Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/3133382e39372e3234382e302f32322d3234203d3e20323634383231.roa
File:                     3133382e39372e3234382e302f32322d3234203d3e20323634383231.roa (raw, json)
Hash identifier:          vfgh6G2RKd5aEwQ/ACQa0BTyL9+WlZdh3VaMQqqPCHs=
Subject key identifier:   FC:7E:15:93:64:D4:77:C2:51:EB:AF:9A:38:D9:1E:E0:CC:E8:2B:7A
Certificate issuer:       /CN=6A21791828146BC17DAE86EA069BF125DBBC3007
Certificate serial:       550942BBA17D9131F31A8AACFEC0958B634907AA
Authority key identifier: 6A:21:79:18:28:14:6B:C1:7D:AE:86:EA:06:9B:F1:25:DB:BC:30:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21791828146BC17DAE86EA069BF125DBBC3007.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/3133382e39372e3234382e302f32322d3234203d3e20323634383231.roa
Signing time:             Tue 04 Feb 2025 18:26:49 +0000
ROA not before:           Tue 04 Feb 2025 18:21:49 +0000
ROA not after:            Tue 03 Feb 2026 18:26:49 +0000
asID:                     264821
IP address blocks:        138.97.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/6A21791828146BC17DAE86EA069BF125DBBC3007.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/6A21791828146BC17DAE86EA069BF125DBBC3007.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21791828146BC17DAE86EA069BF125DBBC3007.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:09:42:bb:a1:7d:91:31:f3:1a:8a:ac:fe:c0:95:8b:63:49:07:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A21791828146BC17DAE86EA069BF125DBBC3007
        Validity
            Not Before: Feb  4 18:21:49 2025 GMT
            Not After : Feb  3 18:26:49 2026 GMT
        Subject: CN=FC7E159364D477C251EBAF9A38D91EE0CCE82B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2c:09:0b:07:a4:ec:6a:64:75:89:5e:1e:96:
                    27:fb:70:63:0d:d1:84:df:f5:0d:ff:7e:4d:1e:5a:
                    60:7f:55:ee:e7:f6:6e:fc:5e:d5:80:03:1a:a8:3d:
                    cd:1d:4b:75:bf:ec:0f:31:8a:cb:68:8f:03:9f:0b:
                    55:59:6c:5b:9c:b7:a8:95:da:f6:89:2b:76:6d:96:
                    d1:3b:9a:0d:db:c1:7d:50:d2:73:c0:f7:6c:b5:09:
                    ab:84:a4:14:0e:08:30:ca:63:75:3c:3d:29:61:2a:
                    4f:68:85:7f:f5:1a:f9:93:47:aa:c5:98:6a:a5:1c:
                    d3:d5:af:23:5c:65:96:18:84:8f:2b:2f:72:2b:50:
                    6d:ea:b4:9a:75:7c:be:38:1a:3f:4a:21:cd:bc:ed:
                    06:b9:83:cf:63:f0:cd:27:b8:21:3a:e2:b0:3e:bc:
                    c9:46:47:3d:2f:40:f9:08:97:c2:94:1b:4b:cb:22:
                    f7:0d:e5:3c:95:65:47:6b:db:c8:76:35:c8:80:95:
                    27:1b:8b:21:dd:27:9c:97:ea:fd:de:6f:42:aa:77:
                    aa:6f:c3:6f:c3:e8:a8:d2:3f:8c:0a:bb:11:11:bb:
                    1c:b5:22:74:37:bc:c8:fd:28:28:6e:0a:98:99:51:
                    43:f6:82:a2:71:06:54:1b:f2:08:90:2c:2d:db:18:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7E:15:93:64:D4:77:C2:51:EB:AF:9A:38:D9:1E:E0:CC:E8:2B:7A
            X509v3 Authority Key Identifier:
                keyid:6A:21:79:18:28:14:6B:C1:7D:AE:86:EA:06:9B:F1:25:DB:BC:30:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/6A21791828146BC17DAE86EA069BF125DBBC3007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21791828146BC17DAE86EA069BF125DBBC3007.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE2A5A0E8687661639744042ED8D0F05DF8C34B28E4E6487F9F9EB60D69232BA/0/3133382e39372e3234382e302f32322d3234203d3e20323634383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:92:bb:d9:57:c1:46:b8:79:4b:1e:db:0c:48:5c:32:c3:7a:
         dd:a6:42:98:e5:c8:2b:89:03:8c:56:e2:68:21:83:36:82:90:
         07:a3:87:c1:76:fc:37:24:f9:7b:de:60:f2:56:f5:42:8d:e9:
         90:38:50:9a:3b:32:e3:8a:62:28:87:dc:89:b2:52:ff:fc:b9:
         76:99:42:74:2a:b7:38:5a:e4:d8:80:ed:3e:51:02:07:53:44:
         88:9f:b3:bc:17:4f:49:3a:35:b1:ac:52:06:8b:ee:b2:bf:11:
         e2:97:86:cf:6c:67:a8:cf:0b:ec:e8:9d:d4:2c:1f:f2:f7:2c:
         bd:64:a1:ae:af:c3:9d:7d:b3:97:5a:61:ed:bd:22:19:ea:de:
         0e:35:56:0b:09:15:18:f2:59:2b:cc:32:23:9d:7a:9a:4d:72:
         07:18:00:61:8b:4a:84:ac:0d:c3:c7:35:69:45:eb:11:f3:3a:
         3b:18:bb:0d:62:e6:28:b9:31:84:7e:42:ff:ea:b1:ae:ee:f2:
         c0:5d:7c:86:a4:d8:cc:79:05:a0:3b:f5:c8:83:c0:e9:1b:4c:
         79:3b:f3:06:9d:c0:d3:c6:16:e3:aa:54:a6:75:3a:77:82:a1:
         d4:a2:e9:4e:79:30:4f:09:94:ca:27:04:4c:47:e2:9f:63:e5:
         a6:21:fe:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:56 2025 by rpki-client