Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/3133382e3131372e382e302f32322d3234203d3e20323637383137.roa
File:                     3133382e3131372e382e302f32322d3234203d3e20323637383137.roa (raw, json)
Hash identifier:          4Welog00IzfVs69GDUi7vb1nER0QeJic2PQD0r4OD3w=
Subject key identifier:   17:3C:6C:A4:5D:B8:4D:A3:61:BC:37:CB:31:E7:7B:4E:F9:A7:7E:29
Certificate issuer:       /CN=57696D227BF558822356A541E87E2F70E2A214E2
Certificate serial:       709ABF2EE788F18F83158BE2E60703768A8456B2
Authority key identifier: 57:69:6D:22:7B:F5:58:82:23:56:A5:41:E8:7E:2F:70:E2:A2:14:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57696D227BF558822356A541E87E2F70E2A214E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/3133382e3131372e382e302f32322d3234203d3e20323637383137.roa
Signing time:             Tue 04 Feb 2025 18:50:01 +0000
ROA not before:           Tue 04 Feb 2025 18:45:01 +0000
ROA not after:            Tue 03 Feb 2026 18:50:01 +0000
asID:                     267817
IP address blocks:        138.117.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/57696D227BF558822356A541E87E2F70E2A214E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/57696D227BF558822356A541E87E2F70E2A214E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57696D227BF558822356A541E87E2F70E2A214E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9a:bf:2e:e7:88:f1:8f:83:15:8b:e2:e6:07:03:76:8a:84:56:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57696D227BF558822356A541E87E2F70E2A214E2
        Validity
            Not Before: Feb  4 18:45:01 2025 GMT
            Not After : Feb  3 18:50:01 2026 GMT
        Subject: CN=173C6CA45DB84DA361BC37CB31E77B4EF9A77E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:53:49:de:81:6e:0e:d0:bc:aa:0f:2e:79:
                    ad:2f:08:e6:ad:8d:7b:0f:5d:e4:20:df:49:6a:3e:
                    69:12:80:c0:e2:f0:7a:ba:35:80:f4:d1:40:62:4a:
                    08:cb:5b:49:4c:89:78:a1:5a:08:4b:a8:48:d6:ba:
                    a4:c5:6d:e1:c5:ba:8b:fe:ca:41:79:23:8d:49:f6:
                    8c:9f:cd:04:5b:49:db:b9:9e:88:db:fa:57:c3:71:
                    42:9b:f7:9e:46:33:ff:73:49:66:91:25:5b:ed:e3:
                    78:68:ca:1f:7f:54:9f:5d:5a:9c:45:1e:b4:cb:53:
                    0b:14:18:1a:3d:43:f4:f1:29:cd:b4:0f:45:c8:65:
                    7f:68:7e:d5:77:08:fd:1f:ea:ab:ae:d4:05:73:47:
                    24:09:13:a3:80:3d:6f:80:ef:14:ac:8f:0c:08:dc:
                    21:55:ea:84:c9:e1:17:a6:f7:9a:df:3b:1c:34:fc:
                    53:a4:a4:3e:ca:2b:0e:fd:c4:c3:fe:fe:7d:53:79:
                    16:c9:b9:a3:97:d6:42:d7:57:db:f1:4d:55:0c:45:
                    50:53:39:29:34:61:17:ac:e5:6b:04:b2:e2:4b:a1:
                    72:4b:d1:47:7e:61:0c:9e:3f:a1:b4:94:e3:c0:6b:
                    38:9e:e8:ac:25:a6:57:0e:26:a7:85:da:b5:a0:a9:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3C:6C:A4:5D:B8:4D:A3:61:BC:37:CB:31:E7:7B:4E:F9:A7:7E:29
            X509v3 Authority Key Identifier:
                keyid:57:69:6D:22:7B:F5:58:82:23:56:A5:41:E8:7E:2F:70:E2:A2:14:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/57696D227BF558822356A541E87E2F70E2A214E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57696D227BF558822356A541E87E2F70E2A214E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/244D13B3F35C6FDDCE1F84FFF911C77A4C1375BE4DC88D2F9E5932034ABE4418/0/3133382e3131372e382e302f32322d3234203d3e20323637383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:00:48:7a:4b:21:c4:c9:d9:fe:bc:e0:fd:77:5d:08:2a:e2:
         5d:fb:cd:11:fb:a4:5e:89:df:17:fd:90:46:6b:48:b6:79:c0:
         b0:4b:44:53:58:3d:15:d3:36:90:7f:ff:eb:98:ed:c8:7d:1c:
         63:87:b1:6b:4a:da:d8:85:bd:2f:36:2c:a9:86:a8:44:09:e3:
         19:f0:87:af:a9:ab:3d:20:7c:d4:f9:69:90:17:1a:55:d8:6a:
         ee:c2:15:0e:aa:d8:a5:e9:d5:ed:a7:20:e1:f4:fc:59:8d:20:
         3f:46:57:fa:7e:5f:46:f1:cb:c8:e1:9a:97:d6:a5:f9:60:1e:
         f7:55:f1:e9:01:da:6d:9f:15:63:b5:82:d5:d2:c0:51:05:cd:
         ff:00:e8:0c:02:d1:07:18:1c:a0:f7:06:6b:ab:aa:23:af:1c:
         8a:98:51:53:d7:6d:a5:9d:93:e9:d7:b3:56:71:36:cf:20:8d:
         b9:23:6f:dc:91:c7:62:b6:1b:8a:2d:66:a6:4f:c9:12:ab:e5:
         fc:f6:32:2f:a7:ae:f1:aa:11:38:b3:d5:82:74:a7:14:10:2c:
         6c:1a:e9:a4:6a:24:7a:fd:ac:d1:9a:df:c4:5d:3a:d6:ab:c3:
         e5:f9:0c:1b:3a:51:5d:ae:94:9c:fd:01:75:a3:ba:3b:c2:1a:
         fb:8f:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:00 2025 by rpki-client