Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3133382e3131382e38302e302f32322d3234203d3e203532323633.roa
File:                     3133382e3131382e38302e302f32322d3234203d3e203532323633.roa (raw, json)
Hash identifier:          +tpnvgwn+fekYn4fFlRp22qfms/lZ40WHjkbzkol9vs=
Subject key identifier:   76:7F:4F:33:6B:E6:CF:6B:77:81:0B:7A:24:30:09:7D:AA:E3:C6:CF
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       7F78D320BB8A36AB765965145D07E51FC7ABD26B
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3133382e3131382e38302e302f32322d3234203d3e203532323633.roa
Signing time:             Tue 04 Feb 2025 18:48:26 +0000
ROA not before:           Tue 04 Feb 2025 18:43:26 +0000
ROA not after:            Tue 03 Feb 2026 18:48:26 +0000
asID:                     52263
IP address blocks:        138.118.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:78:d3:20:bb:8a:36:ab:76:59:65:14:5d:07:e5:1f:c7:ab:d2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Feb  4 18:43:26 2025 GMT
            Not After : Feb  3 18:48:26 2026 GMT
        Subject: CN=767F4F336BE6CF6B77810B7A2430097DAAE3C6CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:1d:fb:85:ab:5b:b4:4a:9e:9f:60:78:82:
                    01:49:aa:7b:93:32:6f:e7:bf:d7:bb:bd:18:fb:f5:
                    e5:09:81:93:45:a0:fd:f5:8f:13:09:31:c4:64:71:
                    d8:fb:ce:b0:a3:0b:ad:6b:dd:53:c0:8c:0c:39:67:
                    41:37:f3:62:7e:e1:b8:93:11:46:78:89:4a:1c:de:
                    7f:0f:ca:88:ec:32:8f:99:6e:9a:be:f0:14:5c:b8:
                    11:cf:53:7c:1b:0f:0f:ac:f9:40:8c:cf:13:9a:cc:
                    72:c5:d5:c3:a6:02:8a:56:8e:76:f9:4c:61:69:ce:
                    cf:3f:53:38:e5:fd:ed:d5:d9:13:af:f4:44:ed:4d:
                    90:c5:21:3b:51:9f:a4:3e:5d:e6:8b:18:96:3d:46:
                    85:97:b0:26:4e:91:14:ec:f5:30:6c:96:78:e4:38:
                    97:a0:e9:48:9a:19:ce:97:27:3a:3d:9f:b0:0d:52:
                    e5:49:f7:06:df:ba:4c:61:b2:75:b6:de:93:0c:db:
                    39:2a:42:61:0d:27:bc:8d:54:61:10:d9:0e:f8:f4:
                    36:82:74:75:0b:07:98:96:80:7e:7e:d0:1c:95:3c:
                    e3:18:ec:d7:46:6c:9a:e1:bf:2d:af:ee:25:19:52:
                    99:5f:ce:b4:64:c4:e5:a0:73:01:9c:38:dc:96:3b:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7F:4F:33:6B:E6:CF:6B:77:81:0B:7A:24:30:09:7D:AA:E3:C6:CF
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3133382e3131382e38302e302f32322d3234203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:47:8a:66:67:e1:aa:89:85:83:9f:31:ad:e6:61:e4:1b:67:
         23:2a:45:b1:84:b7:79:d2:9e:13:e4:35:cd:50:e8:5a:ec:f2:
         46:3a:eb:3e:ea:c7:d4:be:bf:13:49:ad:a1:6c:c6:97:61:dd:
         e9:f2:22:be:0d:88:31:ac:1c:b0:8f:66:19:58:3e:09:9b:a5:
         20:a7:ac:b5:f6:4d:bf:75:01:74:e3:d5:1e:74:ae:0b:fa:dd:
         84:de:a7:fd:d3:01:de:c0:eb:d7:c4:92:c6:d5:12:e2:a4:e7:
         6e:a0:59:02:20:9e:a7:9d:67:d8:bd:2d:be:f1:ad:c4:22:c9:
         bc:38:38:79:b5:87:90:ba:ce:14:98:0e:35:cc:1a:0e:ef:02:
         f4:9d:d5:ce:d6:b8:e8:31:cb:fc:65:96:13:4c:42:d9:cc:78:
         8e:80:24:ff:95:bc:e6:8a:72:3c:60:5a:5f:c1:fc:6c:2a:9e:
         21:f0:76:ed:d2:a2:ab:07:fb:f8:4b:b4:02:8f:9f:72:4f:54:
         4e:e2:98:fd:bc:b8:1f:3e:26:c4:4c:e0:c8:6a:2a:61:13:a0:
         27:c4:19:3c:72:3f:3b:9d:ec:f9:70:04:ed:8f:a3:9a:43:7a:
         0a:57:2b:a1:e2:ad:5e:8f:e9:cd:90:6c:21:a7:d4:2e:01:e0:
         dd:b3:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:18 2025 by rpki-client