Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3133382e302e3131362e302f32322d3234203d3e20323632313836.roa
File:                     3133382e302e3131362e302f32322d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          SDK4Mgby11OjC1x6d9g3ohazwYGCEArofjW1bx+kNt4=
Subject key identifier:   AD:91:A9:62:94:F3:3D:30:B8:6D:B6:03:E3:7E:54:D2:DC:51:82:4F
Certificate issuer:       /CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
Certificate serial:       2CA8B2FB81C161A6B265E6A7BDB56A3D44E41729
Authority key identifier: 81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3133382e302e3131362e302f32322d3234203d3e20323632313836.roa
Signing time:             Tue 04 Feb 2025 20:00:20 +0000
ROA not before:           Tue 04 Feb 2025 19:55:20 +0000
ROA not after:            Tue 03 Feb 2026 20:00:20 +0000
asID:                     262186
IP address blocks:        138.0.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a8:b2:fb:81:c1:61:a6:b2:65:e6:a7:bd:b5:6a:3d:44:e4:17:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
        Validity
            Not Before: Feb  4 19:55:20 2025 GMT
            Not After : Feb  3 20:00:20 2026 GMT
        Subject: CN=AD91A96294F33D30B86DB603E37E54D2DC51824F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:01:c7:5a:4a:26:29:79:04:db:3f:7e:45:36:
                    2f:1f:03:7b:28:53:f8:be:ce:2c:97:f7:7a:10:24:
                    2b:90:8c:60:a0:1b:70:13:93:56:9a:26:2f:6c:bb:
                    de:35:8e:cf:f4:b7:83:b0:2c:c4:1d:64:57:c8:cb:
                    1b:5f:84:a7:ac:ba:c4:c3:8c:42:3c:24:e7:1d:99:
                    d5:e5:ed:84:4d:9c:22:21:de:34:70:a6:a3:d4:e6:
                    67:ec:93:9e:be:dd:e4:47:0a:18:cf:82:c1:4d:dc:
                    16:17:4f:c8:d1:a4:69:a6:39:e6:30:e2:31:b8:d2:
                    29:a1:24:e1:0f:1e:7c:bc:00:a1:eb:77:d4:c1:c6:
                    1c:10:f5:4b:65:3a:15:9c:3e:8d:93:1a:be:21:32:
                    52:fb:70:ec:d4:4b:fa:c1:bc:0e:42:f6:10:68:24:
                    c1:1d:b3:dc:9e:2d:d4:9f:ca:73:07:d8:0f:5a:d9:
                    63:2e:49:d1:85:16:1a:d2:b0:b1:b2:f3:0f:de:b7:
                    ec:2b:a6:02:1e:f6:b6:a4:2e:ca:3a:e7:11:7d:96:
                    f3:3b:37:1d:6c:f9:2b:eb:69:cf:36:60:54:17:62:
                    c2:fc:ec:5e:50:3f:58:8a:1d:19:66:c5:0b:f8:cc:
                    34:74:fd:61:06:e6:97:f4:2f:17:71:01:12:0f:6b:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:91:A9:62:94:F3:3D:30:B8:6D:B6:03:E3:7E:54:D2:DC:51:82:4F
            X509v3 Authority Key Identifier:
                keyid:81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3133382e302e3131362e302f32322d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:dc:52:ab:30:0d:7a:07:81:04:92:37:af:3e:53:3a:07:94:
         6c:b5:d9:74:9f:86:cd:15:ed:3d:c0:67:59:7e:e7:d6:6c:d9:
         c4:f2:b2:e3:65:7e:85:d7:a1:ad:38:0d:dc:53:f2:d9:a0:3f:
         45:4d:19:66:33:9a:e9:1d:11:8d:fd:d8:a5:fd:a8:98:ee:12:
         11:8a:a0:f0:61:07:dd:6e:73:b3:2c:47:52:5b:bf:0a:34:43:
         55:ad:bf:1d:48:d8:76:e6:1a:d1:e8:0d:a6:49:9b:53:03:78:
         e9:87:a7:f8:a4:82:16:30:1b:ff:d4:56:8b:5f:86:03:47:96:
         78:3d:8e:a9:e8:8a:44:05:3c:cc:ea:05:51:c8:af:0e:f2:93:
         ec:2f:5e:9e:33:2c:1e:9f:ed:52:ae:98:a6:26:ae:61:fc:89:
         f0:6a:38:8a:c7:4d:63:4e:0b:53:62:69:66:c5:17:54:8f:ea:
         71:a0:68:8a:84:d5:8a:b1:7e:18:93:5e:15:11:60:26:1a:60:
         0c:f1:f4:da:f4:ea:3c:1c:d6:e4:e1:14:7b:d3:29:55:3f:21:
         80:9f:8d:4e:04:bf:cb:a3:b4:7b:ba:c7:e9:4a:f9:26:89:3c:
         ce:e5:19:95:32:ab:8a:d9:0e:55:c9:6c:6f:3d:7b:3e:d9:ed:
         a7:48:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:09:33 2025 by rpki-client