Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231382e302f32332d3233203d3e20323633383233.roa
File:                     3133382e3231392e3231382e302f32332d3233203d3e20323633383233.roa (raw, json)
Hash identifier:          k8ERWQyc6+NYZkwbd1UZTnKMftLvwtrkeca1Eulc/zo=
Subject key identifier:   B9:45:47:C0:DC:9B:58:74:46:7C:AA:3A:B9:78:6F:2B:BA:39:8C:7A
Certificate issuer:       /CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Certificate serial:       08B3CAB236E40CD566FE361BB37AA274DC3616B5
Authority key identifier: EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231382e302f32332d3233203d3e20323633383233.roa
Signing time:             Tue 04 Feb 2025 18:27:10 +0000
ROA not before:           Tue 04 Feb 2025 18:22:10 +0000
ROA not after:            Tue 03 Feb 2026 18:27:10 +0000
asID:                     263823
IP address blocks:        138.219.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 03:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b3:ca:b2:36:e4:0c:d5:66:fe:36:1b:b3:7a:a2:74:dc:36:16:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
        Validity
            Not Before: Feb  4 18:22:10 2025 GMT
            Not After : Feb  3 18:27:10 2026 GMT
        Subject: CN=B94547C0DC9B5874467CAA3AB9786F2BBA398C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:46:ba:97:31:ec:c0:90:d6:ed:14:8c:5b:
                    96:3e:b4:f4:9c:0d:d8:a1:e4:89:1f:31:65:54:95:
                    a4:a0:3c:83:fb:32:e0:e6:a6:83:16:43:a0:ef:5e:
                    64:5e:6f:75:26:7a:b8:c8:4f:c7:04:d9:60:a0:a5:
                    8a:68:27:76:af:68:48:b1:0f:50:f6:31:ba:40:69:
                    6b:04:48:53:51:a6:e2:29:a8:f8:69:cc:de:cf:be:
                    80:cc:fc:0b:9e:20:b6:4d:c1:2c:f3:bf:14:d7:05:
                    6f:60:08:1a:1a:d8:d9:a7:d9:6a:b5:e7:e0:02:1c:
                    fc:e9:df:bb:fd:fd:bc:66:91:01:d4:f5:1f:e4:98:
                    1c:54:9f:70:ee:72:10:9b:e9:87:84:be:10:0b:92:
                    30:83:fe:49:77:6e:ed:88:a1:02:bd:5d:7a:c1:4f:
                    45:99:dd:db:98:74:fb:ac:fb:b3:f7:66:de:04:d0:
                    a7:c0:c8:8a:07:75:bf:1c:18:7c:0d:c1:42:c9:92:
                    07:29:59:dd:49:55:88:d1:20:25:a1:b0:e9:15:e0:
                    f2:4d:10:ec:d3:7a:80:ec:12:52:09:41:2d:11:11:
                    a3:0c:db:78:a3:3d:2f:46:39:c5:58:37:43:12:8a:
                    ce:a9:67:ae:e7:8b:08:4e:71:52:f7:99:20:2d:e5:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:45:47:C0:DC:9B:58:74:46:7C:AA:3A:B9:78:6F:2B:BA:39:8C:7A
            X509v3 Authority Key Identifier:
                keyid:EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231382e302f32332d3233203d3e20323633383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:42:85:ee:ea:44:55:e0:8c:12:40:0e:68:70:28:b6:d3:42:
         17:04:85:bb:d0:67:ac:69:40:75:66:11:85:97:b2:8d:7b:66:
         18:22:76:58:e6:01:bd:ca:39:d2:ac:b1:ce:17:f3:2c:be:88:
         e9:2f:62:9f:1e:41:49:7e:87:0a:80:32:1e:93:da:61:53:fc:
         7c:aa:e1:3f:be:4c:b1:1c:3f:5f:bf:13:b5:2a:df:90:a3:cf:
         47:dd:f8:79:e8:37:02:5d:17:45:58:bb:6d:3a:db:f6:99:4e:
         75:81:c1:f4:c1:d7:86:5c:ce:ba:97:cd:3a:d7:b9:1d:68:6f:
         aa:97:3c:09:6c:dd:97:13:2e:29:f3:63:c6:b0:9b:8b:eb:24:
         43:9d:12:75:3e:8d:3e:89:fd:16:b9:ee:92:1d:d7:3a:0a:55:
         f4:11:c6:e0:f3:5a:cc:8a:9b:d9:5b:14:c8:0b:c6:b9:50:70:
         8b:7f:ff:90:a3:3f:bf:9f:aa:89:ac:4f:3d:4a:3e:c6:2e:3f:
         6f:0d:a1:c9:d1:a2:31:4a:09:a0:7e:ca:97:36:57:db:0f:4d:
         64:17:d2:13:57:be:c2:67:6d:87:9f:fa:02:64:6f:af:85:87:
         d3:72:02:19:a4:1e:90:9b:1f:0d:1c:7f:2d:b0:91:5b:09:0d:
         74:85:ff:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:50:26 2025 by rpki-client