Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3131302e302f32342d3234203d3e20323633373932.roa
File:                     3133382e3132322e3131302e302f32342d3234203d3e20323633373932.roa (raw, json)
Hash identifier:          pp9AlDlsTnq9toZdvf9SsT6JhP6wfG4QyJn10BklKzU=
Subject key identifier:   40:1E:FD:3F:6A:DF:73:4F:61:7A:21:46:6A:85:68:24:A6:00:38:10
Certificate issuer:       /CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
Certificate serial:       0B6A7A569E7A1E9E77D3CBB754ABECB2EF959373
Authority key identifier: B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3131302e302f32342d3234203d3e20323633373932.roa
Signing time:             Tue 18 Mar 2025 13:30:00 +0000
ROA not before:           Tue 18 Mar 2025 13:25:00 +0000
ROA not after:            Tue 17 Mar 2026 13:30:00 +0000
asID:                     263792
IP address blocks:        138.122.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6a:7a:56:9e:7a:1e:9e:77:d3:cb:b7:54:ab:ec:b2:ef:95:93:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3602955B698225B69B7EAD22B122D3DA9AC7F8F
        Validity
            Not Before: Mar 18 13:25:00 2025 GMT
            Not After : Mar 17 13:30:00 2026 GMT
        Subject: CN=401EFD3F6ADF734F617A21466A856824A6003810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:f1:83:44:12:8d:71:e1:dd:56:7b:ca:52:
                    80:91:ef:0f:7f:43:3a:72:a8:40:ac:91:6e:87:81:
                    8d:2e:aa:ec:24:e9:c5:4c:cd:b6:4b:10:19:0e:f1:
                    47:56:d2:4e:95:a5:fd:38:1f:73:bc:5a:47:fa:bc:
                    15:40:41:01:f1:ab:5d:40:6e:f5:28:0a:a2:f7:4d:
                    12:8b:38:c4:2d:ad:b2:97:be:a1:57:1b:22:36:b0:
                    59:60:f0:6e:61:a6:d3:20:fe:30:89:f0:be:86:03:
                    fa:11:6c:da:e0:ef:7d:fd:f5:80:61:2e:03:f9:8a:
                    a4:c0:13:93:3c:77:a9:57:cf:c1:77:b9:41:17:7f:
                    89:43:89:d4:eb:cc:9e:b6:9c:3a:cc:5f:60:19:f6:
                    65:ee:fa:40:c0:fd:ed:81:cc:75:96:c9:00:1b:f3:
                    91:2f:c9:e7:f5:32:a8:b4:c9:4e:51:42:0b:f5:e4:
                    91:8b:7a:53:66:89:a8:17:f6:63:eb:61:ad:3e:b4:
                    53:99:83:dc:2c:a4:12:d1:4c:c0:66:89:22:0f:a5:
                    ba:e6:61:e2:a6:ba:8b:5d:96:cb:e1:63:a0:0a:db:
                    29:2b:b8:eb:e8:54:b5:50:52:68:1a:13:ca:bd:c3:
                    61:c3:4c:30:a2:47:82:f3:33:12:6e:38:a0:4d:24:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1E:FD:3F:6A:DF:73:4F:61:7A:21:46:6A:85:68:24:A6:00:38:10
            X509v3 Authority Key Identifier:
                keyid:B3:60:29:55:B6:98:22:5B:69:B7:EA:D2:2B:12:2D:3D:A9:AC:7F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3602955B698225B69B7EAD22B122D3DA9AC7F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C991FBEA607D69824986C46D46719A1E2B9D1BD7947F12EF74499333EE2BECF4/0/3133382e3132322e3131302e302f32342d3234203d3e20323633373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:bc:9f:57:fa:cc:3e:bc:48:8a:2c:e1:2d:70:26:12:82:f8:
         97:7a:e1:7e:bc:9b:c1:4c:5a:6b:f3:68:cd:79:a5:20:8d:62:
         70:b3:65:81:03:d7:f4:87:0f:48:b0:75:1e:54:b2:78:1f:59:
         32:e2:f4:d5:0e:16:6c:f1:fe:dc:c3:52:c7:11:ee:c1:66:3f:
         70:d4:90:ee:d2:60:7c:5b:6e:9e:7e:51:84:0c:e7:04:46:1c:
         ce:a2:a1:49:a0:c9:cd:60:07:14:b3:0a:a0:84:5b:d9:ad:75:
         85:2d:de:15:6f:3d:58:f9:0d:66:f2:c2:97:b4:4b:1a:fa:7a:
         ee:36:ec:2b:43:54:33:88:d6:7f:1e:58:df:5d:de:21:ed:c8:
         59:58:43:3a:12:eb:d3:2c:5a:b1:58:9f:13:6b:ca:50:35:fb:
         65:ab:28:2a:d1:de:67:7d:75:bd:17:a6:01:7e:b0:7d:be:1c:
         29:52:22:5b:d7:e9:57:ed:9c:31:8c:17:d7:b3:19:21:f4:8b:
         4a:83:e7:08:8c:c0:cf:1d:12:b4:ae:9f:a4:de:76:26:99:58:
         fb:b3:5b:a7:67:ab:22:44:43:98:38:e2:cc:70:00:6d:fc:a1:
         07:b8:8e:0d:d8:1a:ec:9f:b5:ee:40:78:4b:0f:8d:c3:98:d5:
         e3:28:4f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:16 2025 by rpki-client