Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9BE640276F8A05860B6ADCB4B406030DB9B7326485F55D8442F94C8CC11AEDD1/0/3133382e3231392e3234382e302f32322d3234203d3e20323634363334.roa
File:                     3133382e3231392e3234382e302f32322d3234203d3e20323634363334.roa (raw, json)
Hash identifier:          sREWKABePoMVCKCcjVJ9riZjxJs8vGb3TW9x3qDdXOY=
Subject key identifier:   AF:73:A0:7E:AD:2B:B6:80:BA:52:3F:A5:DF:9E:E3:65:A8:AB:D5:87
Certificate issuer:       /CN=FE4729AE5518C25566F6158937323D37C8D66927
Certificate serial:       38C7E700963ABC73FADACC8E03E46CFFBC685C37
Authority key identifier: FE:47:29:AE:55:18:C2:55:66:F6:15:89:37:32:3D:37:C8:D6:69:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE4729AE5518C25566F6158937323D37C8D66927.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9BE640276F8A05860B6ADCB4B406030DB9B7326485F55D8442F94C8CC11AEDD1/0/3133382e3231392e3234382e302f32322d3234203d3e20323634363334.roa
Signing time:             Tue 04 Feb 2025 18:45:47 +0000
ROA not before:           Tue 04 Feb 2025 18:40:47 +0000
ROA not after:            Tue 03 Feb 2026 18:45:47 +0000
asID:                     264634
IP address blocks:        138.219.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9BE640276F8A05860B6ADCB4B406030DB9B7326485F55D8442F94C8CC11AEDD1/0/FE4729AE5518C25566F6158937323D37C8D66927.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9BE640276F8A05860B6ADCB4B406030DB9B7326485F55D8442F94C8CC11AEDD1/0/FE4729AE5518C25566F6158937323D37C8D66927.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE4729AE5518C25566F6158937323D37C8D66927.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c7:e7:00:96:3a:bc:73:fa:da:cc:8e:03:e4:6c:ff:bc:68:5c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4729AE5518C25566F6158937323D37C8D66927
        Validity
            Not Before: Feb  4 18:40:47 2025 GMT
            Not After : Feb  3 18:45:47 2026 GMT
        Subject: CN=AF73A07EAD2BB680BA523FA5DF9EE365A8ABD587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:ea:43:7f:e5:1a:01:97:83:3b:e7:27:e4:
                    9b:6a:7f:47:db:34:b3:87:18:f3:92:2b:80:03:17:
                    33:e4:31:44:52:fc:37:13:97:19:4d:f8:5a:dd:1d:
                    b1:cf:cc:eb:81:03:39:84:75:f4:b3:33:6e:f1:3d:
                    bc:37:94:aa:8e:3f:3f:7d:7a:c6:1c:40:c3:4a:4d:
                    5c:f9:5d:c3:f8:4a:9f:21:59:1c:fd:21:19:7a:29:
                    95:08:13:8a:b3:b7:84:ab:84:a3:78:f0:6a:57:ff:
                    8d:cd:9f:bd:fe:9a:35:85:f9:42:a1:bd:7f:23:52:
                    19:db:67:cf:0b:9a:37:23:37:0a:32:c7:39:ec:af:
                    dd:fc:b6:0c:7f:67:97:e4:47:90:92:87:67:16:d3:
                    4b:67:43:0d:ae:75:5b:22:7d:56:c1:7a:c0:97:8c:
                    88:e4:0a:32:23:68:c6:ce:8d:78:83:50:63:05:33:
                    4b:41:c8:eb:4d:ad:a2:75:bc:c0:50:08:7a:f2:18:
                    b6:1c:97:9e:80:38:fd:89:cd:8f:5c:72:04:50:e5:
                    46:e2:df:68:5e:5e:68:10:5f:0e:1a:30:06:96:03:
                    7b:07:35:97:94:43:5c:cc:cc:24:d6:5c:ea:18:b8:
                    51:35:5c:bd:2b:be:77:51:03:38:4e:4e:c5:97:62:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:73:A0:7E:AD:2B:B6:80:BA:52:3F:A5:DF:9E:E3:65:A8:AB:D5:87
            X509v3 Authority Key Identifier:
                keyid:FE:47:29:AE:55:18:C2:55:66:F6:15:89:37:32:3D:37:C8:D6:69:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9BE640276F8A05860B6ADCB4B406030DB9B7326485F55D8442F94C8CC11AEDD1/0/FE4729AE5518C25566F6158937323D37C8D66927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE4729AE5518C25566F6158937323D37C8D66927.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9BE640276F8A05860B6ADCB4B406030DB9B7326485F55D8442F94C8CC11AEDD1/0/3133382e3231392e3234382e302f32322d3234203d3e20323634363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:6b:d0:aa:9c:36:75:6b:7c:98:97:8c:64:50:cf:88:2f:9a:
         c3:67:7d:c4:bf:07:96:48:3b:8b:49:d7:52:75:74:89:a4:4a:
         1c:23:98:6a:1e:da:bf:d5:e8:8c:8f:87:a0:e2:b5:3b:4a:57:
         2b:0d:82:76:e7:a7:14:28:0e:8a:a1:78:bc:f4:ed:62:ed:61:
         1e:2b:7b:36:58:be:72:5e:c8:24:60:f5:69:0e:99:8b:1d:51:
         e9:9e:05:b2:8d:db:24:f3:7f:55:0c:38:1d:e9:f9:a3:88:16:
         f8:53:49:41:fa:63:a5:5d:c0:1d:c4:4c:9e:dc:58:9c:72:8a:
         7b:c3:23:db:cc:e9:8e:3e:8b:64:09:5b:96:93:d5:95:5e:07:
         b9:7e:e6:ea:68:a5:97:3d:4d:95:b1:75:c9:59:ff:38:26:c9:
         40:d2:82:c7:00:82:2f:95:9c:5a:c9:77:f5:79:22:86:46:b1:
         6d:fc:b9:82:4b:57:24:be:03:88:ae:6c:7b:c8:3a:f2:43:98:
         fe:6e:6c:77:bc:20:1f:6d:82:36:82:22:be:91:37:cd:e9:eb:
         76:36:c8:3a:83:85:59:0b:e6:c2:e5:8d:e7:a1:1e:48:e2:e9:
         8a:d9:5d:2b:20:78:ba:eb:b9:36:b0:78:ba:00:b3:b4:e5:eb:
         38:ba:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:01:16 2025 by rpki-client