca:8b:75:e5:ae:26:99:
         93:2f:65:f7:ee:0e:67:e4:ee:90:db:56:81:4b:85:9d:0d:b5:
         ac:84:68:81:45:18:93:c3:a1:75:68:a1:cc:a7:6a:ed:8b:41:
         94:a8:af:93
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNLTai1BN2KPJoIJ9K1HmUnTPkkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMzRjUzM0M4MzU0NTQ5QzU2NzRCNDMxMTNEQTIwN0JE
N0VGMUEzMTAeFw0yNDAzMDUxODE2MDJaFw0yNTAzMDQxODIxMDJaMDMxMTAvBgNV
BAMTKDFCMDgwMTg4MDI0OEVGQzkxOEVEM0QyNUIwRDRDOUJCNjMzOUU5NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEBCKxcNaf4+a1ia9HQGV1rAJ5
N6QEe8BPTRwtK7jhn/AkMW9nu/rPfM1ZtRRlkn/7gI6SGZmq/q3cGlWqX3MQ5pLO
coyaxhWa06KQtNOYLZzMgli0kyeu5df/89sNEbzKixakXRcDSv67k3Z9rsamLy/7
ElS+d4gpQTt5AWLCJLYKegJtm7SimXkKshBlmShsJwwW1PcHXOlh6X84RP4lAyoH
8Scm5vZdrv/bpqgE300KZfPjdyweKbg0BZ61B9Fcm5J7cJgH1ukoJRHl7IJD7MUF
I6VNXmlmy7bEyxUgpXVdaEgLoroWKTxutRicw24YEiMMHEBHGtcMBSfpeMdlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUGwgBiAJI78kY7T0lsNTJu2M56UkwHwYDVR0j
BBgwFoAUUz9TPINUVJxWdLQxE9oge9fvGjEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQzYwQzlEQTBCMDcyRkFBQjE5QkM1MUM1REUzM0E4RTcx
MzgzNTIwMDA5OTQ3OTQ1NjRFMzI4RDk1OUNGMTdELzAvNTMzRjUzM0M4MzU0NTQ5
QzU2NzRCNDMxMTNEQTIwN0JEN0VGMUEzMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MzNGNTMzQzgzNTQ1NDlDNTY3
NEI0MzExM0RBMjA3QkQ3RUYxQTMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkM2MEM5REEwQjA3MkZBQUIxOUJDNTFDNURFMzNBOEU3MTM4MzUyMDAw
OTk0Nzk0NTY0RTMyOEQ5NTlDRjE3RC8wLzMxMzMzODJlMzMzNjJlMzEzMzM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMzMzgzMjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiSI
MA0GCSqGSIb3DQEBCwUAA4IBAQCSN8dBAeiSPuAFBYN7Meivm3TEsCP1G7Cf+uVz
Ul4IG+nYKQF53ZVmBYg+JIK2xut5BgsHSyCNVCFfhPBBJPhan+FwgNC2g8yLzcXS
2IPc9vl915oEqgwjYrs73YFs88NR2OcFaxpdZCFNl7IqI7rm5NeTG77Bxg6509kz
wBUPmaLmfdc1+e9Zg3G3KNg34SodcAXOUj8WbqwwlkIHiVD6/0vKZAM5GZD1hAV2
RwRL8TO8qkpnnpaAJ0m9uJT/NbUWEdaXWqiaPe3oM8hGBUXndcqLdeWuJpmTL2X3
7g5n5O6Q21aBS4WdDbWshGiBRRiTw6F1aKHMp2rti0GUqK+T
-----END CERTIFICATE-----
Generated at Fri May 3 14:51:22 2024 by rpki-client on console-fra.rpki-client.org