Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/3133382e3132312e342e302f32342d3234203d3e203631343939.roa
File:                     3133382e3132312e342e302f32342d3234203d3e203631343939.roa (raw, json)
Hash identifier:          EFmmHzFnibZDKQWwoTF1HmikiXNKogI8ZLPz+QM6QKE=
Subject key identifier:   58:3F:51:6C:41:71:A9:93:71:41:B5:41:38:5D:9C:B9:24:CA:2B:1B
Certificate issuer:       /CN=0ACE4851157C591E6DB98282567BE62A5CD0F826
Certificate serial:       4329B2BD31025D20828DC9E4642CC60591BD0A3F
Authority key identifier: 0A:CE:48:51:15:7C:59:1E:6D:B9:82:82:56:7B:E6:2A:5C:D0:F8:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/3133382e3132312e342e302f32342d3234203d3e203631343939.roa
Signing time:             Tue 04 Feb 2025 18:53:40 +0000
ROA not before:           Tue 04 Feb 2025 18:48:40 +0000
ROA not after:            Tue 03 Feb 2026 18:53:40 +0000
asID:                     61499
IP address blocks:        138.121.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:29:b2:bd:31:02:5d:20:82:8d:c9:e4:64:2c:c6:05:91:bd:0a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ACE4851157C591E6DB98282567BE62A5CD0F826
        Validity
            Not Before: Feb  4 18:48:40 2025 GMT
            Not After : Feb  3 18:53:40 2026 GMT
        Subject: CN=583F516C4171A9937141B541385D9CB924CA2B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:8b:b5:0d:0f:59:58:d6:25:5f:2b:8e:25:
                    b0:95:11:72:32:ee:1c:37:f0:42:36:de:a5:9e:b4:
                    8e:fc:cc:bc:1e:70:1e:51:6d:45:f2:df:ae:28:9f:
                    ba:85:c8:5a:7a:52:14:8e:d3:b8:b8:62:af:e8:a0:
                    f1:b9:c9:cd:09:54:ff:b6:c0:87:1b:9c:93:6f:b2:
                    aa:6a:4f:8c:91:8b:2c:74:9c:d4:cb:ec:c2:80:8c:
                    c7:e9:71:50:d2:07:1a:d6:da:46:e5:3d:92:44:e8:
                    28:ae:0c:3b:72:3f:d3:b9:b5:b1:e8:a0:1c:b9:af:
                    31:dc:9e:1a:c2:76:33:d2:0a:02:68:ba:ba:20:a9:
                    46:a2:1a:a3:b3:c5:4a:83:c9:1d:c8:50:77:d0:79:
                    59:b2:f0:8a:c8:34:f1:b6:44:93:33:c9:37:e3:70:
                    52:68:d8:67:6a:23:66:14:1d:1c:49:a8:c2:20:2b:
                    1a:24:1a:80:84:b4:d0:e9:12:96:12:35:9a:24:d6:
                    d6:22:5a:7d:8a:e7:e7:6a:9f:73:75:f4:29:01:9d:
                    cb:23:96:2e:81:32:39:39:8b:3c:12:24:c4:39:7c:
                    83:6c:0b:a8:fe:eb:4b:98:bc:a6:74:ac:6a:80:fb:
                    43:f1:a2:07:70:75:00:11:c7:bc:ac:11:db:f2:fc:
                    cb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3F:51:6C:41:71:A9:93:71:41:B5:41:38:5D:9C:B9:24:CA:2B:1B
            X509v3 Authority Key Identifier:
                keyid:0A:CE:48:51:15:7C:59:1E:6D:B9:82:82:56:7B:E6:2A:5C:D0:F8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ACE4851157C591E6DB98282567BE62A5CD0F826.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2E086BB9268C8A1DAD99E3693ECF4E56298ED587007D566DB2B75E9273E6D63/0/3133382e3132312e342e302f32342d3234203d3e203631343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:3a:33:b8:5c:00:cc:e3:8f:d8:c8:37:99:e3:e0:32:67:19:
         8d:e1:6d:96:81:1a:97:56:7d:50:1a:75:96:04:4e:d2:f8:18:
         f4:99:9d:c2:d4:ff:cf:d0:d7:f4:b6:ff:cd:46:46:9d:a6:aa:
         37:8f:c4:eb:10:8c:4d:29:a5:8c:8c:7b:af:04:c3:99:ba:67:
         da:be:b3:19:84:4f:66:2b:b9:18:da:13:5b:8f:80:e1:fc:66:
         0f:23:68:b9:6e:36:83:c9:20:c9:75:96:3f:74:e1:0d:73:60:
         bc:8c:34:42:1e:eb:9d:16:fa:0b:e8:22:20:4e:4d:20:48:c9:
         88:ed:33:5c:21:93:16:84:33:ec:18:f2:b3:ce:ae:e3:0f:eb:
         52:55:a5:3a:6d:bd:39:0d:18:fb:05:77:e4:4e:58:03:ac:87:
         9e:e7:cb:b9:13:11:d3:b7:f4:e3:aa:60:12:aa:f4:f1:f2:3e:
         a8:b0:cb:90:c6:7c:9f:8b:5f:53:9f:a2:70:59:36:f4:1c:c3:
         26:7d:e1:10:86:fa:b2:4f:a0:0a:a7:24:50:ef:cc:7b:dd:aa:
         16:a4:6c:e1:03:e7:22:dc:02:58:7b:1c:4a:98:33:89:c9:26:
         22:4e:0b:74:cb:8c:5b:f9:eb:c6:96:2a:ee:1e:e4:c6:67:b0:
         bc:f6:3f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:33 2025 by rpki-client