Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36342e302f32342d3234203d3e203532343637.roa
File:                     3133382e33362e36342e302f32342d3234203d3e203532343637.roa (raw, json)
Hash identifier:          og73oar6DoSa0oVfOJz/fc3yl4c9cCa2fchh0wF0pAc=
Subject key identifier:   58:9D:A4:DB:12:06:88:2B:8B:07:9D:31:BF:2E:9C:8C:C8:D4:1B:8C
Certificate issuer:       /CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
Certificate serial:       4A5569D1F60BA77521C2677F4AC07DF29394618C
Authority key identifier: 64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36342e302f32342d3234203d3e203532343637.roa
Signing time:             Tue 04 Feb 2025 18:05:47 +0000
ROA not before:           Tue 04 Feb 2025 18:00:47 +0000
ROA not after:            Tue 03 Feb 2026 18:05:47 +0000
asID:                     52467
IP address blocks:        138.36.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:55:69:d1:f6:0b:a7:75:21:c2:67:7f:4a:c0:7d:f2:93:94:61:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641052DCEF37E758EF15254F7C2DAF03FCC99A62
        Validity
            Not Before: Feb  4 18:00:47 2025 GMT
            Not After : Feb  3 18:05:47 2026 GMT
        Subject: CN=589DA4DB1206882B8B079D31BF2E9C8CC8D41B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:aa:14:3e:c2:36:3e:04:c8:4b:fc:11:e9:
                    70:e1:78:5d:d2:aa:cf:2d:e4:bf:81:24:74:dc:c2:
                    e5:8c:a5:b9:93:c7:f5:60:87:2b:76:86:b3:69:19:
                    75:1b:7d:4c:f2:94:73:b2:45:bc:31:1e:ee:53:de:
                    47:9c:03:71:62:54:76:9e:79:90:1c:40:7d:7f:50:
                    f2:0e:08:6b:46:89:2c:aa:1a:5e:d3:12:91:81:8b:
                    bc:e7:75:a0:84:71:17:ea:38:ee:3a:2b:7b:8f:7a:
                    33:e2:61:a1:93:ac:02:0b:92:d1:72:da:5e:34:f0:
                    7d:03:ae:46:cd:b9:38:b3:2b:1a:0a:89:3c:f6:fe:
                    8b:43:71:4f:fb:f7:e2:f3:8f:35:09:b6:11:10:76:
                    af:7c:a5:17:16:e3:89:aa:7b:fc:1c:ca:9a:00:87:
                    9b:d3:0d:68:59:db:ad:b2:03:5a:37:cb:9f:8b:d7:
                    07:fd:3d:df:06:7e:80:07:92:dc:31:47:69:08:a6:
                    81:9a:86:6a:5a:0a:9e:b8:62:a1:29:49:79:31:d1:
                    7b:af:67:2d:4c:82:9c:b5:45:bc:33:e7:d1:6b:ae:
                    72:c6:81:3d:1f:bc:09:01:7d:5a:57:dc:a5:73:a9:
                    c6:81:e6:d2:a6:9f:8a:09:13:64:94:8a:c8:b9:61:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9D:A4:DB:12:06:88:2B:8B:07:9D:31:BF:2E:9C:8C:C8:D4:1B:8C
            X509v3 Authority Key Identifier:
                keyid:64:10:52:DC:EF:37:E7:58:EF:15:25:4F:7C:2D:AF:03:FC:C9:9A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/641052DCEF37E758EF15254F7C2DAF03FCC99A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B52572E2652AA752E5F2A771D4B4F9735B51DCB6DD6E3E1A53C763AAC0D2C9C/0/3133382e33362e36342e302f32342d3234203d3e203532343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:59:a5:6e:e9:3c:29:98:11:d8:d5:e4:ae:21:a5:c8:af:28:
         8e:67:cd:53:e2:b5:f9:49:a2:64:c9:d8:7f:1c:46:57:bb:21:
         a0:42:33:12:20:5e:39:93:3c:e2:be:35:ef:5b:15:6c:1c:ff:
         7c:9d:8e:51:aa:9e:c7:41:d3:40:df:40:2a:b3:d9:01:2b:f3:
         f8:8f:0f:04:59:b3:5f:46:a8:7b:92:cf:b8:b7:6c:73:56:5d:
         a8:52:de:34:11:03:6c:01:88:16:e9:1b:9e:f6:67:af:68:f2:
         33:4f:51:67:8d:aa:75:3d:06:2f:ca:5c:10:98:85:73:4f:e0:
         78:ef:fd:ee:c9:8e:ff:a0:d5:0e:a1:6a:d7:88:97:af:34:26:
         d8:77:4c:73:cb:5b:68:30:01:c9:f4:31:cd:c6:cd:f9:55:01:
         42:83:f7:45:f0:57:f4:42:fa:be:1d:35:40:eb:46:1c:4f:bc:
         cb:2a:80:ea:a2:a8:84:98:cb:09:b0:17:22:9c:60:07:ec:ac:
         53:ae:08:18:c0:1f:a8:e9:99:7f:ee:b3:2f:d9:69:d5:43:b4:
         c9:aa:96:a1:60:29:7d:f1:c5:dd:89:b1:55:0a:77:8f:62:3d:
         75:19:47:41:44:c2:09:a1:76:57:f9:82:da:52:cd:6d:ef:1f:
         67:63:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:09:52 2025 by rpki-client