Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131312e302f32342d3234203d3e203233343730.roa
File:                     3133382e3230342e3131312e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          PCY/dlgCqBE9CIBd9Mh0iNuOxHh0x1tvSj4yj8fnTAE=
Subject key identifier:   6D:47:E0:4F:12:61:11:C5:2A:44:5D:2C:8D:73:7A:12:43:8F:0B:8E
Certificate issuer:       /CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
Certificate serial:       3A18B3D99FA65BA058235D16FCEA04839A885398
Authority key identifier: 59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131312e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 04 Feb 2025 18:47:45 +0000
ROA not before:           Tue 04 Feb 2025 18:42:45 +0000
ROA not after:            Tue 03 Feb 2026 18:47:45 +0000
asID:                     23470
IP address blocks:        138.204.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:18:b3:d9:9f:a6:5b:a0:58:23:5d:16:fc:ea:04:83:9a:88:53:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ABF2BF7C74865B759064BBB0DA49EAE0CC3647
        Validity
            Not Before: Feb  4 18:42:45 2025 GMT
            Not After : Feb  3 18:47:45 2026 GMT
        Subject: CN=6D47E04F126111C52A445D2C8D737A12438F0B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:51:21:e6:96:8e:1f:ff:26:6d:5f:02:1d:e5:
                    3e:1b:13:9e:08:32:fa:51:be:b7:40:6a:13:c9:55:
                    00:b2:f1:21:4a:df:17:11:4f:a3:da:49:b3:18:7c:
                    b3:2e:e5:50:a4:a5:f0:bf:b2:7e:25:a2:e9:3f:87:
                    af:c3:42:09:35:ba:8b:b6:59:87:96:b1:46:f8:ca:
                    ab:a2:9c:3d:98:e2:c1:bd:7e:d5:df:ab:fb:db:98:
                    c8:fd:56:f7:27:93:7d:be:58:1e:02:30:70:8a:18:
                    de:fb:06:35:4f:57:54:b6:a7:8f:93:f0:3e:38:06:
                    e9:4b:9b:b0:e1:2f:ee:04:c9:99:69:79:f1:3c:a3:
                    2f:0f:fd:87:f1:4f:3b:d2:3b:82:23:e4:e0:2a:14:
                    a7:cf:16:98:5d:db:6f:8c:c5:2d:1b:52:4f:45:f5:
                    27:a9:13:4b:e8:d8:84:8a:08:36:0c:c7:1a:cd:72:
                    78:b1:36:c3:96:5c:b9:f2:28:fb:cc:94:5d:79:1a:
                    38:7b:48:d5:e0:9a:80:60:32:7a:6e:2b:1d:05:24:
                    8a:5d:2c:f4:02:40:7c:8c:63:b0:df:5b:d8:6f:3f:
                    6a:94:d6:fe:40:07:77:3d:c3:64:b5:c4:88:08:da:
                    2f:df:44:d4:05:b7:ab:85:2e:9c:a7:dc:63:74:f7:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:47:E0:4F:12:61:11:C5:2A:44:5D:2C:8D:73:7A:12:43:8F:0B:8E
            X509v3 Authority Key Identifier:
                keyid:59:AB:F2:BF:7C:74:86:5B:75:90:64:BB:B0:DA:49:EA:E0:CC:36:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59ABF2BF7C74865B759064BBB0DA49EAE0CC3647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C310173D9029234DCA156E7A16183C908D7D36A21121853EA944BECACC3B5794/0/3133382e3230342e3131312e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:d1:ba:c2:31:7f:96:19:7e:8c:e6:46:61:6d:19:e0:88:51:
         50:3b:b7:e8:6d:53:ff:53:7c:ec:43:07:25:90:38:41:a9:56:
         de:3e:e0:79:1c:0c:57:62:25:87:33:89:ab:4f:de:06:76:71:
         4c:26:2b:37:07:b4:cf:a4:fe:bf:42:25:42:01:22:a5:c7:51:
         14:80:fe:0b:1f:08:6e:c8:c1:5b:55:58:fb:f2:1d:cf:f0:66:
         f7:8b:d8:2f:48:51:8a:dd:bc:07:78:c8:9c:6c:c6:22:f8:b8:
         21:39:93:f1:15:36:87:b9:71:1d:3f:a1:0d:b2:62:d4:5c:41:
         82:cc:bc:86:c1:78:86:a5:fb:87:e8:a1:0e:fd:45:6c:2e:4a:
         e4:1a:93:80:8c:24:63:50:68:ed:ee:94:d3:3a:1c:a0:a9:3a:
         05:7c:2e:7f:01:df:03:7a:9a:03:12:33:4a:e0:61:5c:3f:69:
         44:7b:c5:23:25:c9:62:c3:70:34:4c:ee:80:28:ff:65:74:98:
         70:87:27:4f:31:00:30:85:78:d9:1c:be:01:6d:ec:5d:86:cb:
         b3:e6:cb:8a:a5:b0:0d:c6:7b:79:3c:6e:fd:3b:18:44:54:f1:
         95:f6:cc:d2:d0:d6:e1:cb:fa:8d:7f:2d:ba:f7:db:55:f6:ef:
         5b:0c:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:14:34 2025 by rpki-client