Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231392e302f32342d3234203d3e20323633383233.roa
File:                     3133382e3231392e3231392e302f32342d3234203d3e20323633383233.roa (raw, json)
Hash identifier:          8qqEnTzRGmAzDhHWiZ90LpuZovaNb+384wfbFEEK4p0=
Subject key identifier:   47:8A:DB:E6:6B:6C:66:8B:5A:C9:BF:8E:03:21:36:21:51:9A:92:21
Certificate issuer:       /CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
Certificate serial:       6E9C5DCABA5547B106FAEBBFE8F6E3B8269D2342
Authority key identifier: EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231392e302f32342d3234203d3e20323633383233.roa
Signing time:             Tue 04 Feb 2025 18:27:10 +0000
ROA not before:           Tue 04 Feb 2025 18:22:10 +0000
ROA not after:            Tue 03 Feb 2026 18:27:10 +0000
asID:                     263823
IP address blocks:        138.219.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 03:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9c:5d:ca:ba:55:47:b1:06:fa:eb:bf:e8:f6:e3:b8:26:9d:23:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9BF39239F9E02820862BA3BD32A4211F3ED4DC
        Validity
            Not Before: Feb  4 18:22:10 2025 GMT
            Not After : Feb  3 18:27:10 2026 GMT
        Subject: CN=478ADBE66B6C668B5AC9BF8E03213621519A9221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:e5:2b:82:ce:47:0f:be:98:a5:8f:8e:0c:
                    8c:22:80:90:21:7a:d4:71:94:85:f2:67:57:7b:1b:
                    74:e0:1a:19:ee:33:4d:a2:2f:92:3d:61:e2:b5:59:
                    d2:bb:3b:ce:f7:38:86:4c:64:cd:d8:00:dc:7c:87:
                    dd:b7:62:8c:c2:75:50:58:89:7b:37:7b:f1:72:7d:
                    68:a0:6f:74:fe:35:d8:d4:89:56:eb:0d:5a:20:2c:
                    f7:05:79:67:e7:a4:64:8f:81:d6:66:04:f4:4f:6b:
                    d3:62:68:ea:ef:3f:e8:22:4c:fa:45:de:23:25:78:
                    b6:24:11:e9:f2:6e:33:20:5e:c7:6e:f3:2f:10:b3:
                    46:fc:65:5e:33:0a:6d:88:84:8a:88:a7:8a:28:43:
                    8a:a4:40:47:97:86:1e:d6:59:37:64:d1:30:9e:c7:
                    1c:f1:3d:08:ad:19:10:94:2b:dd:b2:dd:4b:48:ff:
                    de:09:ef:a1:83:4c:63:28:1c:fe:2a:49:ab:e8:35:
                    d8:3c:a7:15:f0:66:bf:03:4a:71:c1:92:fa:61:c7:
                    ba:95:0e:86:c0:64:35:af:0c:05:59:71:42:4c:27:
                    c4:c9:f6:77:2d:23:d9:14:6b:10:70:b6:00:86:85:
                    a0:e1:2d:2c:7d:f5:14:95:45:db:ff:4a:44:fd:9f:
                    a5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8A:DB:E6:6B:6C:66:8B:5A:C9:BF:8E:03:21:36:21:51:9A:92:21
            X509v3 Authority Key Identifier:
                keyid:EC:9B:F3:92:39:F9:E0:28:20:86:2B:A3:BD:32:A4:21:1F:3E:D4:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC9BF39239F9E02820862BA3BD32A4211F3ED4DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDF8316B3418111C89A6F65F1B20DE22ECE4A22377CF500922526552AB52F74/0/3133382e3231392e3231392e302f32342d3234203d3e20323633383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:94:ab:d5:ee:25:3c:f5:93:c4:c6:e9:37:60:93:9d:1d:
         65:52:33:d3:37:3a:a6:7e:92:5c:89:01:21:59:07:fd:e7:61:
         7e:1f:40:3d:2b:7c:f1:a6:36:e5:c8:f0:fc:32:61:7f:9c:41:
         0b:79:f9:a3:5e:9c:b9:76:92:cb:e3:b5:10:c3:fd:f8:b0:b3:
         3f:d0:70:c7:e1:8a:ee:b3:58:cc:1c:af:32:1b:6f:32:82:54:
         9e:19:bb:11:8c:4b:d6:5f:69:7e:ed:96:c9:f3:f8:79:bb:5e:
         83:a1:e8:ee:32:1e:74:b7:27:35:ab:c5:29:f0:f0:9c:29:83:
         a4:4d:d2:69:8b:ab:a8:57:4b:46:d9:65:bc:d9:67:5a:3c:43:
         78:a1:e7:76:2e:6e:b5:7f:91:b0:42:9a:af:53:ea:b3:54:fd:
         cf:9b:73:f9:51:2e:b9:91:67:28:34:4f:3e:a5:4a:e7:53:ab:
         35:55:0c:db:db:92:91:e9:ef:fb:97:a8:6c:5d:03:3a:a1:b7:
         5a:44:d4:10:cc:57:34:08:cd:c8:05:ea:93:6b:10:69:8f:a9:
         83:fa:c1:f3:83:b5:7d:eb:d7:40:d4:78:95:76:68:6b:de:a7:
         9f:26:d5:d7:c5:05:8e:b8:ce:ca:3b:86:88:ff:09:f7:b2:74:
         b2:7a:7d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:57:08 2025 by rpki-client