Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136312e302f32342d3234203d3e20323632313638.roa
File:                     3133382e3131372e3136312e302f32342d3234203d3e20323632313638.roa (raw, json)
Hash identifier:          l/KH2ZbIJlOwgh80Y3y4knytY+tBzAOMuXDpBKim+fQ=
Subject key identifier:   AF:D6:17:A7:23:6B:31:4C:AE:51:0B:B0:3E:58:92:55:FC:DD:BE:31
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       05131FD35416DC2C6E34B8D8F1C2E69571C837C1
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136312e302f32342d3234203d3e20323632313638.roa
Signing time:             Tue 04 Feb 2025 18:27:55 +0000
ROA not before:           Tue 04 Feb 2025 18:22:55 +0000
ROA not after:            Tue 03 Feb 2026 18:27:55 +0000
asID:                     262168
IP address blocks:        138.117.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:13:1f:d3:54:16:dc:2c:6e:34:b8:d8:f1:c2:e6:95:71:c8:37:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Feb  4 18:22:55 2025 GMT
            Not After : Feb  3 18:27:55 2026 GMT
        Subject: CN=AFD617A7236B314CAE510BB03E589255FCDDBE31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:e2:65:fe:23:35:52:f6:8c:69:a9:05:77:
                    26:fb:37:9c:23:f8:67:a8:c2:e7:05:8b:b6:64:21:
                    a5:34:e4:a1:89:f1:ff:81:c6:c5:67:cb:2f:7d:0b:
                    db:e1:ac:1f:9e:33:fc:f6:fc:49:be:c4:3c:de:a2:
                    5d:11:d3:99:29:5e:b2:35:2c:45:b8:96:a9:fb:7a:
                    c4:24:e2:00:40:b7:eb:ac:f9:f4:b6:ce:ce:67:c5:
                    25:b9:d8:d6:94:e5:46:f9:6d:f6:21:43:c9:59:0f:
                    a5:3f:d8:d0:fe:00:99:59:fc:31:8d:de:5c:dc:06:
                    78:0c:d2:a6:f3:21:7d:02:c6:4d:aa:1f:91:4c:3a:
                    8c:b2:13:ab:46:2c:d5:ff:be:72:d6:cd:76:4f:52:
                    4f:a9:d3:62:91:ee:f3:fa:60:4f:ed:bd:11:e1:e9:
                    c0:20:4f:f6:30:60:f4:13:64:67:31:20:10:0f:3a:
                    f5:2d:b0:d0:63:c7:57:cb:e4:59:f0:a4:a2:99:a0:
                    ec:36:3a:34:e7:15:ff:40:0e:68:c9:0c:dc:2b:19:
                    ad:a2:67:6e:50:60:f6:10:f3:7e:f3:23:24:ea:c1:
                    6a:54:c0:d1:18:f7:38:c9:96:73:89:28:f8:6d:b1:
                    52:ee:af:4f:7c:44:c4:10:61:98:9c:fc:75:c1:40:
                    10:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D6:17:A7:23:6B:31:4C:AE:51:0B:B0:3E:58:92:55:FC:DD:BE:31
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136312e302f32342d3234203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:84:1b:ec:23:83:78:ab:61:d4:26:b4:41:92:14:f1:5e:2b:
         35:40:8b:df:84:f3:c6:3f:31:e1:98:dd:18:0e:f5:1d:8e:3a:
         fa:ad:f3:32:5e:74:5b:cb:6c:73:65:68:5b:c6:dd:1f:29:39:
         85:f7:a1:fa:00:22:c7:39:7d:9a:a0:9b:08:8a:1f:fd:47:a2:
         aa:c8:a3:fa:d3:07:0d:2e:5c:9d:b7:ad:35:1c:fc:35:d4:bc:
         50:c6:96:6a:3c:9c:c3:af:58:d3:95:bf:74:d0:de:ca:22:e6:
         01:78:48:94:ad:08:42:85:c5:30:60:0e:e9:26:53:3c:f8:11:
         6e:43:97:8d:b5:a9:72:53:8f:a8:05:38:7a:aa:ad:bc:f1:1b:
         25:01:48:c4:5f:1f:f3:ba:f4:39:7f:d8:27:5d:1e:a4:81:02:
         01:56:5f:3a:cc:80:c0:65:e6:18:04:e0:1e:5b:71:a4:78:00:
         b8:fb:6e:30:86:8d:5c:0b:73:e1:a6:68:3c:30:85:d5:4b:a5:
         df:67:2c:68:58:18:8f:b9:b7:37:94:8a:35:7a:93:1e:0b:65:
         f8:73:ad:74:26:96:cd:66:52:ef:7e:f1:4f:1d:6a:77:db:4e:
         c2:2b:14:c1:95:a7:74:2c:5f:cc:18:a8:fd:14:b8:20:27:83:
         a3:e2:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:49 2025 by rpki-client