Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38302e302f32322d3234203d3e203631353030.roa
File:                     3133382e3132312e38302e302f32322d3234203d3e203631353030.roa (raw, json)
Hash identifier:          Jqde431ul6L2xB2p693fRH21PyQx0aufEzqo9OWu8mA=
Subject key identifier:   5E:50:FF:29:4C:6E:8E:C6:12:EE:CA:34:65:87:FA:F3:5B:53:14:C3
Certificate issuer:       /CN=A7C599055F36D3C6330474B282FC543C5378F8BA
Certificate serial:       453A9BB86F1EA6F3CCC0337F95FAFD93475CBA7F
Authority key identifier: A7:C5:99:05:5F:36:D3:C6:33:04:74:B2:82:FC:54:3C:53:78:F8:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38302e302f32322d3234203d3e203631353030.roa
Signing time:             Tue 04 Feb 2025 17:59:54 +0000
ROA not before:           Tue 04 Feb 2025 17:54:54 +0000
ROA not after:            Tue 03 Feb 2026 17:59:54 +0000
asID:                     61500
IP address blocks:        138.121.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3a:9b:b8:6f:1e:a6:f3:cc:c0:33:7f:95:fa:fd:93:47:5c:ba:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C599055F36D3C6330474B282FC543C5378F8BA
        Validity
            Not Before: Feb  4 17:54:54 2025 GMT
            Not After : Feb  3 17:59:54 2026 GMT
        Subject: CN=5E50FF294C6E8EC612EECA346587FAF35B5314C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:97:c4:75:3b:8c:21:13:9e:69:c4:e3:24:
                    22:53:fb:d2:e3:fd:d9:7d:3c:34:48:12:2e:e0:82:
                    66:8e:77:49:2f:b8:f1:c1:92:3a:6a:91:8b:67:f9:
                    df:9a:af:62:72:5d:de:a3:52:9a:cf:59:0b:a9:c1:
                    85:d4:99:5c:30:a1:4d:40:f4:83:77:3a:6e:0d:ae:
                    8d:71:da:8e:01:4d:63:05:80:fe:ca:6e:9f:70:3f:
                    c3:06:03:26:84:27:93:7e:b1:d0:4b:1c:54:a5:15:
                    03:d8:27:3b:23:b0:39:6f:f7:ae:b4:0c:39:42:c4:
                    0c:27:00:03:f2:24:ef:07:92:f4:62:2c:55:36:08:
                    cd:6f:a9:26:d2:07:69:e5:ae:a3:71:af:83:4f:c2:
                    24:1e:a5:ef:a7:3f:9b:3a:25:60:21:96:f0:29:cb:
                    a5:bd:40:a1:23:a9:79:52:65:1e:dc:67:55:c5:27:
                    77:02:f4:25:e1:c3:83:7c:b9:a5:3a:41:1f:b0:64:
                    9b:ef:2e:2e:96:f3:2c:62:66:e1:b3:41:dd:36:86:
                    15:d1:6a:db:50:7a:a9:e8:a9:39:aa:3b:1f:a7:d9:
                    2a:d6:a2:fa:c9:95:00:7f:65:4b:61:5d:bb:e7:fc:
                    3c:18:66:8f:8a:e5:75:e2:2a:8d:95:d9:2c:34:db:
                    46:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:50:FF:29:4C:6E:8E:C6:12:EE:CA:34:65:87:FA:F3:5B:53:14:C3
            X509v3 Authority Key Identifier:
                keyid:A7:C5:99:05:5F:36:D3:C6:33:04:74:B2:82:FC:54:3C:53:78:F8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/A7C599055F36D3C6330474B282FC543C5378F8BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7C599055F36D3C6330474B282FC543C5378F8BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAC80224F9F29323054FF7E2AA73EFCAEEF0261ACC925E2590458FBC90B4F521/0/3133382e3132312e38302e302f32322d3234203d3e203631353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:17:c5:42:31:ac:3e:8f:6d:f6:21:6b:16:98:27:5f:85:99:
         76:f2:a7:b0:ec:82:cd:9b:01:68:5e:50:8c:af:73:77:9b:1a:
         97:47:d3:fe:e5:c1:42:2d:87:c6:e3:92:02:64:43:79:08:be:
         f5:5f:c2:b1:08:d9:ff:e9:88:c9:2a:b0:4d:65:3a:e4:ca:0b:
         9e:55:37:c9:99:37:2f:84:11:63:82:72:1e:be:b3:bc:12:f1:
         d6:c5:c3:11:c8:92:7a:9b:f6:0a:64:89:5c:4d:a4:5e:d2:5c:
         a4:8b:64:c6:2a:11:98:14:26:e4:34:2a:d7:2c:e1:31:41:43:
         e5:81:16:ea:6c:7f:0e:4f:1d:9c:b8:63:dd:c2:30:e3:0a:0d:
         bb:97:5e:b8:5b:a8:23:3d:01:bf:28:d2:a9:2f:54:15:41:34:
         59:d4:99:6d:7d:01:1f:6a:ce:88:d3:f5:44:1f:aa:d6:05:13:
         cf:a5:0d:0f:7a:7e:95:81:12:12:fa:9e:0a:4a:1a:71:70:5f:
         f2:ff:47:14:45:78:5c:df:31:46:22:a6:78:ad:8c:eb:85:20:
         69:5d:50:b0:ea:cf:a1:1c:59:7f:54:bc:37:a2:36:d6:d0:f7:
         77:4a:65:de:39:ba:8b:3c:8e:7a:2e:50:9d:9e:cb:fb:37:c4:
         6e:15:7f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:34:58 2025 by rpki-client