Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131302e302f32342d3234203d3e20323633373935.roa
File:                     3133382e3230342e3131302e302f32342d3234203d3e20323633373935.roa (raw, json)
Hash identifier:          trnMfBq0tmeh36o2gYrzxK2HJ8WcgMQKir5vqwkkAo8=
Subject key identifier:   B9:5A:73:36:4F:DF:EA:2E:85:16:5C:6F:19:9A:CF:B7:A4:73:DF:B4
Certificate issuer:       /CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
Certificate serial:       226A8A1AEC9A31C3FC7D0ABBBCDBB415BCD37866
Authority key identifier: 59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131302e302f32342d3234203d3e20323633373935.roa
Signing time:             Tue 04 Feb 2025 18:47:45 +0000
ROA not before:           Tue 04 Feb 2025 18:42:45 +0000
ROA not after:            Tue 03 Feb 2026 18:47:45 +0000
asID:                     263795
IP address blocks:        138.204.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6a:8a:1a:ec:9a:31:c3:fc:7d:0a:bb:bc:db:b4:15:bc:d3:78:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
        Validity
            Not Before: Feb  4 18:42:45 2025 GMT
            Not After : Feb  3 18:47:45 2026 GMT
        Subject: CN=B95A73364FDFEA2E85165C6F199ACFB7A473DFB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:01:ae:b1:f6:76:5e:0b:d8:56:7a:8f:96:46:
                    29:1f:60:97:01:7c:21:31:f3:a7:81:24:1c:e7:65:
                    b9:f7:56:5b:5a:4d:8e:91:14:1b:94:d1:d7:5c:1c:
                    e3:15:0b:9b:9a:9d:86:fc:32:de:3d:69:45:98:b5:
                    ba:7c:77:ca:cd:cb:cb:1b:18:dd:d9:c1:61:ee:26:
                    06:34:bd:e1:9f:7b:11:f9:1d:85:1e:1b:8d:5b:a6:
                    75:9a:c6:2e:8b:85:12:b4:07:62:22:aa:7c:72:78:
                    66:bd:93:08:aa:17:90:61:e0:7d:50:36:11:dd:12:
                    08:da:59:55:29:19:ab:9b:34:e3:14:1e:90:01:b4:
                    96:c1:33:de:f5:d8:08:cd:9b:c8:64:82:ce:cf:c2:
                    6f:77:98:86:2a:60:0a:8d:92:c3:e3:73:fc:db:74:
                    57:89:32:48:b0:41:43:d7:da:7b:d9:b2:11:f0:45:
                    71:75:37:59:f9:b8:b2:f7:c2:2c:9d:16:3c:86:4c:
                    b3:49:00:70:b9:0c:0b:9b:d7:25:d8:ed:83:77:04:
                    c9:f6:0e:a5:12:a1:40:62:79:eb:99:10:64:2c:99:
                    3c:78:fb:1f:81:2e:76:9c:97:7e:cc:ea:61:e9:36:
                    4a:82:df:9d:37:f8:82:0b:88:d2:64:6f:79:59:25:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5A:73:36:4F:DF:EA:2E:85:16:5C:6F:19:9A:CF:B7:A4:73:DF:B4
            X509v3 Authority Key Identifier:
                keyid:59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131302e302f32342d3234203d3e20323633373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:a6:53:e4:71:0b:06:54:8c:0f:6c:5f:3f:5d:4d:3a:1a:bd:
         b9:9f:99:fd:15:4a:e9:ac:0b:4e:18:38:f3:0c:94:c1:a6:ca:
         3f:a0:8f:5e:09:80:55:76:df:7b:62:f3:35:24:ba:c7:4b:61:
         f4:68:07:2a:73:bf:c9:f1:ec:4b:31:4a:0d:93:a3:75:7d:79:
         ab:a2:00:40:b4:ac:c4:ce:3f:3d:43:1a:4a:48:11:f9:30:af:
         b5:bb:81:78:dd:83:93:66:23:0e:18:25:f5:51:4b:2f:35:65:
         bc:29:f8:16:1f:4d:cc:a2:8a:3d:bd:a8:9f:1f:fd:fa:7b:74:
         bd:82:b7:80:12:44:bd:aa:ba:5a:e0:15:b6:2c:d7:17:f5:f1:
         34:cc:d7:bb:28:a6:50:79:5b:48:c9:6d:0d:d1:a5:00:e2:b3:
         b8:56:fd:a1:a9:d2:c0:f2:8f:26:01:32:46:67:dc:d5:dc:37:
         ce:6d:68:7b:b0:5c:ca:04:22:40:e8:d8:a4:6f:fb:84:bf:c6:
         e6:3d:0a:c8:55:0e:fa:90:8e:8a:31:ad:14:6b:4a:f9:48:a4:
         a5:76:05:ed:de:a8:96:2e:6e:63:33:cd:f6:78:af:4f:da:28:
         47:b3:60:d6:7f:26:2f:ca:e8:ba:da:63:17:91:92:92:07:b7:
         51:48:43:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:53 2025 by rpki-client