Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234342e302f32322d3234203d3e203238313130.roa
File:                     3133382e3132322e3234342e302f32322d3234203d3e203238313130.roa (raw, json)
Hash identifier:          iIPAxQj1CyowjTpLGLiCFoLYIMw7ck2dJZnBpskhL9Y=
Subject key identifier:   BB:5A:1B:CE:E7:C3:33:55:DB:DE:DD:B4:6B:44:A8:DD:5D:97:1F:DE
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       4CD5B801D646424F87AC56F79F0E9651589A94F2
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234342e302f32322d3234203d3e203238313130.roa
Signing time:             Wed 18 Dec 2024 17:35:00 +0000
ROA not before:           Wed 18 Dec 2024 17:30:00 +0000
ROA not after:            Wed 17 Dec 2025 17:35:00 +0000
asID:                     28110
IP address blocks:        138.122.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 22:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d5:b8:01:d6:46:42:4f:87:ac:56:f7:9f:0e:96:51:58:9a:94:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Dec 18 17:30:00 2024 GMT
            Not After : Dec 17 17:35:00 2025 GMT
        Subject: CN=BB5A1BCEE7C33355DBDEDDB46B44A8DD5D971FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:17:f3:8c:c3:c4:b0:4b:6e:28:09:0f:67:
                    48:ea:4a:f9:2d:f8:3c:86:1d:a9:38:9a:81:f1:f3:
                    ad:b5:a3:d0:7a:64:45:8e:42:78:a9:62:ef:9b:fa:
                    c9:7f:f6:62:63:3d:5d:09:74:3a:9e:b1:6d:a7:77:
                    dd:96:d1:79:7b:c4:12:51:99:3d:21:6c:36:a2:f2:
                    ea:04:a9:da:75:61:de:ff:4f:a6:81:20:be:39:8a:
                    88:4e:9d:12:c8:8e:e2:6d:e5:89:16:e6:5b:0d:05:
                    4b:24:11:aa:14:28:e5:25:69:e0:78:30:09:22:ea:
                    9d:9c:67:46:02:6e:a5:a0:ee:91:c5:86:54:a6:8d:
                    5a:52:2a:49:5a:a2:10:a9:99:d3:51:bc:59:6d:95:
                    f7:ed:b0:a4:e4:cf:60:87:0f:ab:47:fd:23:2f:40:
                    88:4f:69:30:3b:23:0e:62:46:58:60:d3:b9:3a:5a:
                    96:c4:55:03:83:5c:9a:0b:c9:75:6d:9e:aa:b0:07:
                    3b:96:78:60:0d:d0:7c:bd:31:3a:75:85:dc:a7:9d:
                    93:86:cc:bb:d4:01:25:f0:c7:21:67:b1:96:9e:e7:
                    39:fb:a0:3f:25:7d:46:13:96:5c:3e:cb:a1:7d:96:
                    1b:ba:6a:bf:4d:39:86:86:9c:16:74:cf:02:5e:d1:
                    0d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5A:1B:CE:E7:C3:33:55:DB:DE:DD:B4:6B:44:A8:DD:5D:97:1F:DE
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234342e302f32322d3234203d3e203238313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:e1:c8:a3:ba:73:ad:ca:11:d7:ca:c1:03:61:91:23:04:78:
         93:d4:d6:ba:ff:1f:ee:c8:6a:13:02:a6:3b:2e:35:60:89:0e:
         40:94:62:59:95:e4:d7:e3:dd:32:cf:d1:a1:fb:c7:c8:d2:09:
         84:f2:7f:cb:5c:70:7e:65:db:61:42:a5:75:1a:97:54:d9:7c:
         b1:98:20:c3:79:e6:d1:31:81:87:32:88:50:6f:0a:01:04:2c:
         cc:9d:c1:06:a1:d6:9e:e3:25:e1:d5:47:48:cc:3d:69:32:57:
         ae:db:d4:7a:cd:a9:55:b5:f1:e2:81:85:ea:e1:b2:ef:16:ad:
         e2:a5:75:52:cd:be:0f:24:d1:b6:1d:22:21:b8:35:c3:4c:b4:
         99:fb:41:aa:78:88:1b:af:c2:6c:97:57:55:d2:a0:8e:f3:9d:
         dd:35:11:7a:e4:a3:a3:df:19:93:05:2e:da:68:52:83:a6:6e:
         3a:eb:14:41:11:13:9a:ed:2d:fe:d7:09:e1:9c:10:2d:8c:3c:
         3e:35:69:2a:a3:56:2e:84:95:d5:bd:81:b3:6d:7a:84:cc:04:
         7b:eb:d9:2f:07:d0:81:da:09:a6:76:58:ca:b3:91:7c:27:2e:
         8e:3d:52:42:e1:cb:29:11:e8:79:cc:90:76:23:da:d2:4b:f2:
         b7:b4:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:25:39 2025 by rpki-client