Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130392e302f32342d3234203d3e20323633373932.roa
File:                     3133382e3132322e3130392e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          Es/hwMfW4O092W/WxK/1qLxURILfDX9130fKhvJZmGI=
Subject key identifier:   F5:F2:49:5B:BB:02:08:76:73:00:87:6C:A4:99:2B:5C:4B:41:4C:5F
Certificate issuer:       /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial:       512D4229F011365C9B413470F782DCF4914668
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130392e302f32342d3234203d3e20323633373932.roa
Signing time:             Tue 18 Mar 2025 13:30:00 +0000
ROA not before:           Tue 18 Mar 2025 13:25:00 +0000
ROA not after:            Tue 17 Mar 2026 13:30:00 +0000
asID:                     263792
IP address blocks:        138.122.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2d:42:29:f0:11:36:5c:9b:41:34:70:f7:82:dc:f4:91:46:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
        Validity
            Not Before: Mar 18 13:25:00 2025 GMT
            Not After : Mar 17 13:30:00 2026 GMT
        Subject: CN=F5F2495BBB0208767300876CA4992B5C4B414C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:42:10:83:f9:71:b1:c3:24:5c:f2:6f:12:
                    eb:14:c7:92:0e:ef:5c:2d:dc:c8:1c:99:b0:61:4c:
                    86:21:55:c7:36:15:1e:71:67:6a:ca:31:5f:9a:36:
                    51:fa:c2:38:65:21:7a:2f:40:2f:9b:55:16:5e:e8:
                    0e:57:2e:cf:17:fb:50:76:c8:7d:d7:10:2f:d7:70:
                    d8:3c:82:ce:20:8c:83:d3:24:2c:19:c4:37:fc:87:
                    22:b8:16:a6:98:1d:52:5d:52:da:20:b1:41:88:9f:
                    0b:18:f5:13:69:e7:17:e8:84:af:c9:67:be:c4:2c:
                    40:16:dc:03:b0:ce:39:6a:94:72:b6:99:de:44:0d:
                    83:72:da:57:a0:1b:f2:79:6f:5e:26:ae:75:b5:87:
                    da:49:74:92:20:32:22:72:87:14:c6:8c:08:b2:97:
                    ba:ae:e5:02:57:1c:5c:dd:9e:f7:a6:cb:d8:6d:68:
                    54:43:26:b3:cf:a6:a4:30:ad:ca:52:49:8b:98:7d:
                    92:3c:cf:ed:11:0f:8c:2a:f8:db:b8:fc:0f:e0:11:
                    09:3c:d8:f3:51:f7:46:47:61:5e:c8:0b:69:d0:75:
                    32:f8:e8:3e:27:3c:5b:20:15:d1:47:c9:be:94:a1:
                    b6:9e:cf:d9:b7:b8:39:25:8a:37:d6:ce:05:5b:79:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F2:49:5B:BB:02:08:76:73:00:87:6C:A4:99:2B:5C:4B:41:4C:5F
            X509v3 Authority Key Identifier:
                keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3130392e302f32342d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:58:0d:ea:28:6f:a1:6a:b2:d7:ac:70:be:ac:9e:45:57:3e:
         58:61:95:43:ce:07:e8:4d:9b:ff:f1:a1:73:c2:1b:21:6a:76:
         42:2f:ec:c5:58:c1:a7:f7:24:61:e7:b2:5d:78:b1:bb:d5:ae:
         ee:32:48:b2:89:3e:8e:0e:f8:87:b3:50:5d:3c:79:55:a0:37:
         b4:a1:05:e7:0c:54:90:b7:c6:40:b1:2e:7f:d8:27:79:af:9a:
         2e:1a:9e:44:02:e6:76:0a:f0:e7:af:8a:a7:27:76:64:48:f8:
         d2:0b:0c:ab:4a:60:00:9e:dc:b3:33:12:40:69:77:e3:25:b5:
         5a:1c:4e:3d:b3:10:c4:dc:f3:11:70:cf:03:f8:50:1a:98:b6:
         a7:70:73:6c:06:28:ef:63:00:20:00:ed:69:6c:99:28:ee:c1:
         21:68:52:73:5c:49:3f:cb:5b:35:11:3d:20:7f:8b:3f:83:44:
         f1:57:d2:79:16:01:29:65:3f:bc:62:f7:68:56:c8:5c:7c:f5:
         c7:95:28:69:db:bb:75:1f:4e:29:cc:b1:22:b3:c5:d7:a2:86:
         a3:0a:e1:7d:c7:75:8f:12:9f:b9:d9:d8:e9:2d:d3:d3:5b:2c:
         62:0b:e4:11:db:9d:c8:3d:bc:d9:3e:7d:be:d9:87:46:c6:0d:
         bc:ae:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:15 2025 by rpki-client