Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133382e3131372e3131312e302f32342d3234203d3e20323632353839.roa
File:                     3133382e3131372e3131312e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          cFMAn+A6Dr3/9gl5GG9Akedv4yRTfV1UkOW+O/IVLzc=
Subject key identifier:   E1:62:90:05:0C:39:85:B7:F6:E1:AC:80:34:9E:4B:2C:C4:BA:2A:A5
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       47651046E74A3165557A53A973748877BF13F283
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133382e3131372e3131312e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 19:57:00 +0000
ROA not before:           Tue 04 Feb 2025 19:52:00 +0000
ROA not after:            Tue 03 Feb 2026 19:57:00 +0000
asID:                     262589
IP address blocks:        138.117.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:65:10:46:e7:4a:31:65:55:7a:53:a9:73:74:88:77:bf:13:f2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:52:00 2025 GMT
            Not After : Feb  3 19:57:00 2026 GMT
        Subject: CN=E16290050C3985B7F6E1AC80349E4B2CC4BA2AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e2:11:92:ac:89:94:b4:bf:4d:e4:32:ef:65:
                    71:e5:58:2a:ee:bb:64:82:b7:de:27:38:c0:97:8f:
                    21:be:05:ce:c6:fe:a1:81:85:78:cf:a9:4c:bc:13:
                    b8:7d:37:a3:b9:10:a8:e2:0a:23:b8:11:81:cc:b0:
                    d6:b5:ea:38:24:ba:cd:44:ee:30:f3:59:d4:74:3f:
                    2e:40:d4:77:d1:2e:7a:e4:68:81:88:90:5f:6e:64:
                    e7:39:54:42:56:17:25:93:36:2a:df:6c:d5:45:2b:
                    ad:27:0d:48:a7:dc:62:f2:db:5e:9f:b0:00:cc:ef:
                    bf:13:7c:2c:01:12:a0:d0:98:0e:3c:3a:1e:e0:d1:
                    ce:ab:f0:35:0e:33:4b:45:bd:5f:1c:cf:bb:fe:0d:
                    bd:da:5c:be:83:c8:9e:a5:a6:4f:a5:ec:d2:3e:8b:
                    27:3b:5b:09:bc:e6:30:70:90:e5:7b:3e:3f:28:1a:
                    ef:19:e0:ce:62:aa:aa:db:3f:d3:bc:14:ec:2f:d9:
                    cb:27:a2:aa:2e:c9:0e:f1:fa:14:d6:40:11:3c:eb:
                    a7:4b:54:25:1f:70:dd:b7:86:81:16:c1:a7:e5:52:
                    b3:d9:aa:2f:de:db:91:af:74:72:79:c3:6f:15:bb:
                    70:ee:04:e9:69:9c:58:60:cf:05:8a:80:1c:a8:26:
                    68:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:62:90:05:0C:39:85:B7:F6:E1:AC:80:34:9E:4B:2C:C4:BA:2A:A5
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3133382e3131372e3131312e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:fc:47:d0:61:2d:1f:cd:94:64:b5:d5:62:99:e3:f0:11:6d:
         a0:44:0e:96:35:6e:5e:ad:ff:f7:f3:c9:3d:97:5d:1f:0b:47:
         c1:0e:69:95:16:41:3e:a9:38:7c:da:f7:fc:98:f1:f6:26:21:
         42:64:8a:47:78:00:6f:5b:e0:08:8d:6f:fe:fe:39:bf:a7:38:
         d8:d5:f8:23:39:71:e6:fa:b8:43:fb:8e:2f:a5:d2:0f:b3:2b:
         bd:ee:aa:52:a3:58:e0:4c:d7:ec:24:22:2a:0f:5d:10:ac:43:
         92:4f:19:ed:44:e8:a6:f5:37:b6:22:79:34:c0:87:15:cf:e0:
         bd:c2:a0:25:93:31:de:7e:0d:1e:17:2f:23:58:5e:86:cd:bd:
         5b:82:11:af:8e:8a:c9:b1:28:ad:99:09:bf:83:d8:59:1e:a3:
         0a:81:97:69:58:bc:cf:0e:44:7b:14:5f:56:f4:5c:05:5b:6f:
         cc:37:7b:ce:de:a9:54:1a:18:68:f2:b8:7e:82:72:e4:a8:36:
         91:47:62:bc:75:2c:cc:a3:b2:73:9b:fd:bf:2e:1d:c5:80:9a:
         51:dd:8d:9b:7f:3f:0e:4e:8c:0e:83:36:59:42:de:b8:0b:73:
         bd:f9:44:29:a9:85:fd:64:b2:d1:32:86:6c:96:e1:3c:31:ad:
         80:d0:97:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:31 2025 by rpki-client