Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133382e35392e3137362e302f32322d3234203d3e20323633363836.roa
File:                     3133382e35392e3137362e302f32322d3234203d3e20323633363836.roa (raw, json)
Hash identifier:          7bbKH4K5AYsFiJTSvRdVVeNToTYXo+GeX5+M27TuLds=
Subject key identifier:   A5:BF:2F:31:85:04:50:9E:5C:4E:F9:92:CD:A2:A7:45:A1:39:6B:B2
Certificate issuer:       /CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
Certificate serial:       5DBACA2C7CE40971DA89DB9514DFA359E061E7AC
Authority key identifier: 15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133382e35392e3137362e302f32322d3234203d3e20323633363836.roa
Signing time:             Tue 04 Feb 2025 18:07:59 +0000
ROA not before:           Tue 04 Feb 2025 18:02:59 +0000
ROA not after:            Tue 03 Feb 2026 18:07:59 +0000
asID:                     263686
IP address blocks:        138.59.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 06:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ba:ca:2c:7c:e4:09:71:da:89:db:95:14:df:a3:59:e0:61:e7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
        Validity
            Not Before: Feb  4 18:02:59 2025 GMT
            Not After : Feb  3 18:07:59 2026 GMT
        Subject: CN=A5BF2F318504509E5C4EF992CDA2A745A1396BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f1:5b:36:23:e9:ca:d9:5f:38:47:34:bb:28:
                    13:e8:b3:a8:fa:54:7a:91:f6:9c:8d:75:b7:e2:b6:
                    42:df:9e:6f:76:51:ba:88:5d:7a:f5:da:cc:5a:ce:
                    d7:ce:b8:0c:16:04:b8:e9:e3:95:0b:94:26:4f:f9:
                    dc:34:d4:ed:4a:dd:8a:aa:22:b0:19:84:fb:9c:6d:
                    1b:02:ef:7b:80:ed:eb:40:17:c4:f0:df:11:1a:cd:
                    a9:a8:a3:51:1a:7b:8b:8b:7a:eb:1e:3e:4d:1d:1a:
                    d1:e3:71:a8:b3:8a:76:bb:71:0d:6b:ac:bd:1e:19:
                    96:a7:fd:a2:5d:9d:16:a2:24:15:20:2a:7c:a4:cd:
                    7c:64:f3:16:71:e5:98:4d:7c:fc:df:c0:d3:af:d2:
                    69:9c:de:1d:15:81:55:98:bf:1e:2e:8b:28:f3:3b:
                    50:78:36:55:89:ca:f0:1f:6c:04:ba:df:e7:61:19:
                    92:e5:0e:86:b1:ad:0f:ec:b6:cf:47:87:1a:88:ac:
                    87:50:21:df:03:70:71:fa:b7:da:e0:62:8a:1a:01:
                    46:be:fe:93:24:03:d3:af:b6:24:05:fb:69:a0:c3:
                    c4:ae:ae:89:ba:4b:87:61:f9:46:e2:c9:20:6a:ed:
                    1b:ca:a5:73:a0:e0:f0:3e:08:0e:10:23:2e:23:9f:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BF:2F:31:85:04:50:9E:5C:4E:F9:92:CD:A2:A7:45:A1:39:6B:B2
            X509v3 Authority Key Identifier:
                keyid:15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3133382e35392e3137362e302f32322d3234203d3e20323633363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:9e:8a:d8:76:dd:9e:d5:73:3f:11:e3:00:a7:33:a2:a0:07:
         8d:77:cb:f3:fc:2c:ec:f0:f7:61:93:0e:59:81:33:66:7c:40:
         39:6b:a9:0d:ab:e8:92:9c:10:2c:f8:87:ab:c9:05:c7:c0:88:
         29:58:e8:04:6e:d2:5a:b5:28:ae:40:89:db:77:be:60:b4:c4:
         c1:e2:16:56:e9:d4:37:43:95:96:bc:93:b7:40:38:bc:d0:ab:
         b0:00:65:4f:e3:d6:f6:31:6d:81:31:67:97:91:bf:7a:c3:c1:
         af:5b:65:1a:27:8b:d6:25:76:4d:77:9b:e5:0c:7d:94:bc:d7:
         47:bc:44:a9:7e:78:8a:45:e8:f8:0f:0c:bb:66:e6:13:98:43:
         18:5c:ce:52:7c:52:17:c8:6f:a0:b5:a3:71:8a:c6:da:73:11:
         46:67:4c:f2:ac:40:36:3e:98:3f:15:03:91:e1:c0:14:2b:2d:
         39:f9:53:93:66:00:68:69:5a:92:d0:cb:71:48:55:eb:fd:44:
         20:0f:b2:50:d0:4e:7a:9f:b0:0a:0d:83:ce:ba:47:a0:20:b4:
         7e:ff:a7:fe:9b:3e:3a:51:8c:30:32:44:60:0a:22:c2:f4:80:
         bc:04:a5:97:68:44:82:b1:ed:18:02:c5:8a:31:8a:39:f1:cd:
         70:77:83:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:36:59 2025 by rpki-client