Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/3133382e3131372e3135362e302f32322d3234203d3e203532333637.roa
File:                     3133382e3131372e3135362e302f32322d3234203d3e203532333637.roa (raw, json)
Hash identifier:          W2Z9o+KOA+Ud98kEX+e/m7P1IWMfYPx3Q+Lm3qLGPCs=
Subject key identifier:   6C:97:4A:9F:17:37:8C:89:07:EC:F9:03:86:98:B2:4D:D8:63:50:6C
Certificate issuer:       /CN=1FDF2DE08054C55BA3B5B59C734302F868234F58
Certificate serial:       61BE0B9D45BAC7181C9BBDD1A0C03719C295B77D
Authority key identifier: 1F:DF:2D:E0:80:54:C5:5B:A3:B5:B5:9C:73:43:02:F8:68:23:4F:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/3133382e3131372e3135362e302f32322d3234203d3e203532333637.roa
Signing time:             Tue 04 Feb 2025 20:00:02 +0000
ROA not before:           Tue 04 Feb 2025 19:55:02 +0000
ROA not after:            Tue 03 Feb 2026 20:00:02 +0000
asID:                     52367
IP address blocks:        138.117.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:be:0b:9d:45:ba:c7:18:1c:9b:bd:d1:a0:c0:37:19:c2:95:b7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FDF2DE08054C55BA3B5B59C734302F868234F58
        Validity
            Not Before: Feb  4 19:55:02 2025 GMT
            Not After : Feb  3 20:00:02 2026 GMT
        Subject: CN=6C974A9F17378C8907ECF9038698B24DD863506C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:21:71:8c:7b:04:61:44:dc:38:ec:8f:70:f9:
                    53:9d:09:95:f9:42:f2:7c:7a:f4:4b:25:88:11:4b:
                    e8:5f:64:cf:ff:99:5d:90:4a:15:82:86:31:e6:81:
                    1b:1d:7b:ea:57:c3:73:b4:d4:6d:0c:5f:ce:a0:fb:
                    0e:4e:a2:29:8f:8f:ce:b4:5d:91:bd:2d:8e:15:0a:
                    f1:93:6f:47:39:ca:82:c5:f9:7a:45:2d:a5:76:6f:
                    f2:bf:7d:66:59:39:64:96:b9:c1:90:47:33:56:6e:
                    84:d6:74:fc:05:da:48:f9:19:af:82:68:42:31:ac:
                    1e:40:40:02:9b:68:d3:6d:e9:30:b4:f4:1c:75:92:
                    9a:92:ae:9f:38:1a:0a:3f:23:7a:3e:53:b0:2b:de:
                    07:52:6d:ae:2c:02:da:a7:2d:4c:2c:0c:14:ba:ae:
                    8e:e2:78:2b:62:d5:e7:13:96:a4:50:ee:ab:ab:49:
                    ba:31:c5:73:12:61:bb:dc:66:03:a2:d2:57:d4:c4:
                    17:81:2c:c7:c4:1f:da:1e:a8:a3:8e:7f:61:11:7e:
                    95:30:b4:9c:d3:15:0b:29:62:fd:72:a3:f9:91:2a:
                    b6:c6:31:50:49:a5:34:5d:f3:f7:d9:79:a9:25:e3:
                    d0:fe:c7:10:8e:c4:c7:24:32:98:25:19:48:98:31:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:97:4A:9F:17:37:8C:89:07:EC:F9:03:86:98:B2:4D:D8:63:50:6C
            X509v3 Authority Key Identifier:
                keyid:1F:DF:2D:E0:80:54:C5:5B:A3:B5:B5:9C:73:43:02:F8:68:23:4F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/3133382e3131372e3135362e302f32322d3234203d3e203532333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:e0:df:be:18:eb:3d:1b:16:f9:c3:63:4c:8b:86:3e:24:
         fa:ce:a0:a1:f3:3c:d0:bb:3c:36:d4:b1:72:18:5e:28:64:fa:
         4c:f2:6c:08:44:01:cc:77:49:9f:df:d1:fb:12:51:51:5d:49:
         09:c4:63:53:79:d1:71:24:5f:0f:d1:61:59:cd:d5:39:97:27:
         d5:92:76:d3:86:b9:1d:de:fa:c8:24:3b:9d:d9:e4:db:d0:ce:
         65:25:31:6c:75:b7:77:f0:be:69:ce:ec:b3:f1:84:13:28:5c:
         42:2c:75:6d:4c:d4:39:39:be:98:6d:03:bb:ad:85:38:b8:19:
         08:23:e2:0b:ff:23:d9:6e:a2:92:b0:a4:e3:80:35:f4:70:d5:
         8a:04:6e:3d:b0:c3:75:fc:a3:ce:69:36:ce:cd:09:51:de:3d:
         c4:fe:f9:56:a2:ea:aa:be:1e:9f:6c:a9:44:bb:7b:ea:5f:05:
         6a:85:da:17:0b:32:0e:a3:0f:01:16:8f:d3:a2:5a:50:1a:ef:
         49:3d:3f:06:c1:81:90:7b:f7:f5:fd:f0:fc:80:74:56:ca:97:
         61:c4:c7:c5:7f:8f:90:e0:e2:55:1b:f3:d0:0f:c1:7f:cf:41:
         23:00:74:15:94:e2:d1:76:a3:8d:31:69:bd:29:3c:dc:53:1d:
         ab:09:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:57:06 2025 by rpki-client