Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/3133382e3131382e3231322e302f32322d3234203d3e20323634373338.roa
File:                     3133382e3131382e3231322e302f32322d3234203d3e20323634373338.roa (raw, json)
Hash identifier:          ipw6+d4m4tRXXha8jnbz5bUMlzf54fzuE2aK7RMX8GI=
Subject key identifier:   F0:83:40:C5:E1:A4:91:9D:A3:9D:F4:C3:33:92:C4:27:02:A6:C0:13
Certificate issuer:       /CN=B2CC06647FEB4440D4723322EA183C8FFEBA89E4
Certificate serial:       06173D303BF36370D21047C0649D73884122FBAE
Authority key identifier: B2:CC:06:64:7F:EB:44:40:D4:72:33:22:EA:18:3C:8F:FE:BA:89:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/3133382e3131382e3231322e302f32322d3234203d3e20323634373338.roa
Signing time:             Tue 04 Feb 2025 18:21:30 +0000
ROA not before:           Tue 04 Feb 2025 18:16:30 +0000
ROA not after:            Tue 03 Feb 2026 18:21:30 +0000
asID:                     264738
IP address blocks:        138.118.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:17:3d:30:3b:f3:63:70:d2:10:47:c0:64:9d:73:88:41:22:fb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CC06647FEB4440D4723322EA183C8FFEBA89E4
        Validity
            Not Before: Feb  4 18:16:30 2025 GMT
            Not After : Feb  3 18:21:30 2026 GMT
        Subject: CN=F08340C5E1A4919DA39DF4C33392C42702A6C013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:db:63:e1:0f:d0:3a:1f:2d:3d:da:08:96:
                    a6:40:b1:01:d5:2a:8d:62:eb:9d:bb:0e:d0:97:e4:
                    96:53:13:e9:7a:04:4b:2c:ff:3b:e7:3f:d5:ba:a6:
                    dd:51:f1:30:b8:76:49:84:83:44:d3:8b:43:73:bf:
                    31:2a:1d:17:ad:d8:12:66:c0:06:90:f6:a2:f0:c1:
                    7b:c5:9f:cd:34:c1:17:44:64:be:b1:d5:d9:69:29:
                    a8:10:73:f0:34:bc:67:b5:a3:fb:ce:f8:40:af:ca:
                    55:8f:95:df:6d:f8:62:b8:4c:02:93:32:6f:61:1f:
                    a3:06:7a:bd:0d:bf:9a:68:59:d6:e0:14:ac:53:ed:
                    d4:46:2b:52:bc:c4:98:e7:6c:90:09:9e:67:7a:b2:
                    41:ec:73:ce:74:71:64:dc:9d:63:56:60:57:59:85:
                    ac:8c:48:f5:69:80:c9:41:4f:3a:ae:aa:b8:40:67:
                    a9:c7:6f:01:60:82:fb:bc:72:8a:83:78:3c:d9:ce:
                    b1:db:16:28:d4:81:09:a5:2b:03:bd:12:ca:52:6d:
                    c5:fc:de:45:fd:96:be:03:8f:b2:60:e2:6a:04:11:
                    c7:b0:59:d5:ae:ab:00:fa:ce:1c:ee:fd:aa:1e:b0:
                    0e:4b:82:44:de:68:ff:96:d7:68:30:97:71:79:97:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:83:40:C5:E1:A4:91:9D:A3:9D:F4:C3:33:92:C4:27:02:A6:C0:13
            X509v3 Authority Key Identifier:
                keyid:B2:CC:06:64:7F:EB:44:40:D4:72:33:22:EA:18:3C:8F:FE:BA:89:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/3133382e3131382e3231322e302f32322d3234203d3e20323634373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:04:43:61:0b:fe:79:24:e3:9d:f9:a3:f0:ad:48:80:f8:9f:
