Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3137302e302f32342d3234203d3e20323633383333.roa
File:                     3133382e3235352e3137302e302f32342d3234203d3e20323633383333.roa (raw, json)
Hash identifier:          YjZJJ5/lTleyUSaFWXivbtkIJWi6JWWQoWr1xl4LyUM=
Subject key identifier:   21:0D:2B:B6:2E:04:7D:1E:77:E4:91:7D:DD:4E:0C:91:FB:B5:1E:91
Certificate issuer:       /CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
Certificate serial:       304F736F57DB6F342EB43E088C8E5551B2FAC4C1
Authority key identifier: 8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3137302e302f32342d3234203d3e20323633383333.roa
Signing time:             Fri 04 Apr 2025 11:13:54 +0000
ROA not before:           Fri 04 Apr 2025 11:08:54 +0000
ROA not after:            Fri 03 Apr 2026 11:13:54 +0000
asID:                     263833
IP address blocks:        138.255.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4f:73:6f:57:db:6f:34:2e:b4:3e:08:8c:8e:55:51:b2:fa:c4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F2EC5CC34344AABC1D5C4185A622142C1213AEF
        Validity
            Not Before: Apr  4 11:08:54 2025 GMT
            Not After : Apr  3 11:13:54 2026 GMT
        Subject: CN=210D2BB62E047D1E77E4917DDD4E0C91FBB51E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:b9:41:0c:ce:13:b7:2e:b7:84:85:b3:1d:
                    d6:9d:bf:ba:54:bd:45:86:d0:54:f1:5f:51:0b:5c:
                    3e:fd:e9:ed:ab:07:2b:84:6c:85:34:de:ec:61:90:
                    15:e6:b1:43:36:5c:85:a4:e5:0e:ed:a7:96:74:5f:
                    75:25:f8:35:bc:b6:ad:5c:a5:58:4d:fa:4a:5c:b0:
                    2d:0a:f1:4b:fe:61:41:9f:a4:40:c5:f1:38:99:e6:
                    5f:e5:d4:03:36:cd:b7:41:b3:40:3c:fe:9e:eb:a9:
                    3d:ba:06:1d:08:a5:b2:c6:1c:5a:22:aa:76:5c:52:
                    64:c6:3f:ca:aa:ff:7c:52:1b:49:d0:d1:88:b0:ba:
                    9c:9b:a2:98:2b:dc:79:7c:48:c8:bf:e8:f4:29:05:
                    72:c5:5e:18:d7:31:18:1f:16:9a:cc:ee:9a:8b:29:
                    0f:79:35:ca:5f:0c:0d:a7:c7:44:a4:21:3a:d7:d5:
                    b8:53:bc:0e:b2:44:6c:fc:41:26:5a:8f:58:f9:b2:
                    fb:67:ce:b9:39:27:25:8e:09:cf:f2:43:ac:6d:05:
                    f6:29:d9:2f:bd:8c:83:41:ac:3b:ad:24:2d:6b:7a:
                    ad:eb:fe:12:b5:d3:b5:c8:21:33:b0:9b:03:e4:f0:
                    1d:7f:c5:93:26:f3:dd:91:6e:a6:06:44:05:c5:43:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0D:2B:B6:2E:04:7D:1E:77:E4:91:7D:DD:4E:0C:91:FB:B5:1E:91
            X509v3 Authority Key Identifier:
                keyid:8F:2E:C5:CC:34:34:4A:AB:C1:D5:C4:18:5A:62:21:42:C1:21:3A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F2EC5CC34344AABC1D5C4185A622142C1213AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF4C9242D1C3097288E5F9EB182988E0A41CB2B7538DBF786A48C8BA1F3662E9/0/3133382e3235352e3137302e302f32342d3234203d3e20323633383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:27:c0:45:6c:b6:a2:10:0b:4f:1d:e2:19:9e:de:31:08:02:
         e9:eb:5f:c5:a9:bc:11:2a:3f:28:1d:f2:33:c2:f6:02:e3:87:
         ee:36:6f:b0:7c:dc:b7:5c:1d:e0:9b:4d:fd:21:08:04:0f:ff:
         da:3f:c3:e2:b8:95:66:81:fb:36:89:2c:a9:6c:9b:2b:c6:d7:
         35:3b:91:57:fa:af:8c:bf:4f:8c:1b:5b:e0:95:92:82:a0:14:
         3b:b1:53:56:c4:df:e7:74:3a:26:6e:a2:17:ba:08:da:38:f4:
         b6:8f:37:f5:62:8e:f6:f8:65:24:b2:e2:cf:5c:9a:ab:e3:d4:
         ca:c3:ed:a5:af:c5:90:f9:26:e6:4c:ef:77:06:1c:52:80:3d:
         1a:f2:2c:3f:0d:de:3e:09:da:db:c9:bb:36:ef:c1:5b:3b:5a:
         64:c1:b8:f4:4e:1e:e2:ff:f1:c8:b2:ee:3c:38:78:be:5a:17:
         20:23:23:12:e5:87:a9:d1:c9:49:fd:42:59:f4:c3:7a:7a:13:
         04:27:9d:80:d4:e2:2f:71:bc:7d:44:7d:76:ad:30:24:18:d0:
         db:ba:14:bd:93:15:04:3d:8d:4c:d4:34:10:f1:e5:41:55:61:
         12:54:f2:c9:e6:a5:0e:16:ec:80:18:a6:cc:fa:52:5e:8d:85:
         73:ff:3c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:01 2025 by rpki-client