Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/3133382e33362e3235322e302f32322d3234203d3e20323639373333.roa
File:                     3133382e33362e3235322e302f32322d3234203d3e20323639373333.roa (raw, json)
Hash identifier:          8QphQEQKjjq2vSSDJyAPLB7itWDqJ/PVplCDENDK92c=
Subject key identifier:   95:A7:CC:FE:EF:03:46:83:73:D6:88:5B:8A:B9:AC:CA:54:11:1B:F9
Certificate issuer:       /CN=342CE218F6DBE708D87221F8FFFD2B182B5A6F8C
Certificate serial:       129734B57B7EBD2AE51ACDB38FCAED50558FE76A
Authority key identifier: 34:2C:E2:18:F6:DB:E7:08:D8:72:21:F8:FF:FD:2B:18:2B:5A:6F:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/3133382e33362e3235322e302f32322d3234203d3e20323639373333.roa
Signing time:             Tue 04 Feb 2025 20:06:18 +0000
ROA not before:           Tue 04 Feb 2025 20:01:18 +0000
ROA not after:            Tue 03 Feb 2026 20:06:18 +0000
asID:                     269733
IP address blocks:        138.36.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:97:34:b5:7b:7e:bd:2a:e5:1a:cd:b3:8f:ca:ed:50:55:8f:e7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342CE218F6DBE708D87221F8FFFD2B182B5A6F8C
        Validity
            Not Before: Feb  4 20:01:18 2025 GMT
            Not After : Feb  3 20:06:18 2026 GMT
        Subject: CN=95A7CCFEEF03468373D6885B8AB9ACCA54111BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:bd:94:50:75:95:41:5e:f5:74:9f:6f:11:
                    50:95:69:37:26:a3:40:cc:64:ed:7e:ab:cd:f1:0b:
                    b5:89:7a:f4:1c:79:09:06:db:96:81:f9:ee:2d:d6:
                    c1:fd:8e:de:db:44:f2:9d:80:4c:6e:da:27:a0:a5:
                    db:d6:ec:95:fc:b7:83:cd:88:a4:21:af:6e:a3:ff:
                    1a:0a:61:a7:2e:30:d9:cf:62:8a:3e:1a:62:21:f6:
                    16:a4:3a:a2:39:b1:6f:26:d5:e7:f7:f6:1d:5b:b5:
                    5c:c1:44:9d:20:6c:30:53:92:71:d8:1a:54:60:07:
                    9b:36:cb:92:d9:07:2e:35:f4:e3:e7:fd:a2:e5:1b:
                    2b:52:b7:3b:76:d6:a0:73:0e:bb:92:3d:3a:35:3e:
                    98:79:3c:16:34:4f:20:74:9b:79:5c:9b:f1:df:75:
                    4a:d2:3b:76:ae:c0:dd:27:15:ad:8e:1d:87:d9:bd:
                    c8:2d:19:17:35:0f:38:40:f8:05:59:ad:86:de:3c:
                    cd:48:0c:ba:c5:ea:d0:a2:87:b1:f6:f3:9e:eb:05:
                    0f:ad:93:0f:92:45:05:81:76:b2:92:75:2c:ff:0d:
                    98:86:33:2b:49:45:2e:f2:00:f5:21:c0:3c:ea:36:
                    6c:2b:ca:c6:bb:9a:a0:c0:d6:2a:f4:7c:60:e2:a9:
                    ac:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A7:CC:FE:EF:03:46:83:73:D6:88:5B:8A:B9:AC:CA:54:11:1B:F9
            X509v3 Authority Key Identifier:
                keyid:34:2C:E2:18:F6:DB:E7:08:D8:72:21:F8:FF:FD:2B:18:2B:5A:6F:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/342CE218F6DBE708D87221F8FFFD2B182B5A6F8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1141BE89A8EF7C3F494BBEDE567BDA8AC82618B809B5072167B3C36A05D8AD9/0/3133382e33362e3235322e302f32322d3234203d3e20323639373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:71:8a:f0:e8:fc:bd:75:f3:87:fb:9b:77:d0:e0:5a:af:70:
         41:dd:e7:d7:c7:ee:28:0c:a2:0c:94:57:f4:05:00:1b:fd:4d:
         a3:0d:81:3b:23:11:b2:8e:f4:68:db:cc:25:62:fe:a4:b0:01:
         f8:ad:55:95:da:2e:0a:7b:51:5b:0d:1b:15:62:e5:a5:74:d4:
         2a:3a:58:92:8c:cd:f3:c5:df:3d:57:63:a2:48:97:61:a8:15:
         2b:75:ad:78:0c:d7:28:61:bb:05:15:00:8e:99:b0:84:6b:9b:
         e2:4e:c5:8f:23:a1:ae:be:c2:31:58:42:68:ec:85:1f:55:f1:
         dc:21:3f:12:1a:d2:4f:b5:4c:de:18:5c:82:43:a7:89:96:24:
         c8:d0:0d:78:1b:bf:9a:78:2c:eb:2f:98:6e:ab:e2:c5:90:7f:
         ad:bc:e3:2c:86:7f:b2:e9:b2:67:6f:40:73:d7:bf:f9:7c:16:
         e4:47:b6:91:f2:6d:30:ed:d6:ea:ba:36:cc:cc:7d:83:b9:ef:
         56:52:c9:ca:91:72:71:2c:4f:2d:06:20:da:30:90:54:15:90:
         42:5a:32:02:bf:85:f0:42:e9:fb:7d:6c:80:84:3c:b5:00:58:
         82:1a:81:99:4d:a8:68:ee:36:a0:e3:11:cb:81:f5:ca:c6:1e:
         8a:e9:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:13 2025 by rpki-client