Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3133382e3235352e36302e302f32322d3234203d3e203238333934.roa
File:                     3133382e3235352e36302e302f32322d3234203d3e203238333934.roa (raw, json)
Hash identifier:          N66mU5uJs32JivTi2W6CcithMD57RUBysR4Giw1J7JI=
Subject key identifier:   91:C6:CC:9E:A7:9A:D2:5E:F6:57:51:66:D1:7B:72:DA:7D:45:9E:BA
Certificate issuer:       /CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
Certificate serial:       47487E0B91FD7144437A1E463462F246692EB9EF
Authority key identifier: FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3133382e3235352e36302e302f32322d3234203d3e203238333934.roa
Signing time:             Mon 21 Jul 2025 19:25:59 +0000
ROA not before:           Mon 21 Jul 2025 19:20:59 +0000
ROA not after:            Mon 20 Jul 2026 19:25:59 +0000
asID:                     28394
IP address blocks:        138.255.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 05 Aug 2025 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:48:7e:0b:91:fd:71:44:43:7a:1e:46:34:62:f2:46:69:2e:b9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF591A13316346A2BCEF07F6DF8D44DD0250F841
        Validity
            Not Before: Jul 21 19:20:59 2025 GMT
            Not After : Jul 20 19:25:59 2026 GMT
        Subject: CN=91C6CC9EA79AD25EF6575166D17B72DA7D459EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:d2:c2:75:18:52:e1:6d:d1:86:f0:5f:06:89:
                    9c:db:8b:f6:0c:dd:c9:0e:5d:2a:c8:97:54:53:61:
                    d5:85:ed:76:a1:6d:b4:89:46:2e:3c:bf:d7:ac:31:
                    a9:22:f7:91:e1:54:04:5b:a4:e9:81:fb:be:ee:91:
                    9c:6f:ec:64:7c:2f:12:52:5b:33:dc:be:c2:14:c8:
                    c0:ad:72:49:56:56:c6:91:41:77:71:d0:a2:ad:fa:
                    e3:d0:e6:f9:08:aa:dd:d0:6a:d0:09:25:58:73:04:
                    1e:1a:44:26:b4:b6:86:a7:31:29:70:fa:0e:6b:bb:
                    fc:8e:79:0e:12:02:5c:f5:9e:de:2e:3b:16:68:ff:
                    05:4a:2e:d5:7d:64:f9:c6:62:71:5c:97:d4:38:3b:
                    e1:f5:48:e5:f2:19:9b:e4:4d:37:f2:5e:37:08:da:
                    62:ff:cd:e9:cb:dc:de:cd:f0:02:cc:d1:f8:81:02:
                    c4:db:11:d1:35:13:ff:aa:46:16:8c:34:14:2e:aa:
                    f8:66:06:c4:9e:54:4f:a1:09:c7:7c:47:e9:d2:34:
                    9c:94:46:7a:86:c9:6d:5f:89:d2:4d:8e:73:bf:f7:
                    e3:92:af:9b:e9:e7:99:da:11:a0:b5:de:71:2e:d5:
                    20:2a:40:22:a7:62:7d:3e:cd:18:5f:2a:4b:f7:27:
                    8b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C6:CC:9E:A7:9A:D2:5E:F6:57:51:66:D1:7B:72:DA:7D:45:9E:BA
            X509v3 Authority Key Identifier:
                keyid:FF:59:1A:13:31:63:46:A2:BC:EF:07:F6:DF:8D:44:DD:02:50:F8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF591A13316346A2BCEF07F6DF8D44DD0250F841.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C952DC0ACFFF908C6FA14C8A7AAE8B6331B30DAE0410F148E94CF1B47A832D9/0/3133382e3235352e36302e302f32322d3234203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:0d:9c:9a:68:f3:23:d5:5b:06:6a:a5:cb:5a:b6:4b:9d:e9:
         bf:1b:30:eb:79:34:65:f0:81:4b:b3:61:ef:d8:bb:43:07:a3:
         07:90:f7:8a:bb:39:7d:b6:0e:16:03:fe:20:3d:d0:46:97:73:
         6b:af:56:10:1a:3a:0a:bc:74:d2:9b:c9:6a:08:87:eb:21:d3:
         90:16:e2:ec:66:d5:ae:90:ab:64:92:27:12:a2:b1:ad:74:ab:
         03:e9:a3:5b:91:ac:7a:74:39:f0:1d:66:e9:6d:ba:1a:79:11:
         ad:82:7e:ae:8e:b2:ea:58:16:37:f4:b2:b4:b0:60:36:f8:84:
         12:e1:d3:13:33:dc:b8:63:25:78:3c:ef:00:f4:fd:e2:2d:ec:
         e3:7b:0a:41:6c:07:d5:71:88:ab:3b:44:66:c5:f3:03:e1:26:
         ec:b8:eb:e4:22:ec:0a:e9:de:c3:03:9c:b9:c4:e4:85:68:fc:
         9e:e8:bc:6f:8e:a2:64:df:8a:3b:fa:12:cf:8d:bc:13:76:88:
         bf:ad:ec:ba:61:9c:65:85:6d:4b:6e:47:6e:8a:1e:e1:c3:a3:
         53:4f:a6:b1:43:ff:ca:ae:6c:52:5f:96:fc:5b:df:b6:6a:64:
         90:bd:12:de:0c:bd:47:0b:fb:4d:c8:a2:b2:f5:59:72:5b:25:
         a4:de:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:24:13 2025 by rpki-client