Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231382e302f32342d3234203d3e20323633383233.roa
File:                     3133382e3231392e3231382e302f32342d3234203d3e20323633383233.roa (raw, json)
Hash identifier:          ihN7DdRI1Rsr4eO8y1870yBLjwf9z2fO4zuvXRSv2FU=
Subject key identifier:   97:BD:11:F3:F9:24:0E:1C:E9:D4:B4:E7:43:66:4E:37:09:AB:01:5C
Certificate issuer:       /CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Certificate serial:       5A8BF7D4B620677545806E46700AA31E0CFFE1F8
Authority key identifier: EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231382e302f32342d3234203d3e20323633383233.roa
Signing time:             Tue 04 Feb 2025 18:27:10 +0000
ROA not before:           Tue 04 Feb 2025 18:22:10 +0000
ROA not after:            Tue 03 Feb 2026 18:27:10 +0000
asID:                     263823
IP address blocks:        138.219.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 03:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8b:f7:d4:b6:20:67:75:45:80:6e:46:70:0a:a3:1e:0c:ff:e1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
        Validity
            Not Before: Feb  4 18:22:10 2025 GMT
            Not After : Feb  3 18:27:10 2026 GMT
        Subject: CN=97BD11F3F9240E1CE9D4B4E743664E3709AB015C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:82:0b:8d:68:a3:57:e4:d9:5a:d9:ee:38:
                    11:97:3b:01:59:11:f9:7c:66:35:4d:07:2a:74:56:
                    f8:ce:4b:db:6f:03:53:8e:04:2e:5f:63:b3:69:98:
                    2e:29:a3:ef:a2:ff:c1:34:73:68:72:af:76:8f:87:
                    a0:f0:25:2c:2b:22:7b:ea:11:f6:ae:12:93:2d:c3:
                    27:a9:88:7f:66:0c:80:e2:fb:a4:d0:1d:95:4c:64:
                    39:4e:1f:81:be:60:8b:39:f1:f9:54:41:dc:79:05:
                    1d:b8:90:1c:ee:5f:0f:7c:b7:d0:cc:5c:ca:4b:a8:
                    4d:42:cb:03:5a:53:cd:14:72:9d:09:c5:84:31:b8:
                    33:f7:a2:d5:42:13:c1:cc:f7:80:64:fa:6b:94:8b:
                    20:6b:0b:d2:31:03:2d:b6:1d:a6:7e:80:7f:bd:6b:
                    ef:67:97:08:47:05:f1:75:d0:68:80:60:c6:9c:27:
                    ac:33:d9:dc:6e:60:01:47:13:d3:0a:0d:2e:bc:85:
                    d3:25:97:54:b2:2c:86:d1:76:ed:f4:b2:20:52:99:
                    ca:44:49:51:b3:6a:b6:60:9d:28:7e:70:f0:99:3f:
                    7c:d7:c2:c6:0f:c0:99:20:45:57:2d:92:41:e1:80:
                    2e:6a:36:a5:8d:fb:04:10:b0:5a:3e:65:42:61:15:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BD:11:F3:F9:24:0E:1C:E9:D4:B4:E7:43:66:4E:37:09:AB:01:5C
            X509v3 Authority Key Identifier:
                keyid:EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231382e302f32342d3234203d3e20323633383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:8a:5e:87:0e:34:12:2d:5f:8a:ae:e6:a2:97:1a:00:62:57:
         bc:3e:06:4d:95:46:c0:ba:b9:3a:8f:f3:b5:80:eb:75:e5:74:
         bb:b2:8a:9d:d4:d7:e8:59:13:6d:20:a6:d0:a4:97:ca:3b:57:
         b8:4a:24:6d:03:70:b4:8b:da:0a:98:ac:7b:97:d1:5c:03:ec:
         5a:e1:65:cc:a8:90:48:6a:03:f7:af:80:53:10:6e:29:aa:22:
         84:d2:6e:8b:25:47:14:d0:b0:8c:77:98:b9:db:27:d8:d9:40:
         e2:a2:90:84:cf:1d:2d:f5:d9:d6:6b:99:30:e7:de:f3:e6:44:
         a8:cf:60:69:97:6e:08:1f:bc:9b:7a:bf:99:cc:ae:38:36:3e:
         83:b2:53:8f:ce:30:1f:5a:36:3a:2f:87:7f:e8:ab:01:a0:ec:
         3f:85:2c:cc:b7:2f:af:5c:9d:74:89:6d:e9:b5:bf:d6:a7:25:
         29:3d:28:be:7c:b7:ab:55:b1:62:08:4f:93:05:9d:81:4c:9c:
         a1:17:df:b0:b1:1a:f6:6d:be:b0:ed:f0:b2:7d:39:b2:c3:c5:
         34:62:cc:b9:99:2f:42:cb:8d:72:67:fd:25:a0:95:fa:2c:0c:
         62:74:85:80:e7:18:30:ab:ee:c7:c7:4e:7e:f1:a1:4f:5a:1a:
         f5:9d:bd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:57:09 2025 by rpki-client