Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3133382e3131372e32302e302f32322d3234203d3e203237393834.roa
File:                     3133382e3131372e32302e302f32322d3234203d3e203237393834.roa (raw, json)
Hash identifier:          4z3FEGkg59D5Qh+d/EBykLnCp0h58ATPtnGuoWw+Glo=
Subject key identifier:   78:AE:44:5D:26:A5:8B:A3:05:ED:EE:20:7B:7D:ED:35:FE:E7:98:D2
Certificate issuer:       /CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Certificate serial:       6BAF32E0FB901726A21630526606F0DD3E2BBC98
Authority key identifier: 62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3133382e3131372e32302e302f32322d3234203d3e203237393834.roa
Signing time:             Tue 04 Feb 2025 18:04:57 +0000
ROA not before:           Tue 04 Feb 2025 17:59:57 +0000
ROA not after:            Tue 03 Feb 2026 18:04:57 +0000
asID:                     27984
IP address blocks:        138.117.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:af:32:e0:fb:90:17:26:a2:16:30:52:66:06:f0:dd:3e:2b:bc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
        Validity
            Not Before: Feb  4 17:59:57 2025 GMT
            Not After : Feb  3 18:04:57 2026 GMT
        Subject: CN=78AE445D26A58BA305EDEE207B7DED35FEE798D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:85:2c:63:dc:5e:ea:ed:19:18:3a:61:1b:
                    10:eb:c4:73:59:68:6e:52:77:34:74:e4:56:cf:9e:
                    76:6d:5c:f0:4e:d5:f3:49:c8:b5:81:90:9f:9b:ec:
                    f5:fd:ce:dc:54:6c:9a:3a:f2:55:aa:45:a2:97:03:
                    9d:7a:e4:7b:63:40:34:93:08:c6:ac:52:aa:f5:f7:
                    7b:4c:4f:a2:1c:75:86:46:be:5d:70:24:16:9c:fe:
                    7f:fd:d9:cd:5e:75:1f:0a:81:68:f2:5c:9e:17:d5:
                    e3:f0:ea:12:ac:2c:2c:36:99:2e:28:70:c0:74:a4:
                    71:ff:ca:5b:8a:b4:67:74:d4:1d:cc:88:2d:c4:4d:
                    bb:a1:ea:fb:53:60:dc:84:4a:fc:d5:3f:ba:ea:60:
                    de:1b:b5:65:d2:03:99:87:f1:94:84:91:85:57:f7:
                    f0:d2:92:b3:8c:ff:4d:8f:24:fa:43:73:f7:ea:5a:
                    fb:51:ce:04:7a:00:d5:96:4a:fd:0a:9f:df:56:28:
                    e9:7f:11:bf:e2:fd:8f:95:95:a3:d8:45:52:70:e7:
                    19:88:9f:82:98:86:86:7b:68:93:07:72:f7:da:4c:
                    b7:6c:49:0b:a9:93:05:16:10:9d:6b:ef:92:e0:b6:
                    34:af:8f:6e:42:6e:4d:2f:ea:ca:4d:8a:f5:01:cf:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AE:44:5D:26:A5:8B:A3:05:ED:EE:20:7B:7D:ED:35:FE:E7:98:D2
            X509v3 Authority Key Identifier:
                keyid:62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3133382e3131372e32302e302f32322d3234203d3e203237393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:79:53:1c:cc:3d:0d:0f:96:9a:d1:8b:f6:61:b0:7a:7d:70:
         4d:46:a3:f9:c7:e7:17:12:91:44:9d:21:2e:34:8b:4e:92:a3:
         92:3f:6c:45:ef:56:cf:38:e0:a4:6b:bf:a8:70:3c:16:4e:f9:
         b9:a5:08:5b:98:f9:bb:a8:5a:1e:04:09:83:4c:8b:e4:ce:b5:
         01:e3:01:75:c2:ff:9f:98:b3:ba:5f:0d:52:fa:c9:0b:2a:8a:
         be:f2:5d:6c:de:c4:cb:49:d2:b3:af:e0:66:34:c4:a0:6f:27:
         ec:18:4f:c8:99:c1:2b:dd:24:a2:51:e3:42:e8:c3:05:6d:ae:
         d9:7a:d3:b8:6d:19:e5:93:7f:7a:60:b3:be:cf:bd:80:b6:01:
         0d:ee:49:29:77:bc:16:73:7d:2a:83:e1:f2:16:51:ec:fe:2c:
         bf:3e:a5:9e:37:01:c8:d3:65:49:fb:86:88:e7:b5:82:39:89:
         bf:29:ea:34:a2:db:91:8d:cc:77:f2:7f:04:5e:9c:dc:73:51:
         19:8b:38:18:7f:39:fc:4b:ab:6d:e3:86:72:95:b2:5c:78:da:
         70:38:68:e6:39:39:4e:63:85:ec:bf:0a:28:0f:99:87:17:a6:
         ee:7d:dd:ed:ec:9d:6a:e9:f6:7b:b8:72:4b:56:13:4b:8d:d1:
         cd:27:3b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:58:42 2025 by rpki-client