Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/3133382e3138362e362e302f32332d3234203d3e20323732383734.roa
File:                     3133382e3138362e362e302f32332d3234203d3e20323732383734.roa (raw, json)
Hash identifier:          a4xsUzkmaMmGVQbC6QXNfrz3p2wZcM1L+LO3vuW+kEE=
Subject key identifier:   DE:29:69:BC:1E:9C:A5:46:3D:7C:28:A3:88:35:31:BD:D6:E5:E7:0D
Certificate issuer:       /CN=84445FEE22581E9527451A2023AA1565199DA88D
Certificate serial:       695B7CD27B2F4D70DAC2A6FB7562630E3E1053E1
Authority key identifier: 84:44:5F:EE:22:58:1E:95:27:45:1A:20:23:AA:15:65:19:9D:A8:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/3133382e3138362e362e302f32332d3234203d3e20323732383734.roa
Signing time:             Tue 04 Feb 2025 18:20:36 +0000
ROA not before:           Tue 04 Feb 2025 18:15:36 +0000
ROA not after:            Tue 03 Feb 2026 18:20:36 +0000
asID:                     272874
IP address blocks:        138.186.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 13:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5b:7c:d2:7b:2f:4d:70:da:c2:a6:fb:75:62:63:0e:3e:10:53:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84445FEE22581E9527451A2023AA1565199DA88D
        Validity
            Not Before: Feb  4 18:15:36 2025 GMT
            Not After : Feb  3 18:20:36 2026 GMT
        Subject: CN=DE2969BC1E9CA5463D7C28A3883531BDD6E5E70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f9:10:f8:93:ea:ec:bf:b2:7e:5f:36:0a:87:
                    89:2b:df:fe:5a:a1:ea:4a:5b:ec:91:e4:aa:3e:88:
                    6a:1d:ab:7a:98:25:35:b4:e1:ac:ca:bd:ff:d2:c0:
                    3d:85:cc:8c:a4:52:1c:a0:fb:ba:e9:c5:d0:86:b9:
                    40:fc:98:d7:65:39:97:97:43:80:f6:5b:09:00:42:
                    fe:fc:47:a7:d3:f3:0b:36:91:fc:aa:c6:08:4b:e1:
                    08:9b:4b:00:fc:9d:a5:42:d8:26:83:6e:d2:b5:25:
                    e0:1c:82:fe:97:e5:6e:7c:7f:bb:75:6e:53:d4:5d:
                    64:2b:36:b2:c3:90:4e:42:2f:5f:6d:07:c9:17:04:
                    90:1a:78:27:a8:9b:d2:e9:b7:ed:dc:fa:e5:6e:06:
                    f4:6c:1d:4c:5e:53:5c:73:53:04:e5:6c:c2:a6:85:
                    c3:f5:af:46:1f:e6:5b:45:73:5d:36:22:e4:11:4b:
                    ed:cc:c1:04:8a:0f:b7:eb:2f:89:65:a4:03:a3:d7:
                    92:04:7b:ac:f8:1f:09:05:22:69:d8:12:2c:b8:49:
                    4c:c7:4b:ac:af:33:cf:c4:02:f4:bb:a8:6a:4a:f9:
                    03:54:5b:76:0d:d5:a3:c4:fe:c5:07:77:d5:bd:c0:
                    55:57:31:ad:23:59:18:51:35:e7:e6:8f:04:4c:d3:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:29:69:BC:1E:9C:A5:46:3D:7C:28:A3:88:35:31:BD:D6:E5:E7:0D
            X509v3 Authority Key Identifier:
                keyid:84:44:5F:EE:22:58:1E:95:27:45:1A:20:23:AA:15:65:19:9D:A8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/84445FEE22581E9527451A2023AA1565199DA88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84445FEE22581E9527451A2023AA1565199DA88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84380F178E7F2128D1EC239DFDB18C666D849AAB8B7E0960A9BE139A9D98812F/0/3133382e3138362e362e302f32332d3234203d3e20323732383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:0d:65:11:af:16:41:ab:46:52:ef:78:07:be:a5:56:86:84:
         14:67:ac:eb:45:9c:a9:1e:d4:30:3b:25:79:e3:be:99:12:57:
         9c:c4:8f:3b:9b:28:20:c5:2e:1d:23:f2:f9:e4:77:02:a3:42:
         a8:96:07:5d:85:7c:c6:1b:64:7e:35:ec:eb:c4:58:9a:fa:03:
         33:fd:1b:07:da:23:2c:c7:45:86:b5:22:35:55:8f:a1:e6:04:
         cb:fb:9c:a4:08:c8:86:47:64:42:ff:c8:4f:79:08:f4:92:e3:
         e7:59:84:c8:59:49:6c:fd:2a:eb:30:e7:9c:6a:43:55:3a:c8:
         1d:80:ce:8a:f7:7b:6c:8c:47:ad:59:71:88:24:01:34:91:33:
         0a:0a:15:04:10:80:60:57:da:26:b3:ca:db:e4:9c:47:01:4f:
         9d:33:02:ca:bd:3c:35:42:ba:fd:df:1b:9e:86:3a:d3:b8:22:
         da:e1:86:18:33:27:aa:bd:56:43:97:97:d4:0a:0e:1d:b2:14:
         e7:73:7f:4a:b7:51:48:1c:8b:b1:28:58:ce:c7:2f:81:af:c4:
         d9:0b:62:12:e4:3d:bc:63:86:b1:5b:ca:1d:4a:bc:af:02:6b:
         9b:66:3e:ae:44:86:6e:12:c4:3a:0f:c9:aa:f9:89:e6:b4:7b:
         be:26:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:43:24 2025 by rpki-client