Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/3133382e3131372e342e302f32322d3234203d3e20323633373635.roa
File:                     3133382e3131372e342e302f32322d3234203d3e20323633373635.roa (raw, json)
Hash identifier:          P0sUuT8h2JAZz3M6jIxjKGccnQmFQKCpTAPnF90ntN4=
Subject key identifier:   45:54:5C:FA:4A:59:04:29:E0:E5:9A:97:F8:94:3A:6B:F8:E2:FD:AA
Certificate issuer:       /CN=B9C920C3F82E080EFF6CD0269962DD3BECD5697A
Certificate serial:       7637C67552453744D303B8C584C5CB3396AC3C32
Authority key identifier: B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/3133382e3131372e342e302f32322d3234203d3e20323633373635.roa
Signing time:             Tue 17 Sep 2024 17:20:00 +0000
ROA not before:           Tue 17 Sep 2024 17:15:00 +0000
ROA not after:            Tue 16 Sep 2025 17:20:00 +0000
asID:                     263765
IP address blocks:        138.117.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:37:c6:75:52:45:37:44:d3:03:b8:c5:84:c5:cb:33:96:ac:3c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C920C3F82E080EFF6CD0269962DD3BECD5697A
        Validity
            Not Before: Sep 17 17:15:00 2024 GMT
            Not After : Sep 16 17:20:00 2025 GMT
        Subject: CN=45545CFA4A590429E0E59A97F8943A6BF8E2FDAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:da:6f:ca:9d:6d:c4:1d:66:9f:e0:2d:c5:
                    b7:10:b2:f4:27:91:cb:bc:4f:9d:44:cb:18:3e:3e:
                    c5:bf:3e:72:fb:59:4d:28:e5:41:90:d7:0d:c5:62:
                    b1:25:af:8d:61:f7:df:74:b7:50:05:02:07:fd:fb:
                    cf:b4:53:cc:70:ca:e7:aa:ec:00:94:54:3e:db:01:
                    9d:ca:a0:db:60:4b:de:86:16:b5:8d:2b:39:87:4d:
                    ff:d8:b3:e0:4b:c2:d0:cc:af:8a:9a:41:57:fe:b3:
                    11:3a:a2:9c:45:50:ba:ca:fe:e8:63:be:b6:ee:73:
                    bf:6c:83:85:49:a3:b2:cd:0c:c3:90:bb:5e:e7:a7:
                    1b:ec:5c:7f:24:3f:45:80:ea:f3:07:41:1b:1e:6b:
                    9e:89:87:aa:e3:ca:af:36:5b:f8:37:9f:cf:8d:cd:
                    3a:35:44:37:d7:ab:95:37:09:29:59:b0:9b:fd:ec:
                    39:be:70:5f:ac:6a:06:22:bc:4e:cf:31:fb:cc:34:
                    c9:bf:43:b9:3a:46:f3:25:4b:6b:82:7a:29:6f:34:
                    67:26:1a:45:be:ac:34:2c:ee:39:b9:d9:e8:e3:78:
                    fc:a5:6c:30:ca:72:36:e5:8c:b5:da:00:d1:0a:ea:
                    d0:50:9c:61:76:29:83:f5:ea:cf:bf:d1:fb:c3:d1:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:54:5C:FA:4A:59:04:29:E0:E5:9A:97:F8:94:3A:6B:F8:E2:FD:AA
            X509v3 Authority Key Identifier:
                keyid:B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/3133382e3131372e342e302f32322d3234203d3e20323633373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:ac:38:1c:eb:7d:bd:86:7a:71:96:2e:f1:30:6e:54:eb:b3:
         ee:82:79:82:00:a0:3c:56:2b:4c:e7:13:ca:76:1c:eb:19:ab:
         50:bf:16:c7:2e:cd:b4:59:4a:b8:5d:fe:a6:4a:85:45:1e:bb:
         3b:ec:e2:70:cf:34:0a:1d:b4:74:8c:c8:c2:ef:90:e0:51:85:
         de:10:5a:7d:08:75:da:87:d9:35:69:9c:80:e9:d0:68:11:26:
         f3:06:0e:d1:79:6c:10:39:d4:85:db:e3:74:cb:3f:71:b5:bb:
         fd:a7:90:3a:69:b3:f5:00:40:0a:6c:9a:14:4e:37:0e:eb:84:
         9d:ea:55:9f:e2:2b:27:40:9d:50:c3:a3:84:d7:b1:f4:cb:04:
         3f:98:3e:b4:b1:40:3d:89:ad:ef:69:7a:1f:80:cc:10:22:27:
         84:82:6a:18:48:07:8e:f8:b7:92:d6:fa:c2:ae:22:93:95:2e:
         b2:e7:de:d8:fb:22:68:53:ab:1d:78:fa:23:c4:1e:cf:3b:4b:
         03:c3:ad:e7:e0:ec:4c:34:50:b0:52:82:10:bb:14:38:f6:13:
         e3:f3:de:43:2a:bd:88:bb:18:10:50:2e:fa:36:97:81:f9:ea:
         f1:20:4a:76:b1:03:10:67:20:f1:d0:94:1c:de:df:3c:2d:b1:
         26:26:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:20 2024 by rpki-client on console-fra.rpki-client.org