Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/3133382e302e3132302e302f32342d3234203d3e20323732303134.roa
File:                     3133382e302e3132302e302f32342d3234203d3e20323732303134.roa (raw, json)
Hash identifier:          bgPUw8jchwKa0oAySpxjqw5hAfT0HQ0tYav7sc+3RGM=
Subject key identifier:   20:AF:EB:E0:FD:B1:58:8E:3C:6C:4A:BF:DD:0E:D9:F4:67:54:0B:BF
Certificate issuer:       /CN=2DCCD1347B8E4A264380CB0C336092CD0A179491
Certificate serial:       75C07B90C99DD9D61309EAFEC6EC18F4B6FAFE5D
Authority key identifier: 2D:CC:D1:34:7B:8E:4A:26:43:80:CB:0C:33:60:92:CD:0A:17:94:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/3133382e302e3132302e302f32342d3234203d3e20323732303134.roa
Signing time:             Fri 05 Sep 2025 10:35:00 +0000
ROA not before:           Fri 05 Sep 2025 10:30:00 +0000
ROA not after:            Fri 04 Sep 2026 10:35:00 +0000
asID:                     272014
IP address blocks:        138.0.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c0:7b:90:c9:9d:d9:d6:13:09:ea:fe:c6:ec:18:f4:b6:fa:fe:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DCCD1347B8E4A264380CB0C336092CD0A179491
        Validity
            Not Before: Sep  5 10:30:00 2025 GMT
            Not After : Sep  4 10:35:00 2026 GMT
        Subject: CN=20AFEBE0FDB1588E3C6C4ABFDD0ED9F467540BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:8f:58:dd:c0:bd:0d:88:62:0b:0a:0b:02:
                    c0:d0:c9:4d:97:f5:12:a1:9f:9b:50:58:56:83:3d:
                    8f:45:39:1f:8d:e1:e3:a6:6d:a7:e4:37:37:9c:fa:
                    fe:43:9f:c8:48:a4:02:4c:f0:4a:08:ac:94:e4:8c:
                    6d:19:b6:d0:ff:20:5e:03:aa:f8:51:bf:a8:5e:7a:
                    67:58:5d:46:11:0c:11:26:ec:87:65:e3:5f:f8:af:
                    21:82:97:73:6e:5f:84:55:e3:90:47:8f:bb:9e:d2:
                    33:ab:78:11:79:cf:2f:df:15:c9:1b:18:82:1d:ba:
                    56:6e:fb:ec:19:9f:4e:f8:05:d2:8c:08:55:64:49:
                    a6:be:29:f3:65:70:7e:46:35:99:57:9a:d9:ea:b4:
                    39:99:2d:9c:2b:d7:9e:68:99:f0:9a:8e:52:4c:74:
                    86:a5:af:1e:ca:56:99:f3:ef:94:18:bb:f1:26:64:
                    31:6e:05:73:1d:d1:a1:1a:89:a1:8c:d3:15:84:7f:
                    bd:76:d4:37:29:f4:61:67:ad:e1:a1:62:81:6b:d4:
                    b5:a8:fe:4d:e1:d4:1e:4a:74:0b:60:96:ae:20:c1:
                    a9:2e:8c:b1:6d:95:50:30:cc:df:e3:c1:fd:ec:49:
                    c1:5c:6e:10:e1:26:92:8d:88:70:b4:71:b7:88:5d:
                    49:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AF:EB:E0:FD:B1:58:8E:3C:6C:4A:BF:DD:0E:D9:F4:67:54:0B:BF
            X509v3 Authority Key Identifier:
                keyid:2D:CC:D1:34:7B:8E:4A:26:43:80:CB:0C:33:60:92:CD:0A:17:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DCCD1347B8E4A264380CB0C336092CD0A179491.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D2665180959F31AB0FC833CCD759F5CA6CA5B61674D8A7B78E7EE072ADAA739/0/3133382e302e3132302e302f32342d3234203d3e20323732303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:96:c7:06:e6:db:ed:f6:0a:55:4f:68:24:2d:c2:8a:57:0a:
         70:b9:3f:5a:06:33:db:b3:28:fe:87:a6:19:33:85:fb:82:7a:
         c9:ee:7a:e1:a1:1f:1e:60:55:4b:ad:cd:d3:05:7d:77:ba:70:
         e0:86:55:91:60:24:c8:26:37:9a:7c:bd:95:5d:22:33:67:66:
         f2:ac:6a:7e:2d:4a:9e:96:35:32:6b:c5:86:45:1f:53:55:c2:
         4a:0f:fb:e8:cb:c3:aa:a2:ac:06:c3:fa:69:56:61:f0:a8:09:
         5a:94:bc:6e:2f:0b:84:cd:63:23:89:51:9a:2f:ba:d9:72:56:
         75:34:3c:17:4e:5c:bc:15:73:ae:90:0e:fb:e6:41:f7:64:81:
         5f:78:61:64:3f:86:2b:35:be:44:bc:31:6b:6c:9e:c2:9d:de:
         94:57:a9:fb:dc:c1:a1:16:77:30:6d:5c:69:db:e7:6a:f8:05:
         46:ab:57:cc:44:6e:01:6d:3e:e0:64:df:9d:ea:b4:d4:f5:93:
         d5:f2:08:2f:99:51:75:b5:63:b5:13:5a:77:25:cf:46:70:4b:
         63:b7:bc:4e:c2:be:8c:db:c0:09:98:84:c7:fd:0f:96:03:df:
         12:79:e6:43:e7:e2:e2:88:b3:6f:c2:16:18:ef:bf:17:cc:42:
         71:5e:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 04:54:00 2025 by rpki-client