Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/3133382e3132322e32342e302f32322d3234203d3e20323633373835.roa
File:                     3133382e3132322e32342e302f32322d3234203d3e20323633373835.roa (raw, json)
Hash identifier:          BW9ysE7962fRBAyLrT7QXrGPOts/KNvwpwFms7lc5zk=
Subject key identifier:   4D:D3:02:70:36:30:03:CB:49:C3:07:EC:9F:32:31:CB:66:D3:34:E1
Certificate issuer:       /CN=83F8DFD087BA80748886EDE0E890BB3BC4067535
Certificate serial:       1EC53BFD4211DD1A79A2C90370B29D17D972DE74
Authority key identifier: 83:F8:DF:D0:87:BA:80:74:88:86:ED:E0:E8:90:BB:3B:C4:06:75:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/3133382e3132322e32342e302f32322d3234203d3e20323633373835.roa
Signing time:             Tue 05 Mar 2024 17:44:24 +0000
ROA not before:           Tue 05 Mar 2024 17:39:24 +0000
ROA not after:            Tue 04 Mar 2025 17:44:24 +0000
asID:                     263785
IP address blocks:        138.122.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c5:3b:fd:42:11:dd:1a:79:a2:c9:03:70:b2:9d:17:d9:72:de:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F8DFD087BA80748886EDE0E890BB3BC4067535
        Validity
            Not Before: Mar  5 17:39:24 2024 GMT
            Not After : Mar  4 17:44:24 2025 GMT
        Subject: CN=4DD30270363003CB49C307EC9F3231CB66D334E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:5f:95:a9:4b:1c:58:f1:65:42:a6:57:c9:
                    b6:cd:2e:f2:41:f6:ce:40:cd:fa:16:d5:fb:f2:21:
                    6e:7f:04:b1:f1:97:86:ab:1a:b4:af:89:f5:c3:b5:
                    12:c4:a7:6b:3e:10:04:d4:e4:a6:03:75:f0:f1:31:
                    55:8c:e2:7a:73:cd:b9:a2:a9:b9:08:9e:5a:26:95:
                    76:75:4c:eb:92:6d:94:f5:16:9b:95:70:e6:a9:40:
                    a1:1b:f8:e9:b2:91:6d:9e:bc:36:20:1a:c2:0b:a7:
                    83:12:71:16:10:11:9d:d3:98:02:83:c6:c5:5b:54:
                    ea:97:a4:d1:98:b6:a1:20:65:25:93:6d:d4:e5:a8:
                    40:c4:a8:fb:23:b5:0a:00:21:f9:38:cc:af:36:c1:
                    91:95:36:19:a1:d9:5f:2d:8f:c5:1c:ed:14:0d:01:
                    db:34:20:5f:06:6e:56:f4:39:45:11:e2:21:63:ae:
                    e6:b8:eb:c4:98:ad:c6:27:b8:cf:04:f2:17:b6:1f:
                    4c:fb:2a:c7:c7:bc:d2:91:ed:bf:53:ea:ff:c9:ec:
                    ed:8f:ed:a5:72:2d:07:cc:a4:13:d9:31:95:46:67:
                    9b:75:55:f4:7f:4f:b1:9c:06:a8:e0:ff:53:47:f3:
                    24:04:25:79:70:b3:02:b5:31:9f:68:c8:92:d5:3f:
                    b7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D3:02:70:36:30:03:CB:49:C3:07:EC:9F:32:31:CB:66:D3:34:E1
            X509v3 Authority Key Identifier:
                keyid:83:F8:DF:D0:87:BA:80:74:88:86:ED:E0:E8:90:BB:3B:C4:06:75:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/3133382e3132322e32342e302f32322d3234203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:a9:24:a1:1e:5d:5f:f9:5f:10:46:ed:ae:0c:8e:69:67:eb:
         77:5c:22:9f:1d:8c:44:75:a4:b6:4d:77:4e:6c:33:6d:ca:34:
         36:d4:e8:f2:ac:52:63:8e:46:ea:93:8e:67:cc:01:13:ba:2a:
         cf:bd:01:2d:fd:58:b2:db:cf:3f:1f:9b:40:b4:7d:2f:0a:37:
         0c:ea:66:90:d3:ad:87:af:60:6b:03:68:12:8b:ba:82:1c:80:
         06:d6:95:ae:5c:cd:e9:c3:ad:f6:2b:7f:ca:5c:73:4a:99:d3:
         36:92:5e:ca:94:87:03:be:b4:7d:94:6e:de:30:1b:46:d0:7a:
         fb:48:2d:ec:3a:8a:d1:0c:87:a3:b7:a2:f9:2d:a8:53:81:d9:
         64:1f:ba:4e:c7:f1:1f:23:3e:ba:45:6b:09:9c:76:6a:fe:d5:
         d5:62:9a:ea:a5:34:83:2a:20:4e:9c:53:65:d2:35:5c:04:49:
         fc:af:f0:cb:1d:20:b4:d5:38:4d:13:d9:31:19:6f:a1:9a:bc:
         da:1b:a1:f7:45:aa:34:0d:12:c4:ba:22:87:5b:5a:68:6d:4d:
         1e:d4:c3:3f:91:ec:6c:2c:31:af:b1:eb:5b:9a:50:8d:4b:f9:
         5d:dd:c9:2d:70:b2:05:7f:e9:ec:d1:00:84:f4:72:b5:0d:72:
         8b:a0:38:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 23:12:53 2024 by rpki-client on console-ams.rpki-client.org