Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3133382e3231392e342e302f32322d3232203d3e203134323332.roa
File:                     3133382e3231392e342e302f32322d3232203d3e203134323332.roa (raw, json)
Hash identifier:          O9t4mP4N9mAffB40wnhi6tJ5J8RgwAog+f2odd4NbP4=
Subject key identifier:   53:CA:83:6D:F9:75:CE:9A:C7:98:62:AD:AE:AB:43:8F:CB:F1:60:BC
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       031A6668D70B1F67480BD962A376B968FAE69DDA
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3133382e3231392e342e302f32322d3232203d3e203134323332.roa
Signing time:             Tue 04 Feb 2025 18:29:37 +0000
ROA not before:           Tue 04 Feb 2025 18:24:37 +0000
ROA not after:            Tue 03 Feb 2026 18:29:37 +0000
asID:                     14232
IP address blocks:        138.219.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1a:66:68:d7:0b:1f:67:48:0b:d9:62:a3:76:b9:68:fa:e6:9d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Feb  4 18:24:37 2025 GMT
            Not After : Feb  3 18:29:37 2026 GMT
        Subject: CN=53CA836DF975CE9AC79862ADAEAB438FCBF160BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:44:08:73:c3:0c:c0:be:d0:7a:90:2a:dc:
                    ac:42:6d:d2:a7:0e:99:d7:61:0f:70:63:86:a3:4e:
                    a6:42:ee:3e:b0:88:52:6d:27:02:89:f6:60:17:ad:
                    02:b4:1e:82:06:42:c6:d0:08:1a:92:12:71:6a:3f:
                    c6:c6:17:f8:26:6c:c9:0a:de:6f:b3:4e:a6:2f:d0:
                    a8:6c:fe:22:24:40:9d:4a:79:2c:09:70:de:6d:e6:
                    f6:42:a3:60:a8:81:a0:13:82:eb:dd:97:4d:cf:23:
                    9d:43:b1:7d:45:7f:fa:5e:62:60:2e:59:cb:53:e4:
                    6c:6e:05:ba:9a:45:f3:bf:b3:4c:bb:27:ea:61:0e:
                    f9:cd:51:0b:ca:26:b5:86:0b:02:b8:6d:65:d4:f5:
                    af:72:65:a5:66:52:eb:54:89:53:67:8b:98:c1:a6:
                    89:5e:6f:3f:e3:83:a1:c2:c9:16:f0:da:ac:f2:2b:
                    ab:2b:f4:e4:15:17:b1:c8:dc:1f:cc:8e:24:23:c8:
                    41:1f:b6:68:51:ef:65:56:44:3f:f6:53:91:24:60:
                    f7:63:bb:d6:95:63:91:5d:e8:ac:74:07:2a:f3:fc:
                    eb:e2:67:7e:e9:f9:f5:70:8c:49:43:0e:18:83:33:
                    7a:5a:6c:68:0a:31:c5:4e:d8:76:cc:64:b8:83:77:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CA:83:6D:F9:75:CE:9A:C7:98:62:AD:AE:AB:43:8F:CB:F1:60:BC
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3133382e3231392e342e302f32322d3232203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:f7:90:0f:2a:91:ed:bc:de:d8:2b:ea:23:c7:0f:67:10:e3:
         ae:a6:f3:40:8c:c9:82:d9:61:90:56:b0:78:8b:9d:36:c2:64:
         58:ef:c3:e4:a0:13:07:54:39:7b:1d:1a:77:a2:95:41:ea:9e:
         4a:21:18:bb:1d:62:39:75:8d:ae:7c:30:b6:d6:d7:78:b4:e8:
         4a:b9:3a:b4:ac:7f:f2:2f:23:8b:0b:8c:4b:24:32:bb:af:43:
         a8:5a:5a:91:46:05:b0:f2:9b:10:39:e8:c9:88:bf:5b:92:15:
         cc:19:01:77:3f:3c:8e:0e:58:95:7d:34:0f:f4:95:21:70:e8:
         37:28:6c:e3:4c:9c:9f:9a:ad:f5:15:fb:f8:c8:5c:7c:fd:8f:
         81:3b:b5:b4:64:83:f9:bb:52:d9:99:5f:36:33:d3:f7:d9:05:
         5e:07:5f:4f:70:57:0e:6f:db:8d:3e:78:c1:df:ec:11:a3:23:
         e9:c9:00:b2:bc:ee:6b:21:e7:58:7e:10:3e:08:15:c9:4d:a5:
         87:45:dd:81:76:d8:31:98:59:9c:62:22:a5:2a:1c:71:76:77:
         05:cf:41:e9:b6:5b:2f:29:41:42:de:5f:6c:37:57:ba:56:f5:
         8d:ea:05:0f:24:ee:01:2e:ae:4f:e8:47:f5:fd:a6:b7:14:51:
         23:94:be:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:36:06 2025 by rpki-client