Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/3133382e3138352e3234382e302f32322d3234203d3e20323632323431.roa
File:                     3133382e3138352e3234382e302f32322d3234203d3e20323632323431.roa (raw, json)
Hash identifier:          U7Y3QFK8thCkZidEcj9JJ7STFWKzkWXgrScDoPUjfds=
Subject key identifier:   B3:BE:53:A8:C0:91:55:17:07:98:91:75:40:A9:B8:B7:71:62:F5:6F
Certificate issuer:       /CN=96EAFA0906A1E2F48685E9D99165923172C806EA
Certificate serial:       18C8ABC8F4A16A1F86207F1EA227B515E8220BE9
Authority key identifier: 96:EA:FA:09:06:A1:E2:F4:86:85:E9:D9:91:65:92:31:72:C8:06:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96EAFA0906A1E2F48685E9D99165923172C806EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/3133382e3138352e3234382e302f32322d3234203d3e20323632323431.roa
Signing time:             Tue 04 Feb 2025 18:04:04 +0000
ROA not before:           Tue 04 Feb 2025 17:59:04 +0000
ROA not after:            Tue 03 Feb 2026 18:04:04 +0000
asID:                     262241
IP address blocks:        138.185.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/96EAFA0906A1E2F48685E9D99165923172C806EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/96EAFA0906A1E2F48685E9D99165923172C806EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96EAFA0906A1E2F48685E9D99165923172C806EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c8:ab:c8:f4:a1:6a:1f:86:20:7f:1e:a2:27:b5:15:e8:22:0b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96EAFA0906A1E2F48685E9D99165923172C806EA
        Validity
            Not Before: Feb  4 17:59:04 2025 GMT
            Not After : Feb  3 18:04:04 2026 GMT
        Subject: CN=B3BE53A8C09155170798917540A9B8B77162F56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:65:27:0b:45:57:7a:a1:dd:ad:d6:b1:72:
                    17:41:c3:0c:c5:1d:b5:0c:a8:dd:c6:f1:9b:89:35:
                    20:58:4d:3c:15:3a:9b:b7:66:11:5e:91:5d:41:66:
                    f8:bf:25:9b:c3:45:fe:26:e0:4e:48:38:4f:66:34:
                    0d:41:a4:f9:c9:e0:af:3b:2f:5e:8c:96:28:4a:eb:
                    bf:38:6f:66:14:32:e9:93:4f:7a:46:68:fb:c7:5e:
                    e6:f4:2e:34:38:bf:42:2e:d2:e0:46:59:ae:0e:00:
                    79:ec:8b:b7:99:c3:63:09:48:61:3e:28:1e:e3:23:
                    16:a5:6d:39:23:a3:33:d5:6c:f9:35:c9:7d:8d:5e:
                    e7:81:2e:8a:9b:42:39:4d:51:cf:42:bf:5b:b2:85:
                    cc:0c:b9:b8:70:ca:4c:c5:19:21:dd:a9:7e:4b:b4:
                    d0:bf:7e:f3:d5:42:98:07:68:af:2d:c0:a9:20:4f:
                    11:bd:f9:2c:6d:84:d0:49:ff:46:94:2c:0c:34:18:
                    e6:eb:76:ad:5b:e3:bb:e9:e3:57:cb:f3:49:18:28:
                    9e:eb:35:07:31:47:a9:ee:80:95:34:f2:f8:2c:b9:
                    c2:07:86:ef:6a:f8:52:48:6c:21:01:44:af:b4:38:
                    bb:9d:7a:77:10:5b:f7:e0:3c:11:25:b8:35:ea:e8:
                    20:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BE:53:A8:C0:91:55:17:07:98:91:75:40:A9:B8:B7:71:62:F5:6F
            X509v3 Authority Key Identifier:
                keyid:96:EA:FA:09:06:A1:E2:F4:86:85:E9:D9:91:65:92:31:72:C8:06:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/96EAFA0906A1E2F48685E9D99165923172C806EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96EAFA0906A1E2F48685E9D99165923172C806EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/3133382e3138352e3234382e302f32322d3234203d3e20323632323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:13:70:39:60:65:e6:9d:82:47:7a:2e:ad:30:c0:f3:d1:1b:
         82:03:3e:62:f5:f6:d9:b0:38:be:cf:e9:08:ce:d9:9c:74:f4:
         61:e3:31:aa:e8:8e:81:1d:33:19:fd:14:ef:50:2d:98:99:77:
         ba:11:f7:2d:f1:7e:34:b3:57:a7:b6:1c:9e:35:bb:a4:e0:2b:
         91:b4:68:d1:a2:7e:47:8d:97:47:fb:a2:f5:39:0c:74:71:e3:
         6d:d6:fb:36:99:1a:b8:49:9c:02:48:08:37:b4:9b:54:6d:e0:
         b3:94:5e:ec:37:39:51:46:9a:fb:ae:b0:ac:7b:e2:8a:26:1a:
         f2:96:f5:e8:b8:a9:59:eb:38:72:ee:02:83:d0:53:21:e2:04:
         b7:bd:a3:87:04:63:c1:6c:ff:ea:be:a4:df:c7:3c:b4:d9:60:
         ae:e7:48:cc:ae:31:23:ce:fe:28:69:a1:4f:6d:0e:59:25:5a:
         d6:51:d9:1c:28:b0:a7:0c:f4:3d:e3:41:3b:17:be:d6:59:3c:
         69:7b:29:9b:8d:fc:ca:23:de:33:3e:9d:c5:39:54:b9:37:45:
         c7:83:9f:d5:af:56:d5:ec:f5:bd:8d:f8:fb:16:dd:74:6e:45:
         f3:64:ec:db:4f:f8:a7:21:e2:2d:1f:bf:8a:19:b7:52:b8:d7:
         97:ad:0c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:44 2025 by rpki-client