Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3133382e33362e37362e302f32322d3234203d3e20323632313539.roa
File:                     3133382e33362e37362e302f32322d3234203d3e20323632313539.roa (raw, json)
Hash identifier:          Mc0N0nXS/cttbZ3d09uZWADlRNsvB/oPamTa2I0AupI=
Subject key identifier:   9D:88:59:9B:73:42:23:EC:62:4B:91:65:BC:7F:B6:EB:E0:15:B2:68
Certificate issuer:       /CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Certificate serial:       09B2ED50682C4D64BDE8E860263E805AF6E5BB1F
Authority key identifier: 94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3133382e33362e37362e302f32322d3234203d3e20323632313539.roa
Signing time:             Tue 04 Feb 2025 17:58:51 +0000
ROA not before:           Tue 04 Feb 2025 17:53:51 +0000
ROA not after:            Tue 03 Feb 2026 17:58:51 +0000
asID:                     262159
IP address blocks:        138.36.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b2:ed:50:68:2c:4d:64:bd:e8:e8:60:26:3e:80:5a:f6:e5:bb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
        Validity
            Not Before: Feb  4 17:53:51 2025 GMT
            Not After : Feb  3 17:58:51 2026 GMT
        Subject: CN=9D88599B734223EC624B9165BC7FB6EBE015B268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:64:c4:e3:c6:45:ac:5c:a9:4e:44:e2:3e:
                    d4:26:ca:57:cd:f4:e4:dd:14:d6:e7:bd:9d:5c:b1:
                    9c:4a:64:98:73:31:85:ee:2e:db:4c:f0:a3:68:08:
                    09:c4:a5:ef:68:3f:a3:fe:ef:a6:e2:96:c5:11:56:
                    ac:b9:96:b5:7f:8f:60:52:10:e3:57:77:20:ec:03:
                    5c:27:94:da:ea:a4:ac:a5:f8:01:fb:ae:46:83:1e:
                    70:65:4e:82:20:55:73:d2:bf:d0:5a:a7:72:9b:80:
                    5f:b8:b1:5e:d8:31:47:74:5f:a4:02:b0:7d:04:78:
                    59:3f:5f:3c:3b:d8:1a:c6:85:89:6b:76:bc:18:ad:
                    cc:dd:5b:e3:bb:8d:be:ab:60:68:f0:09:84:ca:bc:
                    ed:2c:71:f7:6e:af:34:df:99:54:29:f5:93:56:f1:
                    fa:c9:7a:58:9d:1a:e1:d5:bb:df:ae:b3:14:c5:bd:
                    f5:f4:43:1e:a5:e1:d8:87:e9:d3:d0:d7:bb:0f:de:
                    cd:35:53:87:fa:54:6d:8f:e6:b6:45:8f:f3:bc:61:
                    b8:2d:8a:7f:8d:1f:66:64:a6:27:b3:36:c8:1b:f0:
                    a0:7c:e6:d8:c3:00:64:5b:b2:bf:da:a9:e6:5e:76:
                    d0:34:e8:e9:53:29:fd:41:29:02:be:21:9b:19:59:
                    89:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:88:59:9B:73:42:23:EC:62:4B:91:65:BC:7F:B6:EB:E0:15:B2:68
            X509v3 Authority Key Identifier:
                keyid:94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3133382e33362e37362e302f32322d3234203d3e20323632313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:ee:ff:70:c5:28:96:ef:e3:56:b8:4f:a0:ee:8c:a5:d0:01:
         66:a6:c2:51:9a:e1:95:90:b5:3a:74:c0:99:12:20:36:30:af:
         57:b3:bc:f9:3c:08:99:2a:29:b9:f5:0f:63:9e:b8:6b:ca:9d:
         7b:9d:80:cb:79:ba:e0:44:48:0e:b8:b2:87:38:1c:b2:11:0c:
         95:02:66:f6:3b:d7:91:b1:76:32:fb:c4:f3:44:46:b1:2a:0b:
         e9:b0:e6:0e:ae:a0:8b:fa:50:9f:f2:7a:e1:7b:4a:98:ab:e0:
         58:d4:41:eb:fa:2c:68:09:86:9a:6f:d2:00:52:25:dd:69:01:
         3c:bd:55:25:2c:bb:fa:fb:d9:70:4e:94:1d:18:22:53:51:41:
         15:c2:0f:97:95:90:ed:ee:ff:b3:e1:fe:11:38:f6:1a:58:ef:
         61:98:55:5c:86:8d:f9:6a:62:2b:8d:ae:d1:ea:3f:6d:0f:be:
         58:37:ff:47:58:ea:5f:2c:f1:86:a3:13:38:7c:9b:de:5d:31:
         10:b0:9b:e9:89:b1:e9:db:44:a5:f1:8a:7e:3f:91:e9:9b:cb:
         fb:c2:61:68:52:af:6a:e9:ca:4a:7e:07:87:19:98:87:97:a6:
         5e:2b:b2:9b:e5:80:4f:ba:d9:57:81:52:7a:1a:24:ee:4b:20:
         4e:b8:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:48 2025 by rpki-client