Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3133382e3138352e38302e302f32322d3234203d3e203532333634.roa
File:                     3133382e3138352e38302e302f32322d3234203d3e203532333634.roa (raw, json)
Hash identifier:          WBoCS54iCE2un5sZbFC+sJZh+ruZhvne2dk01S6aAgE=
Subject key identifier:   16:3C:37:51:7F:1A:4E:BA:71:BB:E0:87:01:E7:DB:98:C4:4F:6B:CC
Certificate issuer:       /CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
Certificate serial:       5F675255781FF6EB7F8B427EA3E5287EF6EF1EFD
Authority key identifier: EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3133382e3138352e38302e302f32322d3234203d3e203532333634.roa
Signing time:             Tue 04 Feb 2025 18:54:53 +0000
ROA not before:           Tue 04 Feb 2025 18:49:53 +0000
ROA not after:            Tue 03 Feb 2026 18:54:53 +0000
asID:                     52364
IP address blocks:        138.185.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:67:52:55:78:1f:f6:eb:7f:8b:42:7e:a3:e5:28:7e:f6:ef:1e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0
        Validity
            Not Before: Feb  4 18:49:53 2025 GMT
            Not After : Feb  3 18:54:53 2026 GMT
        Subject: CN=163C37517F1A4EBA71BBE08701E7DB98C44F6BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:8c:31:5e:75:c5:94:d7:5c:09:12:8e:01:
                    9f:5f:79:18:51:b7:98:90:9f:56:12:a8:0a:01:4b:
                    1c:b3:09:f3:0a:4b:f4:16:32:65:04:1d:bd:85:93:
                    47:40:a5:18:49:47:42:47:19:18:ea:68:35:ab:33:
                    6d:56:91:06:b0:e9:34:a1:c3:4a:08:50:00:4b:c6:
                    32:a2:73:91:99:1c:14:df:dd:ea:57:2c:9e:77:eb:
                    3e:b3:f9:05:85:b2:b2:f4:5c:30:45:dd:7a:3a:04:
                    b1:2e:ae:df:2c:98:df:cd:f3:6c:b9:d3:09:25:45:
                    65:74:4e:89:ce:39:d5:88:9c:bf:16:b0:db:e6:bb:
                    5b:64:b8:33:ec:04:84:5a:ca:5a:18:54:7b:53:11:
                    ce:cc:2b:65:d2:cc:94:ee:8d:45:69:ec:d2:48:08:
                    30:31:e8:f2:d9:30:07:ef:46:f6:8a:0b:b5:a0:d7:
                    4e:b3:75:64:d3:94:cd:d5:77:32:38:cf:ca:77:3b:
                    12:f1:56:ad:8f:a9:7d:82:e1:0a:4e:8c:e0:56:ac:
                    00:51:95:38:b5:34:e8:19:a9:e9:f9:72:10:49:78:
                    ba:f4:f8:0a:6e:46:ac:1b:1b:1e:8b:a2:56:56:a4:
                    db:a3:24:a4:de:74:51:a3:76:64:76:bf:75:52:54:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3C:37:51:7F:1A:4E:BA:71:BB:E0:87:01:E7:DB:98:C4:4F:6B:CC
            X509v3 Authority Key Identifier:
                keyid:EF:D4:49:AF:84:74:AF:56:3F:E3:79:AD:BD:4F:72:EA:F2:CA:1D:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFD449AF8474AF563FE379ADBD4F72EAF2CA1DB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5633119901C08658AD44C0C7C89A1991BB52796B3B33D679E34398EBB9B50B72/0/3133382e3138352e38302e302f32322d3234203d3e203532333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:3b:f9:54:2e:c3:48:17:91:6c:23:61:66:48:70:61:d0:ed:
         62:41:ac:c6:03:fa:00:13:21:8a:62:ec:7a:72:0c:bc:2d:62:
         ba:cd:a4:45:0b:1c:1e:52:f2:41:82:0f:ce:a5:aa:91:b1:cb:
         73:85:29:7a:b4:dd:39:5d:7e:3e:01:b7:e2:ee:ff:a3:53:21:
         f0:2e:9f:55:f7:b5:55:18:bd:cb:4d:03:82:71:bf:d7:07:05:
         68:a0:73:19:a7:0c:91:09:38:4b:58:02:ed:1d:14:f8:e6:06:
         d7:f0:e6:7b:92:ad:37:e4:d7:7f:54:4d:51:b6:ec:09:63:e5:
         32:03:93:ad:85:db:db:f9:4c:c2:87:30:c5:51:95:b1:ce:df:
         45:fb:f6:2b:b3:29:55:96:e8:3a:5a:cc:82:38:69:6f:43:1b:
         a2:87:94:d5:ec:46:00:27:50:08:5e:27:cf:97:11:e7:e3:af:
         9b:a4:b5:83:9d:91:1d:0f:12:83:21:e7:d1:10:77:a1:7e:aa:
         5a:49:86:55:d5:cf:ed:25:16:0f:cd:19:69:85:cb:cd:8d:81:
         18:d3:4f:34:2f:e0:98:f9:74:a8:96:93:a8:12:d5:4d:29:ae:
         d6:3a:03:ca:2d:b8:c0:af:9a:37:ee:51:e7:f6:6c:f9:e3:80:
         63:f3:fe:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:58:20 2025 by rpki-client