Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/3133382e3231392e3232382e302f32322d3234203d3e20323733383836.roa
File:                     3133382e3231392e3232382e302f32322d3234203d3e20323733383836.roa (raw, json)
Hash identifier:          UyMi2DbdyxV34ZxauD5XgE4BlmFcI1XEfXqimJP+MXc=
Subject key identifier:   8F:7D:73:D4:36:10:05:53:9C:92:47:82:B7:47:B7:B8:46:1B:67:4C
Certificate issuer:       /CN=4E3267FAB0006558F96FC153AC65738471EF0825
Certificate serial:       6F349CB29DAF7C5E982B3A881E7D66B49BD08BC8
Authority key identifier: 4E:32:67:FA:B0:00:65:58:F9:6F:C1:53:AC:65:73:84:71:EF:08:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E3267FAB0006558F96FC153AC65738471EF0825.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/3133382e3231392e3232382e302f32322d3234203d3e20323733383836.roa
Signing time:             Mon 25 Aug 2025 22:50:00 +0000
ROA not before:           Mon 25 Aug 2025 22:45:00 +0000
ROA not after:            Mon 24 Aug 2026 22:50:00 +0000
asID:                     273886
IP address blocks:        138.219.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/4E3267FAB0006558F96FC153AC65738471EF0825.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/4E3267FAB0006558F96FC153AC65738471EF0825.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E3267FAB0006558F96FC153AC65738471EF0825.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Sep 2025 20:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:34:9c:b2:9d:af:7c:5e:98:2b:3a:88:1e:7d:66:b4:9b:d0:8b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E3267FAB0006558F96FC153AC65738471EF0825
        Validity
            Not Before: Aug 25 22:45:00 2025 GMT
            Not After : Aug 24 22:50:00 2026 GMT
        Subject: CN=8F7D73D4361005539C924782B747B7B8461B674C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:c0:94:cc:e4:78:ce:78:ad:b8:f7:33:c4:
                    99:db:04:77:f5:80:a1:ae:68:e4:55:fe:33:c9:36:
                    b2:bb:af:db:98:e3:0f:94:4b:ce:64:5f:43:4b:cb:
                    58:9b:17:77:7a:09:45:42:80:ae:d7:d7:06:85:2a:
                    59:41:c6:96:5e:84:7b:f3:bc:98:4e:b8:60:00:87:
                    30:0c:27:3c:8f:3e:0a:74:16:58:a1:9c:3e:62:71:
                    57:dc:9f:d0:f0:42:7c:bd:c2:d8:87:51:05:3d:ed:
                    f8:8f:e0:75:8e:e9:44:8d:1d:81:a1:a3:6f:15:e8:
                    bf:20:27:f8:68:5f:bc:31:d1:75:d4:be:af:e3:35:
                    dc:83:85:87:9a:21:4f:b2:1d:e1:cd:42:56:98:c3:
                    86:fa:1f:39:14:2f:d2:a3:17:67:50:23:70:f0:4b:
                    e3:a7:77:91:f4:0c:ac:f4:6e:89:55:a3:7d:8e:06:
                    b5:2c:3c:85:cc:ab:87:9c:c1:9e:ca:f5:12:a5:09:
                    21:e6:1f:50:0f:91:c8:c8:71:dd:77:ea:6e:52:ea:
                    60:18:4f:31:58:b3:c1:68:26:51:c8:93:15:a7:98:
                    c7:8f:07:a5:4e:51:87:a3:ad:48:40:98:1b:23:21:
                    8b:71:8a:51:e9:de:10:f9:d6:96:72:8f:a9:5a:b6:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7D:73:D4:36:10:05:53:9C:92:47:82:B7:47:B7:B8:46:1B:67:4C
            X509v3 Authority Key Identifier:
                keyid:4E:32:67:FA:B0:00:65:58:F9:6F:C1:53:AC:65:73:84:71:EF:08:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/4E3267FAB0006558F96FC153AC65738471EF0825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E3267FAB0006558F96FC153AC65738471EF0825.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51169484359850E866522C27E98830832EC800D291C612201434BDD0506A73E8/0/3133382e3231392e3232382e302f32322d3234203d3e20323733383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:be:26:8f:90:d1:09:5b:41:46:ba:f2:9b:6a:14:a5:2c:31:
         30:b4:e6:8a:01:c5:fb:88:e3:19:67:e7:34:d9:9f:a9:7e:9f:
         cf:ed:a4:cf:49:21:83:12:b2:16:91:3b:b9:ab:9f:d5:79:2a:
         61:cf:7c:a6:02:6b:ae:7c:be:5a:46:87:30:ae:cf:8d:0e:46:
         a1:a3:04:f5:c0:5c:3e:ed:02:a1:77:fc:a0:37:9e:f9:ad:51:
         37:06:11:68:6e:b2:79:86:2b:8a:9a:6b:69:16:1b:70:08:41:
         88:46:bb:80:6c:c7:f5:3c:d9:78:6e:a5:04:41:b8:3b:7c:1f:
         04:f7:3f:eb:39:6b:6d:bc:b8:ea:17:2a:fe:c2:64:8b:b4:6d:
         98:dc:3c:f6:5b:14:c5:7c:00:89:c3:48:81:99:a5:e1:a1:ac:
         e0:c3:24:70:33:0e:12:58:34:d7:20:ec:c8:c0:04:c2:fb:06:
         ed:47:11:c2:e3:94:57:58:a7:f2:1f:ff:95:ee:62:92:d7:66:
         3f:c7:b7:89:3c:9d:ac:f2:df:1d:6b:eb:28:cf:40:46:79:c5:
         41:0d:02:b2:46:3d:52:72:d0:1d:60:68:38:28:03:62:d8:c1:
         67:1c:b4:30:cb:d3:a2:5c:bb:c3:40:9e:fd:a2:1c:cc:80:be:
         70:99:e1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:19:23 2025 by rpki-client