Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136392e302f32342d3234203d3e20323633383333.roa
File:                     3133382e3235352e3136392e302f32342d3234203d3e20323633383333.roa (raw, json)
Hash identifier:          WIfEq1Jd+hyQ456b8KulAxd1cYgYI4FkMmzCOe5ZMUY=
Subject key identifier:   7A:F1:30:B5:0E:E0:58:F3:8E:E5:B2:CA:32:F7:4B:0C:CF:60:76:21
Certificate issuer:       /CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
Certificate serial:       0C6CF5E65A5B057B484D2A58DF39513DCFE40237
Authority key identifier: 8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136392e302f32342d3234203d3e20323633383333.roa
Signing time:             Fri 04 Apr 2025 11:13:55 +0000
ROA not before:           Fri 04 Apr 2025 11:08:55 +0000
ROA not after:            Fri 03 Apr 2026 11:13:55 +0000
asID:                     263833
IP address blocks:        138.255.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6c:f5:e6:5a:5b:05:7b:48:4d:2a:58:df:39:51:3d:cf:e4:02:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
        Validity
            Not Before: Apr  4 11:08:55 2025 GMT
            Not After : Apr  3 11:13:55 2026 GMT
        Subject: CN=7AF130B50EE058F38EE5B2CA32F74B0CCF607621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:f9:1d:02:2f:fc:df:22:29:c5:54:c8:11:
                    7e:1a:73:c1:ca:6c:2d:28:ef:31:04:6d:15:92:a7:
                    85:1e:9c:67:a0:f9:a5:98:42:c8:07:f6:4f:64:c4:
                    09:32:c9:f2:27:4f:61:b9:ad:85:2c:ea:28:17:ad:
                    33:78:fe:7d:ec:cc:c8:da:2a:92:63:bf:5c:47:7c:
                    d7:db:20:6b:8d:f9:58:c1:28:10:c2:98:d6:22:af:
                    df:4c:c0:0f:b9:39:cd:9e:01:47:5c:e3:02:94:c7:
                    57:6d:67:2a:e0:1c:7a:4b:48:64:4c:04:79:a8:4a:
                    75:50:50:02:c4:0a:3a:b9:ef:30:90:b3:35:ac:b3:
                    94:11:74:58:64:b8:45:8c:c7:30:1e:ab:84:bc:bc:
                    d5:49:43:a7:2e:67:0f:23:ef:07:5b:20:d6:f7:86:
                    44:a8:5c:d1:31:50:41:61:ff:59:29:6e:9e:4b:b3:
                    14:72:f1:75:ee:fd:b7:75:70:3d:29:36:dd:70:9b:
                    1e:fe:25:d0:5e:6e:0d:2f:a9:31:07:a0:de:0f:c9:
                    64:7f:09:46:9b:a3:0b:a9:08:88:83:fd:2f:fc:98:
                    c0:2a:1c:9d:40:32:df:52:78:c6:ee:13:cf:27:40:
                    f8:4e:e6:c9:9d:47:3b:0f:71:d6:d8:de:73:c3:ec:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F1:30:B5:0E:E0:58:F3:8E:E5:B2:CA:32:F7:4B:0C:CF:60:76:21
            X509v3 Authority Key Identifier:
                keyid:8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3136392e302f32342d3234203d3e20323633383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:57:34:09:82:a9:b9:e0:c1:06:47:f2:7c:86:34:86:30:41:
         f5:a6:80:22:e2:a9:ee:93:e4:a7:7f:41:d1:6a:eb:59:83:ce:
         b6:e6:42:c0:8d:04:18:2b:85:10:44:13:c2:eb:52:e9:0a:bf:
         db:05:15:83:a3:59:bf:5b:28:3d:dd:ca:85:98:fe:59:49:3b:
         aa:78:82:9d:c7:b7:54:fd:26:a7:66:c7:3c:30:77:9d:d8:18:
         fe:44:d0:08:5e:77:a5:b1:a5:c6:c1:7b:6c:29:30:47:cc:6b:
         5e:5a:2e:55:04:3c:89:91:0b:ce:9c:62:be:d6:76:c6:2d:d3:
         a3:73:26:51:c6:18:1e:d0:fb:0f:52:0d:0a:2c:87:ac:04:7b:
         f3:cd:36:d3:7f:cc:25:09:57:86:41:54:c0:bb:26:ec:f3:a9:
         fc:26:29:9f:90:fd:a1:fb:24:be:78:af:7f:8b:4c:bb:0e:2d:
         c9:05:33:6d:29:a9:ce:1d:7b:a1:23:cf:ba:4d:1e:4e:ce:f7:
         db:bd:b0:90:27:5b:de:02:7f:bc:08:c4:cf:d4:e1:56:5f:11:
         13:2c:c6:c5:40:5d:6b:a7:e0:c9:a5:2a:b3:8a:1c:fb:7e:d2:
         cc:7a:1d:cb:20:b9:8d:d3:c7:aa:6f:e3:c3:19:cf:05:39:59:
         3e:b8:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:09:45 2025 by rpki-client