Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3133382e3235352e39362e302f32342d3234203d3e20323633383037.roa
File:                     3133382e3235352e39362e302f32342d3234203d3e20323633383037.roa (raw, json)
Hash identifier:          rZfRbJlB/ojkN7811J6NBBB8ubQUv+qPn94tnNYVH1Q=
Subject key identifier:   4D:36:29:E9:3B:13:C3:F9:39:BA:0A:3B:94:A4:C8:D4:3C:BD:90:B2
Certificate issuer:       /CN=3F4E1DE876140740F25E5B57D8F6BB5386023F5F
Certificate serial:       655B016115898E1D167A56D41BD74ECDE1B88FEA
Authority key identifier: 3F:4E:1D:E8:76:14:07:40:F2:5E:5B:57:D8:F6:BB:53:86:02:3F:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3133382e3235352e39362e302f32342d3234203d3e20323633383037.roa
Signing time:             Tue 04 Feb 2025 18:34:40 +0000
ROA not before:           Tue 04 Feb 2025 18:29:40 +0000
ROA not after:            Tue 03 Feb 2026 18:34:40 +0000
asID:                     263807
IP address blocks:        138.255.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5b:01:61:15:89:8e:1d:16:7a:56:d4:1b:d7:4e:cd:e1:b8:8f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F4E1DE876140740F25E5B57D8F6BB5386023F5F
        Validity
            Not Before: Feb  4 18:29:40 2025 GMT
            Not After : Feb  3 18:34:40 2026 GMT
        Subject: CN=4D3629E93B13C3F939BA0A3B94A4C8D43CBD90B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b6:ff:d8:73:a4:fa:6d:ed:b5:14:f0:1f:b4:
                    69:0c:3f:7b:ca:bb:c3:93:5c:e2:80:c6:56:b7:4f:
                    6c:a6:4c:cd:94:f6:68:af:dc:91:71:80:2c:56:e7:
                    58:91:84:8a:cb:7c:7c:bf:83:bf:72:63:a6:2a:ff:
                    53:9b:f4:34:b7:2c:05:bf:1b:d8:d1:ad:49:69:67:
                    f0:6c:ba:01:e8:08:40:4e:71:62:e0:5c:2a:72:c8:
                    cb:13:15:39:bd:fe:66:ab:5e:68:9b:84:90:53:92:
                    16:0e:3f:6d:35:54:de:3f:09:36:ce:64:42:a4:34:
                    b6:25:e1:0e:2d:02:0a:71:d6:dc:11:af:4b:4e:6a:
                    7b:e2:cd:c0:f7:62:7e:a8:56:e1:63:af:68:a8:0e:
                    77:23:81:ee:1d:2d:64:28:c8:72:36:8b:84:d0:8d:
                    e7:33:80:3d:14:d4:8c:23:31:d9:bf:cc:80:49:43:
                    62:a2:88:96:9f:33:6b:6c:31:a2:69:92:6e:79:10:
                    9b:8e:b5:73:80:bd:8a:ea:09:ac:1f:24:e0:4a:c8:
                    cc:d0:4c:49:4f:00:1d:f2:0a:62:17:dc:6f:c2:0e:
                    7d:de:23:db:e8:90:f5:69:c2:ed:fd:7d:f7:e1:08:
                    28:f6:7d:e7:cd:e9:11:4c:a1:ec:0f:1d:23:dc:46:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:36:29:E9:3B:13:C3:F9:39:BA:0A:3B:94:A4:C8:D4:3C:BD:90:B2
            X509v3 Authority Key Identifier:
                keyid:3F:4E:1D:E8:76:14:07:40:F2:5E:5B:57:D8:F6:BB:53:86:02:3F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F4E1DE876140740F25E5B57D8F6BB5386023F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/213DDC6C525AA1D432F470A96D9261CF28FE1CED4EC7C1B8C1F5A018F75EEF4D/0/3133382e3235352e39362e302f32342d3234203d3e20323633383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7b:22:23:7f:51:81:a2:04:40:de:a3:49:1d:18:b5:2e:ea:
         89:3a:93:c3:7b:e4:51:98:0c:14:6d:89:66:41:e0:1d:83:9b:
         7d:19:12:24:e6:a6:cd:ea:eb:b7:7d:0a:f5:39:65:e1:02:f3:
         b0:0c:ea:04:ac:6f:5a:fd:60:d6:4e:85:fe:c6:77:69:95:53:
         d4:0f:00:76:72:6e:a7:f8:0c:57:c3:42:f3:21:0c:d5:92:f3:
         b9:51:16:37:0e:35:f3:f8:6f:9c:ab:07:60:2f:da:80:f6:ba:
         45:e2:84:0c:05:4c:72:78:82:89:fd:fc:f2:ef:7c:5a:9d:75:
         ec:eb:cc:7c:f2:3e:a0:b8:14:c9:6f:59:f1:af:67:cb:ce:aa:
         72:60:80:32:15:63:e8:a3:4b:04:da:fc:75:2c:6a:59:cf:67:
         b1:bc:fa:09:b6:ea:bb:df:9a:9c:e3:d0:b6:8b:7f:87:54:bb:
         1c:d3:ea:d6:a0:03:07:cc:e0:7f:3a:5d:d1:57:51:1e:02:6b:
         d4:b5:a5:be:3c:f7:ea:f8:7e:e4:63:49:a6:81:05:34:4b:94:
         d6:97:36:b9:5c:3d:34:ac:d1:c0:af:5b:a8:1a:41:3b:29:08:
         e3:69:54:47:2c:9d:f1:d1:97:99:e7:93:c8:49:77:90:79:eb:
         a5:21:df:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:02 2025 by rpki-client