Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa
File:                     3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa (raw, json)
Hash identifier:          e7+CXpay+EWuoUgmXjhSxAKj4Dqkj4EKhInAk5DTdHg=
Subject key identifier:   91:B2:11:9C:0A:67:D8:46:BA:37:FC:5A:AD:0B:FE:53:45:03:A2:AA
Certificate issuer:       /CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3
Certificate serial:       536266352EBC47FA6BA41396BB573DC703802D17
Authority key identifier: BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa
Signing time:             Tue 04 Feb 2025 18:07:01 +0000
ROA not before:           Tue 04 Feb 2025 18:02:01 +0000
ROA not after:            Tue 03 Feb 2026 18:07:01 +0000
asID:                     263817
IP address blocks:        138.185.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:62:66:35:2e:bc:47:fa:6b:a4:13:96:bb:57:3d:c7:03:80:2d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3
        Validity
            Not Before: Feb  4 18:02:01 2025 GMT
            Not After : Feb  3 18:07:01 2026 GMT
        Subject: CN=91B2119C0A67D846BA37FC5AAD0BFE534503A2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:c0:48:18:3d:a6:1f:dc:9a:ff:f4:1e:e6:
                    70:6b:45:5c:f6:3e:5f:5a:31:0f:50:e5:98:14:19:
                    f1:2b:72:44:e3:dc:98:f5:11:51:9b:dd:9c:59:e0:
                    02:42:dd:5f:3c:7d:5c:78:bc:d2:89:ad:b1:9c:a3:
                    9a:11:91:ef:7d:16:97:c9:38:84:d3:81:5f:cd:0a:
                    8c:a1:ef:d5:b0:07:c5:32:4c:ec:51:53:7b:4b:23:
                    0e:14:51:93:3f:e4:7e:97:35:0a:59:5f:08:43:90:
                    ea:2d:dc:22:36:55:cd:9f:60:ab:23:bf:58:de:0a:
                    47:64:14:54:9d:51:70:dc:b7:98:fb:08:60:ea:09:
                    15:4d:e9:6d:28:d3:0a:df:bf:57:83:b5:f2:85:18:
                    b5:31:41:cc:52:0c:63:00:c9:b2:c8:96:94:c7:61:
                    c4:0d:2e:1d:9c:ac:76:32:46:8c:5a:43:25:dd:4c:
                    11:ee:ad:59:40:71:39:a3:32:a6:5f:b6:26:1d:e3:
                    2b:c1:ba:3b:b2:14:e4:9e:0d:37:d9:8a:28:0b:fa:
                    24:48:8d:c4:01:29:ba:d9:59:cf:81:16:b1:d6:81:
                    4c:6c:cb:67:1f:de:1c:96:54:49:4b:53:8b:e1:d6:
                    f6:85:64:ba:6b:6c:c8:81:dd:9c:c1:16:b3:35:cb:
                    ec:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B2:11:9C:0A:67:D8:46:BA:37:FC:5A:AD:0B:FE:53:45:03:A2:AA
            X509v3 Authority Key Identifier:
                keyid:BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/3133382e3138352e32382e302f32342d3234203d3e20323633383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ae:cf:8a:2e:8e:20:3a:df:a5:ef:9f:1e:36:be:4e:a1:e4:
         7a:c8:cc:3f:54:c5:92:2c:56:5d:8f:35:60:a5:30:a2:ed:17:
         af:cd:9b:91:fe:e4:63:7a:11:29:c9:c9:ff:0f:af:07:8a:06:
         14:d2:26:ce:fb:5f:57:11:21:f6:09:35:a0:29:34:ae:e4:5e:
         80:7a:a1:61:b5:0f:a5:bc:3a:be:9b:e2:2a:6c:d0:61:af:18:
         dc:fb:87:5f:0d:a6:7c:8c:4f:5f:da:7e:d7:ab:81:46:02:d3:
         43:b8:fe:07:c5:74:64:ce:e2:9c:ce:fe:66:2d:03:1b:d9:6e:
         87:ab:1c:5f:dc:20:d5:45:ac:74:02:74:5f:b0:bc:f5:ce:ed:
         bc:58:e3:e4:3a:86:20:c6:d5:2f:25:60:2e:92:7e:d0:bc:36:
         b7:15:32:d0:2b:7f:57:db:97:2f:2f:ea:97:9c:c3:44:94:b8:
         b0:92:de:e6:ec:17:56:c1:f9:eb:0c:93:e5:62:f1:e4:d7:76:
         51:d8:d4:07:5c:f7:3a:be:42:c0:e4:7c:69:aa:fd:c3:c0:6b:
         c0:4e:26:3e:60:22:fb:ed:83:88:2f:24:73:70:ae:1f:80:96:
         48:0c:47:f2:e8:be:cb:0c:bb:fc:67:53:05:98:d0:c0:c7:ba:
         ec:40:ba:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:52 2025 by rpki-client