Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231362e302f32332d3233203d3e20323633383233.roa
File:                     3133382e3231392e3231362e302f32332d3233203d3e20323633383233.roa (raw, json)
Hash identifier:          YqCtESrj6cS27/vXtyDExojw9eYmH502b1OyJhPBZ90=
Subject key identifier:   0E:E4:0C:53:3E:E4:E0:DC:1B:F8:6A:1E:3E:3B:66:F5:70:19:0E:6B
Certificate issuer:       /CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Certificate serial:       73E1343E41A920B799B6362F336C34AEA316B04B
Authority key identifier: EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231362e302f32332d3233203d3e20323633383233.roa
Signing time:             Tue 04 Feb 2025 18:27:09 +0000
ROA not before:           Tue 04 Feb 2025 18:22:09 +0000
ROA not after:            Tue 03 Feb 2026 18:27:09 +0000
asID:                     263823
IP address blocks:        138.219.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 03:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e1:34:3e:41:a9:20:b7:99:b6:36:2f:33:6c:34:ae:a3:16:b0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
        Validity
            Not Before: Feb  4 18:22:09 2025 GMT
            Not After : Feb  3 18:27:09 2026 GMT
        Subject: CN=0EE40C533EE4E0DC1BF86A1E3E3B66F570190E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:dd:eb:93:c5:32:f7:df:d4:6d:88:b3:0e:
                    8f:29:8f:d3:af:68:8a:da:17:9e:d0:23:e4:91:a9:
                    46:94:ab:d0:b4:6a:12:3f:70:2e:4d:11:e1:84:45:
                    df:ad:9d:9c:92:f5:04:a0:58:50:9f:ad:21:bb:9e:
                    d2:c3:f6:4a:15:9a:e8:d6:f7:2f:95:d4:54:f2:c1:
                    3c:12:c6:05:83:80:34:2e:c6:5b:3d:4e:20:64:5e:
                    6a:3f:47:19:b7:dc:e0:f1:da:5c:05:af:52:71:49:
                    7e:5a:04:e8:e7:a8:f5:d1:2b:9b:5c:8b:08:69:d3:
                    ff:5f:47:72:91:60:51:a4:67:be:d0:2b:0b:ce:56:
                    e4:b4:a0:f8:18:9a:ab:30:13:30:31:e3:fa:63:fb:
                    be:97:ac:23:fd:61:30:be:fe:5e:72:4e:12:b5:18:
                    9a:ac:49:ca:04:cd:1e:80:41:19:bf:f1:b5:56:fa:
                    57:e4:5d:bb:74:fb:e2:3a:aa:d1:23:60:e1:bd:bf:
                    01:e2:5f:bd:24:eb:cd:e3:ae:4d:fb:b7:1c:5f:fc:
                    a0:b9:71:82:a9:4f:54:6a:b4:60:54:37:1d:30:c6:
                    71:54:8e:31:ef:dc:72:a6:e3:b5:24:a8:ec:be:94:
                    4a:42:cc:18:75:2f:aa:e0:ae:b5:61:5b:1a:b7:29:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E4:0C:53:3E:E4:E0:DC:1B:F8:6A:1E:3E:3B:66:F5:70:19:0E:6B
            X509v3 Authority Key Identifier:
                keyid:EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231362e302f32332d3233203d3e20323633383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:5d:c3:b9:a6:c6:88:1b:5d:c8:ca:3a:d8:b0:9a:9e:ea:60:
         81:cc:e7:77:c7:31:bb:7e:96:d8:fc:80:a9:ca:e5:28:47:9d:
         ae:3e:76:20:38:c9:6b:cb:fc:40:31:cc:5a:e6:2b:ea:94:ba:
         ef:fa:81:ba:85:1c:b6:79:9e:69:82:56:24:8e:71:36:39:c6:
         81:9b:2b:f7:8c:62:e8:6c:b7:89:43:5f:d5:3c:8f:2a:67:a3:
         73:c3:d6:d9:f2:b0:f0:61:17:df:a2:36:16:f6:86:ed:40:b4:
         62:02:b7:2d:fa:bc:4c:14:bc:32:6e:61:65:d9:c3:97:67:eb:
         df:48:43:fb:a5:53:df:db:db:07:53:ca:b4:71:b1:65:15:5c:
         9d:9c:bf:83:5f:9e:4a:d6:a6:16:47:68:f4:eb:7e:cb:6d:c7:
         4e:c1:a6:d1:a2:95:c4:57:5d:84:ed:cb:82:bb:0d:47:bc:4a:
         00:46:0b:2e:81:45:d8:62:51:83:80:2c:0f:b8:3d:06:40:c1:
         02:fd:6a:f1:7a:67:90:bb:c8:26:41:f3:3e:d9:6f:57:18:0c:
         eb:65:d1:d1:cc:de:87:04:4e:a4:94:65:83:a0:cd:7a:f2:90:
         4e:bb:38:c2:4b:d1:0d:76:ee:62:2b:d3:4f:9a:c3:e1:92:db:
         d6:18:06:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:50:25 2025 by rpki-client