Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/3133382e3231392e36302e302f32322d3234203d3e203631353038.roa
File:                     3133382e3231392e36302e302f32322d3234203d3e203631353038.roa (raw, json)
Hash identifier:          L1fXjd09cRj6VywyUo2J0puBh5fQmFaUfzMdk0Lv0Rk=
Subject key identifier:   4D:BC:47:BE:E3:7E:57:9F:91:5F:2A:2F:72:D5:60:8C:18:5B:1C:95
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       71A7230433D96F3E5B7F2F6FAC2605E0DBE05E3C
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/3133382e3231392e36302e302f32322d3234203d3e203631353038.roa
Signing time:             Tue 04 Feb 2025 18:28:50 +0000
ROA not before:           Tue 04 Feb 2025 18:23:50 +0000
ROA not after:            Tue 03 Feb 2026 18:28:50 +0000
asID:                     61508
IP address blocks:        138.219.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a7:23:04:33:d9:6f:3e:5b:7f:2f:6f:ac:26:05:e0:db:e0:5e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Feb  4 18:23:50 2025 GMT
            Not After : Feb  3 18:28:50 2026 GMT
        Subject: CN=4DBC47BEE37E579F915F2A2F72D5608C185B1C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:67:67:99:e5:30:bc:ac:ad:72:9c:3d:33:
                    d4:41:0f:6f:31:f2:b2:ca:27:26:cb:86:44:68:c5:
                    ae:20:e5:5f:42:84:93:21:7d:0c:c6:ab:31:10:47:
                    71:30:ae:a2:df:21:01:9a:75:aa:a5:f1:5e:30:0e:
                    15:73:5c:35:d9:44:29:0a:ec:f1:f9:c8:98:e8:5c:
                    06:77:73:b7:48:e7:c0:ff:de:be:0c:3f:6e:ca:d5:
                    17:c2:71:c3:f9:cc:94:b8:12:17:0c:5d:e2:d9:e3:
                    de:5b:e5:eb:8e:58:71:55:03:41:9d:4b:78:fe:58:
                    ed:48:39:c1:3e:fe:40:d8:69:45:67:4a:6d:ce:c1:
                    d3:ec:7a:f6:72:e8:7a:cf:50:c7:4a:42:21:16:22:
                    5e:a1:ff:78:e0:f5:d6:d8:50:54:67:14:2d:f7:7b:
                    50:90:09:94:99:02:4b:98:c6:26:bb:90:d7:bf:7b:
                    b4:e5:03:55:96:0a:74:ab:74:2c:a0:6a:0d:a6:9b:
                    ad:61:f7:e9:9c:08:a2:78:29:19:61:84:93:fd:4b:
                    cd:5e:d1:7f:54:5d:17:4c:8d:b9:ce:a2:25:72:57:
                    92:d1:17:b9:7e:b1:11:f2:f7:53:1b:a5:43:0c:44:
                    7c:e7:20:f7:ca:a3:13:1b:92:77:9f:1b:f2:06:0a:
                    b0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BC:47:BE:E3:7E:57:9F:91:5F:2A:2F:72:D5:60:8C:18:5B:1C:95
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/3133382e3231392e36302e302f32322d3234203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:01:ad:ee:e4:6f:7d:e4:e7:2c:a7:a7:ef:5d:f1:df:fa:8a:
         80:30:c0:c5:bf:6d:bb:45:66:3f:22:0d:04:3c:35:73:80:65:
         b9:8d:bf:49:ca:db:74:e1:a2:dd:0a:9d:31:c9:3e:63:76:ef:
         5a:1a:cc:69:c1:94:f1:ce:c2:40:aa:b7:99:a5:e3:e5:79:7c:
         3a:9d:05:b4:a6:80:4f:a3:eb:99:bf:e7:63:5e:67:2f:5f:f3:
         10:4e:a7:30:37:d3:d6:0b:f3:e6:0c:b1:58:0b:2e:26:84:41:
         85:62:66:cf:f4:2f:41:c0:f8:d4:90:94:a3:29:7f:99:eb:62:
         d3:11:3e:f8:3f:93:9e:2a:95:84:0d:01:44:82:fd:b3:2c:3c:
         f7:78:0d:5a:2c:cf:7c:9b:f1:4c:ff:e7:6f:ff:1d:6e:65:f4:
         aa:ae:16:66:9b:5d:9f:14:48:5c:8c:c9:93:6f:7f:2c:83:46:
         76:f3:52:31:de:89:a5:a0:32:5d:83:39:b9:59:ad:db:87:45:
         9c:64:e9:71:d3:34:94:c8:e9:db:c8:94:5d:15:b1:1a:03:5b:
         c2:7a:e9:c2:8e:42:5b:b4:f2:6b:46:4c:f0:a4:95:aa:4e:27:
         fb:7e:38:9e:69:c6:9e:4b:72:d8:d1:67:9f:2f:f1:6d:e1:f8:
         b3:aa:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:25 2025 by rpki-client