Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3133382e3132312e3130382e302f32322d3234203d3e20323639393933.roa
File:                     3133382e3132312e3130382e302f32322d3234203d3e20323639393933.roa (raw, json)
Hash identifier:          voUB8WTzT6OtlvZC9NSSGDwyrmOKTsjVEQKWzJgKXa0=
Subject key identifier:   18:62:A5:FE:47:E9:26:29:4D:73:44:01:CA:05:63:4A:69:A4:93:C4
Certificate issuer:       /CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
Certificate serial:       1889AC9E6189149BE22713C81A13AE9FE616DAFF
Authority key identifier: A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3133382e3132312e3130382e302f32322d3234203d3e20323639393933.roa
Signing time:             Tue 04 Feb 2025 20:00:03 +0000
ROA not before:           Tue 04 Feb 2025 19:55:03 +0000
ROA not after:            Tue 03 Feb 2026 20:00:03 +0000
asID:                     269993
IP address blocks:        138.121.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:89:ac:9e:61:89:14:9b:e2:27:13:c8:1a:13:ae:9f:e6:16:da:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
        Validity
            Not Before: Feb  4 19:55:03 2025 GMT
            Not After : Feb  3 20:00:03 2026 GMT
        Subject: CN=1862A5FE47E926294D734401CA05634A69A493C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5c:84:41:0a:22:5c:bd:f4:36:b2:75:41:76:
                    77:2b:9d:28:31:65:5a:7b:42:1e:99:cc:ad:a2:3c:
                    64:d9:0c:fe:5a:99:4e:7d:ae:96:6c:5d:a9:a7:df:
                    86:f4:d0:55:3f:10:17:a3:73:7f:3c:70:3f:d1:09:
                    af:13:3c:4e:93:ad:f4:93:1d:2a:f5:a5:90:65:00:
                    06:be:29:9c:e6:c8:33:fa:1e:8f:df:b8:90:3d:5a:
                    61:a0:ce:f0:bd:aa:16:9e:b8:50:e8:8b:f1:fb:57:
                    72:f7:27:ed:a8:ad:ce:3d:78:8a:89:fa:55:c5:8b:
                    43:03:61:03:46:49:4e:ec:dd:29:4f:ec:64:33:f3:
                    6d:45:fb:f8:35:ba:7f:5e:ea:55:70:b3:3e:a5:e4:
                    19:2b:e2:1c:a6:05:54:91:9a:e9:17:38:68:8f:61:
                    e1:4c:4e:06:a5:1c:cc:f1:2b:67:44:33:ab:fe:f7:
                    d1:8d:e7:68:d9:ca:d2:65:e6:f1:ce:0d:fa:87:51:
                    65:2e:79:bf:56:e2:1d:41:78:6a:d9:02:80:3e:9b:
                    89:f9:6b:e5:72:20:95:dc:55:13:51:f3:dc:65:3a:
                    e6:e9:8b:d0:ad:fd:43:33:a9:84:2c:9e:6f:9c:2b:
                    cd:69:00:5c:96:5c:96:94:fd:89:5c:90:69:69:cb:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:62:A5:FE:47:E9:26:29:4D:73:44:01:CA:05:63:4A:69:A4:93:C4
            X509v3 Authority Key Identifier:
                keyid:A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3133382e3132312e3130382e302f32322d3234203d3e20323639393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:8d:94:87:bb:ad:8e:e7:cc:3f:24:2d:60:06:b5:fc:f9:1d:
         a3:1d:59:12:ad:fe:a1:5f:49:e7:be:ca:1a:3f:0b:1f:39:24:
         2f:2d:18:89:18:8f:ae:de:5e:8d:30:9d:5f:9b:19:f8:00:b3:
         15:9d:b7:20:5f:1d:c5:54:17:e0:6f:f4:1f:81:c0:b5:82:1b:
         53:57:7c:7a:9a:7f:32:4f:99:2c:35:84:cd:f6:cc:28:c1:e8:
         ba:6a:fc:fc:36:c5:c0:d3:29:72:f2:68:89:40:a6:3b:d0:a8:
         52:7b:3b:e7:41:dc:5e:11:ed:b8:58:5b:66:99:92:fa:6e:6b:
         3a:5f:12:64:d6:4a:2f:11:17:fd:cc:95:13:ff:93:59:4b:6e:
         82:24:cd:bc:ef:da:0e:65:b9:94:bf:8d:2c:57:67:d0:3d:99:
         d9:54:23:1a:b2:a0:a2:34:d9:8c:b3:9d:32:6b:0b:39:6b:cc:
         4c:bf:3e:2f:af:f2:c7:dc:30:c3:8b:4e:5b:46:4c:fb:c4:50:
         aa:ce:ac:a3:71:ae:1c:8d:80:a0:d8:6a:d4:70:c5:76:ff:18:
         c0:82:dc:c6:25:a1:1e:42:34:a3:be:44:1c:26:91:e7:9c:a2:
         4b:d2:12:62:95:5d:b2:5f:e1:10:95:1a:35:c0:a6:e7:ec:d2:
         1a:10:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:20 2025 by rpki-client