Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/3133382e3138362e342e302f32332d3234203d3e20323634363630.roa
File:                     3133382e3138362e342e302f32332d3234203d3e20323634363630.roa (raw, json)
Hash identifier:          d71q02vzrEBT4eWQnPI5VWTAbppGbR1ro3q2vAmgzzc=
Subject key identifier:   69:C2:CA:CB:17:0F:5F:D4:B3:F7:A4:B9:BF:F2:67:6B:32:1C:22:7C
Certificate issuer:       /CN=84445FEE22581E9527451A2023AA1565199DA88D
Certificate serial:       27B3E4DF1BC75224512F7C2073601164583A40E2
Authority key identifier: 84:44:5F:EE:22:58:1E:95:27:45:1A:20:23:AA:15:65:19:9D:A8:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/3133382e3138362e342e302f32332d3234203d3e20323634363630.roa
Signing time:             Tue 04 Feb 2025 18:20:37 +0000
ROA not before:           Tue 04 Feb 2025 18:15:37 +0000
ROA not after:            Tue 03 Feb 2026 18:20:37 +0000
asID:                     264660
IP address blocks:        138.186.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 13:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b3:e4:df:1b:c7:52:24:51:2f:7c:20:73:60:11:64:58:3a:40:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84445FEE22581E9527451A2023AA1565199DA88D
        Validity
            Not Before: Feb  4 18:15:37 2025 GMT
            Not After : Feb  3 18:20:37 2026 GMT
        Subject: CN=69C2CACB170F5FD4B3F7A4B9BFF2676B321C227C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6a:3f:bb:b1:ca:46:2d:8d:fd:5c:97:26:20:
                    36:d5:d7:cb:1d:ce:6e:d4:3a:ff:c7:69:68:a1:75:
                    77:9a:f1:fd:6c:13:57:05:8d:fc:c7:26:c3:b2:c7:
                    ae:b4:7b:fc:65:41:98:a3:c6:9d:34:85:32:2e:98:
                    93:92:5d:6e:c7:62:ee:18:35:02:69:e9:89:43:63:
                    07:b1:98:38:64:ee:18:26:75:78:60:18:49:6c:24:
                    96:c1:2d:81:96:01:6f:61:c8:f8:72:89:39:32:d8:
                    9e:4a:b8:98:da:9b:06:f9:16:91:aa:fa:2a:82:d8:
                    ed:40:75:d4:d7:04:cf:7f:47:97:d2:f0:dc:f2:b0:
                    ab:87:d4:c5:db:29:ef:cf:24:21:3d:61:9d:02:61:
                    b2:6f:d7:a9:73:33:75:bc:91:e0:ab:54:21:17:19:
                    62:8b:fd:d6:0c:18:22:31:f5:1a:da:79:ef:f5:01:
                    dc:55:75:72:13:d0:fd:ef:94:50:7c:38:ac:b8:c5:
                    f9:6b:b0:2f:a0:b4:cd:d5:9c:0e:6b:7c:55:83:41:
                    b6:12:e3:60:0f:ad:21:8d:73:71:33:c7:dc:c3:42:
                    9f:e2:e9:98:c9:30:c7:7a:b5:27:f7:50:12:4d:d6:
                    ae:58:87:15:c8:f2:f1:36:d0:b0:c7:06:fc:8f:08:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C2:CA:CB:17:0F:5F:D4:B3:F7:A4:B9:BF:F2:67:6B:32:1C:22:7C
            X509v3 Authority Key Identifier:
                keyid:84:44:5F:EE:22:58:1E:95:27:45:1A:20:23:AA:15:65:19:9D:A8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/3133382e3138362e342e302f32332d3234203d3e20323634363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:d8:84:3c:6e:c5:e5:aa:72:07:8c:bd:ec:97:cd:90:c9:d3:
         cd:46:14:3a:5c:a3:c3:72:07:47:a7:c2:d5:fb:a7:36:3b:00:
         6b:f0:d6:ae:fc:93:50:2b:73:4c:36:8a:b1:41:e5:87:ad:b1:
         db:34:03:89:bd:ef:43:93:5c:ee:95:bd:8c:6c:f0:d8:71:b8:
         c4:f0:4d:f8:94:fa:d6:dd:7e:ac:38:af:ab:28:79:af:23:8b:
         99:54:eb:0e:06:3c:8f:db:92:5b:05:a2:42:93:7c:85:b0:46:
         81:96:88:28:dc:6f:73:b3:44:f8:a8:3e:78:e6:2b:22:92:5a:
         a7:57:af:e0:56:29:d0:2f:24:53:d3:8b:72:a7:eb:63:bf:34:
         3c:5f:7a:f9:27:ba:91:c3:a4:1d:8d:1a:98:c1:ea:36:89:f0:
         57:58:40:86:bb:b2:16:cf:6b:8c:af:54:4c:5a:41:43:7d:c4:
         a9:b9:f7:c6:2e:03:de:b6:32:0d:5a:8b:5d:48:df:aa:47:ac:
         10:9d:02:70:67:a1:70:ca:8f:0b:a8:8b:ab:8a:1e:d4:58:70:
         aa:ca:83:44:f8:53:cd:e4:e3:37:5d:d8:5e:de:64:32:81:22:
         62:7e:f9:f8:55:86:a8:91:c9:20:2f:72:6b:22:0f:ac:72:9b:
         03:80:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:43:26 2025 by rpki-client