Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/3133382e33362e3134382e302f32322d3234203d3e20323633373239.roa
File:                     3133382e33362e3134382e302f32322d3234203d3e20323633373239.roa (raw, json)
Hash identifier:          +eZAdvjXVLf1F3o8RwlO4gQ4C8goUBJPveh5jtgVp7o=
Subject key identifier:   3D:98:41:26:A3:C9:22:D4:C9:1E:A3:60:C8:9B:2A:F7:B4:57:40:63
Certificate issuer:       /CN=AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5
Certificate serial:       3A76A1495CAE2EF655D33445B42D1669274A43
Authority key identifier: AB:6B:AD:4E:48:CA:90:BB:C6:E4:CE:22:67:5D:DE:58:82:BB:73:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/3133382e33362e3134382e302f32322d3234203d3e20323633373239.roa
Signing time:             Tue 04 Feb 2025 20:05:00 +0000
ROA not before:           Tue 04 Feb 2025 20:00:00 +0000
ROA not after:            Tue 03 Feb 2026 20:05:00 +0000
asID:                     263729
IP address blocks:        138.36.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:76:a1:49:5c:ae:2e:f6:55:d3:34:45:b4:2d:16:69:27:4a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5
        Validity
            Not Before: Feb  4 20:00:00 2025 GMT
            Not After : Feb  3 20:05:00 2026 GMT
        Subject: CN=3D984126A3C922D4C91EA360C89B2AF7B4574063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:57:0d:38:4f:bf:c9:c4:ea:ff:d0:33:a5:
                    36:4d:43:15:81:44:e1:b3:57:b1:aa:5d:52:10:93:
                    39:fb:16:01:67:68:3e:e4:8f:bd:59:1e:d7:15:e3:
                    f7:c0:3a:62:ab:86:9d:e4:1a:a3:5c:a7:dc:03:f7:
                    1a:31:a6:36:d9:c7:7a:01:d4:ae:6c:1f:1f:d5:fe:
                    b7:e1:48:f7:03:ca:ac:f9:bb:2a:be:ac:d4:05:96:
                    b1:9c:fd:b3:1d:4d:b2:b1:74:95:b2:4b:33:bc:76:
                    7c:6f:bf:b8:5d:83:9d:79:ba:ec:e6:70:b6:42:fc:
                    1b:0b:0a:f7:7d:e8:39:bf:ab:99:3f:cc:f0:6b:15:
                    7e:42:b7:d2:84:dc:4e:dd:b2:ba:62:03:ea:d4:f6:
                    03:03:e6:c2:97:5e:ed:d9:28:14:11:4e:81:fb:2b:
                    4d:a8:bd:c6:4e:26:a0:94:8e:34:08:0d:1d:bd:fd:
                    53:9b:d5:78:c4:98:58:b1:93:ac:9e:81:ea:37:68:
                    b8:a2:47:88:59:a8:b7:c1:89:bf:2a:11:c3:4c:59:
                    3e:2d:78:a7:df:d8:b0:74:2a:5e:a5:f0:de:5a:04:
                    84:a7:9e:af:10:32:5f:ac:a2:5c:0c:43:4d:04:86:
                    33:87:f3:e2:24:67:a9:a4:db:a6:be:ae:cf:02:16:
                    25:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:98:41:26:A3:C9:22:D4:C9:1E:A3:60:C8:9B:2A:F7:B4:57:40:63
            X509v3 Authority Key Identifier:
                keyid:AB:6B:AD:4E:48:CA:90:BB:C6:E4:CE:22:67:5D:DE:58:82:BB:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/3133382e33362e3134382e302f32322d3234203d3e20323633373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:95:2c:50:a4:1c:3e:73:a7:43:a7:52:44:5e:cd:3f:84:
         00:21:f1:2e:bd:ee:16:6d:ad:0c:32:a8:61:f9:ce:09:54:0a:
         a8:ff:34:c5:c1:c7:58:e1:5b:cb:34:f1:0b:65:6b:47:94:ed:
         50:50:3e:60:b7:f9:fc:b2:06:a9:68:e3:f3:93:5d:42:f9:5d:
         29:61:05:ec:62:5e:68:a4:ac:3e:f1:0f:29:24:12:c9:f0:4d:
         40:5f:e3:e0:6d:55:df:36:5f:46:91:f8:82:bc:6f:52:d0:09:
         e0:48:b7:32:40:fb:d8:02:c0:5b:df:1e:51:f7:19:51:13:78:
         43:05:25:d6:b8:27:c1:99:5f:2c:48:72:18:73:c4:01:0b:b6:
         1b:66:e8:4f:43:6c:6b:f2:b5:0b:6f:b3:79:d6:b4:4a:17:47:
         59:3d:6a:fa:c6:0d:ed:34:e4:20:a9:2e:ab:57:3e:9f:db:b6:
         23:13:61:f2:b5:dd:16:c0:9e:c5:6f:ac:60:bd:1e:a1:cb:d3:
         05:44:3e:ab:b7:d5:e4:52:12:cd:5b:70:a6:ef:25:c8:67:a3:
         ba:48:f8:97:43:f4:61:e6:68:cc:55:25:7c:79:64:80:98:f7:
         a6:4f:b7:1f:1c:f5:42:4f:aa:6e:a5:92:2a:17:6e:e6:46:e5:
         28:29:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:09:18 2025 by rpki-client