Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3133382e3132322e3232382e302f32322d3234203d3e203237393535.roa
File:                     3133382e3132322e3232382e302f32322d3234203d3e203237393535.roa (raw, json)
Hash identifier:          cw2vtbnRlMyLncAYKErROQiqi35BZwiXodC/BHB1fbs=
Subject key identifier:   1F:E4:51:B2:18:DF:14:53:9D:D9:7F:DA:71:1F:18:B9:19:B0:C7:03
Certificate issuer:       /CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
Certificate serial:       6F75F15ADDABEC0620FB7D9001E93D0AE102D3ED
Authority key identifier: 93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3133382e3132322e3232382e302f32322d3234203d3e203237393535.roa
Signing time:             Tue 04 Feb 2025 18:44:07 +0000
ROA not before:           Tue 04 Feb 2025 18:39:07 +0000
ROA not after:            Tue 03 Feb 2026 18:44:07 +0000
asID:                     27955
IP address blocks:        138.122.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:75:f1:5a:dd:ab:ec:06:20:fb:7d:90:01:e9:3d:0a:e1:02:d3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
        Validity
            Not Before: Feb  4 18:39:07 2025 GMT
            Not After : Feb  3 18:44:07 2026 GMT
        Subject: CN=1FE451B218DF14539DD97FDA711F18B919B0C703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:4f:16:05:56:ac:57:60:64:03:f5:ca:24:
                    d7:1a:a2:e3:10:15:c0:f0:b7:35:fc:ed:d9:ae:b8:
                    5e:8c:2e:08:de:1e:84:9d:57:e9:69:8a:75:e3:38:
                    2d:e4:ce:c3:c1:8e:09:58:5c:50:56:a8:91:91:0d:
                    c6:b0:cb:fe:57:f0:73:f5:ee:e5:10:74:3d:7f:d9:
                    9e:dc:31:93:ab:40:ec:52:3b:9f:65:4c:18:22:f2:
                    1f:3b:88:b7:c6:d1:0a:d1:ce:25:2a:6d:e2:3d:68:
                    56:74:0e:8c:0b:34:fb:05:f8:f2:11:12:d5:64:b4:
                    62:2a:d4:69:17:8e:fc:bd:47:8c:9b:e1:12:04:b2:
                    ac:46:e1:e9:57:9c:81:49:6e:e1:9e:82:2d:40:d5:
                    41:17:82:61:6e:36:df:aa:fa:c3:11:4d:24:c0:3b:
                    7b:a5:46:28:f1:21:73:f6:be:9e:ba:08:ac:dd:62:
                    01:10:e0:51:5f:bf:74:3e:5e:20:4f:da:7c:83:d7:
                    ca:1c:ae:ff:96:f2:4a:c7:9d:95:21:ea:3d:0a:a3:
                    78:c8:54:af:b8:4d:41:21:47:40:21:15:54:97:95:
                    4b:b0:64:e5:3c:32:96:a0:4d:23:ce:99:27:76:ea:
                    e0:23:81:cc:61:3b:e8:e2:6c:0c:f5:96:50:03:07:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E4:51:B2:18:DF:14:53:9D:D9:7F:DA:71:1F:18:B9:19:B0:C7:03
            X509v3 Authority Key Identifier:
                keyid:93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3133382e3132322e3232382e302f32322d3234203d3e203237393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:59:dd:bb:70:b5:ee:b2:51:95:8c:a3:e0:6b:5a:9a:9f:28:
         76:18:9e:ad:da:93:a4:e3:77:9d:6e:29:75:bf:c3:5c:f8:bb:
         70:1e:8e:89:d5:87:de:54:be:f2:88:5e:5a:92:6d:c4:c9:eb:
         bf:86:0e:e5:f7:ce:62:ea:41:44:1d:c4:cb:8b:f0:e7:70:29:
         1e:78:da:8b:cc:0b:dd:59:9b:27:f0:a1:9c:68:ec:cb:81:e0:
         19:df:8a:89:46:98:cb:03:8a:84:77:01:bf:24:fa:4f:2b:0b:
         08:68:15:95:bb:a5:48:75:1d:91:db:fb:9b:9c:22:df:9a:25:
         ab:d4:65:af:f2:19:19:b8:75:4f:e8:d5:67:6f:a7:ae:13:05:
         1d:a6:ec:59:12:d3:3e:c1:75:28:cf:71:95:39:da:cb:48:ce:
         a8:47:38:3b:ea:24:5d:13:bd:c4:15:0f:e8:2f:0b:d9:ff:ea:
         cb:91:d0:36:96:69:f2:dc:8d:55:68:2e:d2:52:98:51:db:26:
         5f:f8:61:0b:7e:9a:7d:1c:06:bd:eb:2b:59:19:74:9f:0e:bb:
         c1:72:dc:34:86:69:9d:15:18:49:74:bf:a4:ca:02:c6:c5:b6:
         58:13:3a:d8:b0:af:40:03:53:03:f6:24:f2:30:80:d6:5e:3a:
         e0:ff:81:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:20:43 2025 by rpki-client