Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130382e302f32342d3234203d3e20323633373932.roa
File:                     3133382e3132322e3130382e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          2F6IfRgzUJ//Dppc0ICDL6VePgLa5BE5OnaHEX7ERAI=
Subject key identifier:   15:CD:32:AE:52:E9:7D:32:28:0B:8A:B2:04:97:1E:F4:CF:87:23:93
Certificate issuer:       /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial:       762B222F81760CE606B50704B84AF0503E6AB1A7
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130382e302f32342d3234203d3e20323633373932.roa
Signing time:             Tue 18 Mar 2025 13:30:00 +0000
ROA not before:           Tue 18 Mar 2025 13:25:00 +0000
ROA not after:            Tue 17 Mar 2026 13:30:00 +0000
asID:                     263792
IP address blocks:        138.122.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2b:22:2f:81:76:0c:e6:06:b5:07:04:b8:4a:f0:50:3e:6a:b1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
        Validity
            Not Before: Mar 18 13:25:00 2025 GMT
            Not After : Mar 17 13:30:00 2026 GMT
        Subject: CN=15CD32AE52E97D32280B8AB204971EF4CF872393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:f5:92:24:70:ab:fa:8b:c7:77:ae:26:93:
                    56:73:02:73:9e:41:55:1f:eb:15:fd:e3:0b:f7:33:
                    49:5d:6d:49:bc:17:04:34:5f:e8:7b:97:f6:e0:91:
                    78:dc:ee:45:ad:59:5d:ab:df:bf:b9:f9:b8:17:91:
                    f6:0f:2e:79:63:75:a3:b8:1d:fd:fd:da:b0:7b:55:
                    9c:47:95:2a:14:45:ca:86:e3:97:1b:e1:6f:69:2c:
                    13:66:3d:53:54:47:e9:35:2e:ab:90:a0:54:74:1c:
                    bb:ea:c7:78:d3:2a:0d:10:6a:1a:6f:52:7e:cd:1b:
                    d4:56:73:c2:5b:bd:c2:6c:b8:a1:12:13:43:90:35:
                    64:c7:c9:55:af:24:eb:e8:25:f1:5f:bd:9e:1e:ca:
                    d5:9f:00:14:d4:59:fb:a7:1e:da:fd:a1:0d:0a:ad:
                    df:42:e8:67:f1:26:15:aa:fd:2e:1a:13:5d:c8:b0:
                    3f:b7:04:2a:99:4b:9d:9f:46:50:23:95:ee:4f:58:
                    11:93:f9:07:2d:1d:bb:f7:00:ae:4d:25:8c:85:8e:
                    75:d5:a2:f2:41:9d:ae:1a:9b:87:c1:e7:77:b0:64:
                    bd:ed:6b:77:42:65:72:08:19:c3:21:5c:c5:31:9d:
                    cd:bc:89:d8:c2:eb:51:89:5a:cd:1f:0f:c5:a8:95:
                    57:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CD:32:AE:52:E9:7D:32:28:0B:8A:B2:04:97:1E:F4:CF:87:23:93
            X509v3 Authority Key Identifier:
                keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130382e302f32342d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:59:5f:19:22:af:2c:cf:fe:5d:9b:24:9a:e7:d8:70:35:d8:
         2d:8e:b5:f1:bb:d0:a2:d0:10:1c:a2:c1:fc:89:65:98:ee:45:
         c3:6a:81:96:9c:58:96:7d:86:66:9d:8f:30:69:53:26:4b:a0:
         96:d3:11:15:b7:14:53:f8:ed:5f:f7:8f:e9:dd:76:f6:87:5d:
         4c:9c:c2:cb:8e:a6:d6:6c:e9:ba:47:82:a2:40:e5:f7:28:cd:
         13:f3:bc:8f:24:b5:98:50:b1:25:63:03:d7:c1:80:c5:6e:03:
         f2:2c:17:bd:68:35:6e:78:83:cb:87:ee:3b:18:17:a2:19:5d:
         81:09:cd:00:10:fb:d1:23:58:7d:84:a7:06:52:c7:76:a7:8f:
         a5:1d:67:35:33:a3:9e:42:25:67:a6:67:51:9c:8c:e0:54:be:
         2a:ed:96:0b:e7:8a:78:9b:2f:8d:f4:14:b5:bc:78:0b:f8:d9:
         d4:29:48:0b:87:85:90:8c:26:4c:12:5f:c4:ac:82:c6:05:da:
         e8:a7:cf:13:81:81:e0:73:18:19:be:f5:d5:f8:89:ed:24:82:
         eb:1d:4c:e0:a1:fd:6d:d3:c0:1c:9c:9e:79:35:4a:c5:c9:4b:
         8d:97:8f:8d:f1:1e:d1:94:08:2a:ab:58:9d:fe:b4:87:6b:53:
         16:3a:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:39 2025 by rpki-client