Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31352e302f32342d3234203d3e20323732383730.roa
File:                     3133382e3131372e31352e302f32342d3234203d3e20323732383730.roa (raw, json)
Hash identifier:          iVmlDBcdxKFZ6/VgTekmBsBAKaWyMbkX8AkFMuVjBa8=
Subject key identifier:   32:A5:4C:5D:DD:96:7F:46:E3:37:62:F0:1D:81:9B:7C:AA:AC:0D:EF
Certificate issuer:       /CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Certificate serial:       195AAB4F5FB044D3B69622E355356ECB37AEE197
Authority key identifier: D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31352e302f32342d3234203d3e20323732383730.roa
Signing time:             Thu 26 Dec 2024 20:35:00 +0000
ROA not before:           Thu 26 Dec 2024 20:30:00 +0000
ROA not after:            Thu 25 Dec 2025 20:35:00 +0000
asID:                     272870
IP address blocks:        138.117.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 13:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5a:ab:4f:5f:b0:44:d3:b6:96:22:e3:55:35:6e:cb:37:ae:e1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
        Validity
            Not Before: Dec 26 20:30:00 2024 GMT
            Not After : Dec 25 20:35:00 2025 GMT
        Subject: CN=32A54C5DDD967F46E33762F01D819B7CAAAC0DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:a2:35:7d:b2:f1:a8:92:cf:5e:bb:51:02:
                    62:a0:1c:0f:34:23:5d:e3:90:83:c4:3d:55:ef:9e:
                    0a:3d:46:0f:04:3b:cf:50:7c:ee:fa:ac:4b:9b:e7:
                    4d:2b:cb:e1:6d:06:d8:a1:0e:9d:bd:c5:22:0a:ee:
                    17:44:20:88:81:74:b0:e8:e6:9a:c2:fb:e3:0d:d5:
                    78:28:e5:e3:26:f1:17:29:48:57:e3:e8:a2:1e:45:
                    4d:1e:9e:07:6f:9e:48:56:70:f7:ac:1e:06:0d:f3:
                    f2:14:8e:c2:13:7e:33:db:14:20:94:93:b9:40:26:
                    79:2e:67:cd:bb:bf:b2:26:be:d3:e6:c6:05:d6:ff:
                    a5:bb:0c:d5:b6:0d:99:d4:ff:c0:0a:10:75:55:da:
                    8d:c9:6f:63:65:b2:12:f0:ea:0f:93:55:45:38:39:
                    14:17:79:4b:3b:41:14:11:81:ce:43:cf:d2:2a:2d:
                    d8:e6:54:44:e3:51:25:0c:eb:53:20:c6:1a:21:98:
                    12:dc:e5:b0:e2:1f:a4:ae:b0:71:bf:85:9f:ee:8c:
                    53:e6:32:13:eb:d3:e2:de:2d:b4:27:18:d1:85:ba:
                    41:8a:5a:74:eb:6b:b8:0c:58:e6:69:df:3a:c7:80:
                    c9:36:07:6d:df:4f:71:d0:67:b3:9c:eb:c3:49:91:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A5:4C:5D:DD:96:7F:46:E3:37:62:F0:1D:81:9B:7C:AA:AC:0D:EF
            X509v3 Authority Key Identifier:
                keyid:D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31352e302f32342d3234203d3e20323732383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:8e:70:dc:b4:b7:98:d4:44:9f:f7:31:56:f0:2b:bd:88:dc:
         99:83:76:2b:b3:86:31:13:24:3b:fb:dd:84:ca:84:97:d8:1f:
         dc:27:a9:97:2f:ae:c1:26:bd:49:9e:c8:25:03:88:b4:30:99:
         c8:fd:6b:b9:77:8e:75:1f:ce:b0:df:a0:64:38:2f:a4:ec:f5:
         01:0b:b0:23:ba:60:fc:f5:88:22:fb:b6:82:9f:af:43:52:75:
         ed:b2:00:39:7c:db:2c:ba:ab:70:af:97:05:a8:ab:ad:f8:c7:
         85:37:e8:75:33:7e:ad:e4:8f:d5:53:ce:e3:bc:43:0b:23:47:
         de:c7:81:38:69:56:47:41:9e:9a:a0:9d:d9:bf:a2:4b:08:1c:
         e6:1d:fe:77:e8:37:70:26:f6:93:ef:06:2c:89:c1:70:e3:97:
         d9:54:26:78:7e:9a:93:57:b8:4e:1e:2c:9b:d9:95:83:27:5c:
         4b:df:12:5c:8c:bb:57:ef:af:8f:8f:b4:0e:fb:18:36:8b:51:
         a9:8a:68:23:7e:4e:73:28:7f:aa:18:8e:eb:80:5f:99:13:2a:
         5b:74:32:c4:e4:22:de:02:64:8e:09:96:f3:bf:46:b1:0a:ef:
         16:eb:ab:9f:1a:a5:87:f2:44:d7:81:53:cb:eb:3d:c3:29:17:
         b6:72:d7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:12:39 2025 by rpki-client