Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3133382e3138362e3230382e302f32322d3234203d3e203237373735.roa
File:                     3133382e3138362e3230382e302f32322d3234203d3e203237373735.roa (raw, json)
Hash identifier:          yCs8pXXMaTo3pxbc7Z/bXUiRlA+JxoH8rVAmHEzX9wk=
Subject key identifier:   34:EB:3A:95:AA:A7:CE:5A:2D:52:0D:8C:92:22:FE:9F:35:E5:86:CC
Certificate issuer:       /CN=E448655A46C905154A46DF19D5CADDB20B5D1153
Certificate serial:       0FC662260ECEAD73CEF46A8E267448499055CDD0
Authority key identifier: E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3133382e3138362e3230382e302f32322d3234203d3e203237373735.roa
Signing time:             Tue 04 Feb 2025 18:25:21 +0000
ROA not before:           Tue 04 Feb 2025 18:20:21 +0000
ROA not after:            Tue 03 Feb 2026 18:25:21 +0000
asID:                     27775
IP address blocks:        138.186.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c6:62:26:0e:ce:ad:73:ce:f4:6a:8e:26:74:48:49:90:55:cd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E448655A46C905154A46DF19D5CADDB20B5D1153
        Validity
            Not Before: Feb  4 18:20:21 2025 GMT
            Not After : Feb  3 18:25:21 2026 GMT
        Subject: CN=34EB3A95AAA7CE5A2D520D8C9222FE9F35E586CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:03:48:52:6d:08:d0:ea:99:70:99:20:58:
                    c8:16:d6:a6:80:e8:83:56:60:ba:c0:ff:5e:ed:6b:
                    7d:4b:be:fa:a1:6c:c9:e3:c2:1d:b6:da:1a:0a:1a:
                    fd:70:b3:85:c1:80:c6:cf:6d:28:8f:25:3b:e4:44:
                    4a:28:41:ec:46:70:0d:c0:ed:7d:e3:1a:7a:41:4d:
                    35:e4:89:8f:89:14:67:4d:cc:23:49:dc:6b:1b:6f:
                    f0:6d:8e:0b:9a:c4:d8:ae:90:4d:35:09:11:dd:60:
                    d2:f7:30:9a:a2:ad:d2:12:8c:b8:22:17:23:b7:6b:
                    00:f2:1c:64:42:75:3a:2d:4b:d3:e2:5c:40:7d:a3:
                    d8:d9:9f:26:73:b4:78:64:e3:ef:17:4f:86:24:bd:
                    df:be:04:de:e6:67:38:33:a3:7a:b6:53:0d:20:54:
                    45:b2:2f:b7:f6:20:90:50:96:02:dd:a0:d1:52:26:
                    a3:a0:24:f3:1c:b7:a5:2c:b6:de:c8:a2:fe:7d:05:
                    cb:a2:df:d9:70:7e:02:c1:43:a7:6a:92:1a:42:69:
                    12:62:eb:59:72:e7:5b:39:be:5d:5b:8a:6b:e9:c7:
                    93:73:fb:87:b8:e5:c5:cf:5f:1a:41:1a:e5:b8:e2:
                    e8:54:3a:d7:9c:c4:5b:58:06:f2:1e:55:52:46:61:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EB:3A:95:AA:A7:CE:5A:2D:52:0D:8C:92:22:FE:9F:35:E5:86:CC
            X509v3 Authority Key Identifier:
                keyid:E4:48:65:5A:46:C9:05:15:4A:46:DF:19:D5:CA:DD:B2:0B:5D:11:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/E448655A46C905154A46DF19D5CADDB20B5D1153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E448655A46C905154A46DF19D5CADDB20B5D1153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ACD83F65B3C2985BFC1981F2F5786B16670160A035E7992C8B5BFE15FA23832/0/3133382e3138362e3230382e302f32322d3234203d3e203237373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:94:0b:74:0a:58:62:c8:4e:9c:9a:bf:8f:05:14:3b:4b:38:
         54:12:4a:ed:a4:ff:e5:46:5d:e4:c1:0a:f9:02:da:57:e8:dd:
         32:b7:28:fb:31:84:ae:6e:ba:43:21:66:0b:5d:a9:7a:65:28:
         7c:00:22:b3:28:89:5c:21:13:99:27:55:f1:8e:8c:c6:25:ac:
         b9:f7:1a:69:e7:a0:7c:15:39:eb:61:d5:f6:2c:8d:71:ca:be:
         76:85:65:7e:4d:4d:32:fd:b8:d9:1c:e1:0e:c1:27:fa:52:4e:
         e1:50:4d:8f:de:3b:37:7e:20:cc:4c:25:77:51:67:6d:89:7e:
         d7:b9:dc:28:f8:0c:41:d6:a9:53:7e:2e:f7:f8:ce:20:9e:af:
         36:d1:55:4e:c9:9b:03:fe:be:aa:2d:2d:70:25:6f:f6:16:71:
         58:37:57:3c:6e:7c:3f:fc:82:63:e8:4f:c6:95:21:7a:ce:b2:
         6c:20:20:68:90:33:26:9b:0f:83:90:85:31:82:e4:24:f6:34:
         41:82:a3:84:c7:34:59:e1:41:28:3a:2f:31:7a:8e:b9:43:1f:
         a4:c0:c4:43:56:fe:08:9b:7a:34:7c:14:56:0c:6e:46:20:2a:
         1c:60:ad:5b:ea:41:9b:a6:48:4a:7e:b1:49:a5:91:4c:2c:18:
         27:90:d4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:55 2025 by rpki-client