         8e:07:54:69:22:21:6a:7f:cd:99:61:2f:0e:ec:db:fe:fc:d9:
         54:46:8e:c1:37:e7:a7:55:05:25:fc:6f:b3:16:2b:7f:d2:31:
         d1:45:b0:50:c7:9e:af:08:e7:b5:d5:63:12:e5:e0:77:dc:74:
         3b:c4:33:1e:88:1c:b6:87:ee:b1:2e:a2:58:f3:17:01:c0:91:
         6a:36:b6:41:35:9f:d8:63:88:37:28:f8:5b:97:d9:82:0a:89:
         58:9f:33:01:d4:6f:93:2a:7a:cf:f6:3d:73:0a:d3:e7:bb:ad:
         14:8b:bf:98:0c:55:84:fb:8b:50:d2:e3:5f:8c:0f:fe:cc:57:
         ae:e5:c9:9d:3a:c8:64:2d:34:c7:0e:d7:bc:9c:5c:b3:c9:ee:
         72:48:71:41:36:91:da:fd:2c:79:2d:d8:c2:43:89:9e:7e:b0:
         45:34:da:11:56:5f:0a:42:9e:8e:50:5f:2c:e5:18:0c:9f:c3:
         2f:c5:b7:3b:f4:97:72:af:dd:87:6f:31:eb:2a:53:33:38:c4:
         07:a1:cb:aa:7f:2d:0e:bc:d0:ec:ad:00:90:77:11:ad:04:be:
         f6:43:21:b5:a4:84:2b:8a:80:30:d7:26:dd:e5:dc:50:6e:3b:
         af:5f:05:b4
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUBhc9MDvzY3DSEEfAZJ1ziEEi+64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJDQzA2NjQ3RkVCNDQ0MEQ0NzIzMzIyRUExODNDOEZG
RUJBODlFNDAeFw0yNTAyMDQxODE2MzBaFw0yNjAyMDMxODIxMzBaMDMxMTAvBgNV
BAMTKEYwODM0MEM1RTFBNDkxOURBMzlERjRDMzMzOTJDNDI3MDJBNkMwMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gNtj4Q/QOh8tPdoIlqZAsQHV
Ko1i6527DtCX5JZTE+l6BEss/zvnP9W6pt1R8TC4dkmEg0TTi0NzvzEqHRet2BJm
wAaQ9qLwwXvFn800wRdEZL6x1dlpKagQc/A0vGe1o/vO+ECvylWPld9t+GK4TAKT
Mm9hH6MGer0Nv5poWdbgFKxT7dRGK1K8xJjnbJAJnmd6skHsc850cWTcnWNWYFdZ
hayMSPVpgMlBTzquqrhAZ6nHbwFggvu8coqDeDzZzrHbFijUgQmlKwO9EspSbcX8
3kX9lr4Dj7Jg4moEEcewWdWuqwD6zhzu/aoesA5LgkTeaP+W12gwl3F5lw+NAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU8INAxeGkkZ2jnfTDM5LEJwKmwBMwHwYDVR0j
BBgwFoAUsswGZH/rREDUcjMi6hg8j/66ieQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRkE3MkE1QjRGRjM5MkMxOEI4Qjg1ODQyQjU1NDM1NzdF
M0IwRTFGMzJDRENCMTJBQ0Y0MTNBNzM4OUY2RjBELzAvQjJDQzA2NjQ3RkVCNDQ0
MEQ0NzIzMzIyRUExODNDOEZGRUJBODlFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMkNDMDY2NDdGRUI0NDQwRDQ3
MjMzMjJFQTE4M0M4RkZFQkE4OUU0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUZBNzJBNUI0RkYzOTJDMThCOEI4NTg0MkI1NTQzNTc3RTNCMEUxRjMy
Q0RDQjEyQUNGNDEzQTczODlGNkYwRC8wLzMxMzMzODJlMzEzMTM4MmUzMjMxMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzMzMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
dtQwDQYJKoZIhvcNAQELBQADggEBALkEQ2EL/nkk4535o/CtSID4n44HVGkiIWp/
zZlhLw7s2/782VRGjsE356dVBSX8b7MWK3/SMdFFsFDHnq8I57XVYxLl4HfcdDvE
Mx6IHLaH7rEuoljzFwHAkWo2tkE1n9hjiDco+FuX2YIKiVifMwHUb5Mqes/2PXMK
0+e7rRSLv5gMVYT7i1DS41+MD/7MV67lyZ06yGQtNMcO17ycXLPJ7nJIcUE2kdr9
LHkt2MJDiZ5+sEU02hFWXwpCno5QXyzlGAyfwy/Ftzv0l3Kv3YdvMesqUzM4xAeh
y6p/LQ680OytAJB3Ea0EvvZDIbWkhCuKgDDXJt3l3FBuO69fBbQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:25:35 2025 by rpki-client