Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa
File:                     3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa (raw, json)
Hash identifier:          WFAlOOng9Ovt2uF8bUL3aFs6mrzrwzm8HmzKrQQ9sck=
Subject key identifier:   B0:DD:1B:49:AA:02:72:5B:07:B7:CC:7B:9D:F8:D9:1A:85:1F:85:34
Certificate issuer:       /CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97
Certificate serial:       6FBA01C0175DAB82C7AC4D893E54C653195CCB41
Authority key identifier: C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa
Signing time:             Tue 04 Feb 2025 18:49:30 +0000
ROA not before:           Tue 04 Feb 2025 18:44:30 +0000
ROA not after:            Tue 03 Feb 2026 18:49:30 +0000
asID:                     263775
IP address blocks:        138.121.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ba:01:c0:17:5d:ab:82:c7:ac:4d:89:3e:54:c6:53:19:5c:cb:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3B8E297B1CFDAFE3E214D9FDC1380260406DB97
        Validity
            Not Before: Feb  4 18:44:30 2025 GMT
            Not After : Feb  3 18:49:30 2026 GMT
        Subject: CN=B0DD1B49AA02725B07B7CC7B9DF8D91A851F8534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:73:bc:e3:4a:ac:09:63:6e:64:ad:08:c5:
                    3a:85:ba:08:c4:31:cd:10:37:00:ca:6c:78:54:0a:
                    93:e4:b4:2b:ea:89:c2:15:09:7c:7e:37:59:e5:94:
                    ce:8e:11:50:ea:eb:5c:50:63:54:20:27:1a:e8:cf:
                    06:fd:63:ac:1a:96:91:df:c6:62:15:13:4e:ce:53:
                    04:18:cb:84:3f:d8:50:c7:88:32:52:f9:b9:8b:a6:
                    09:b2:3b:8b:b0:71:b6:65:7a:17:c0:8f:57:02:61:
                    6a:90:5d:c7:80:db:d0:c4:3e:60:11:9e:72:8d:b3:
                    17:1a:64:29:47:22:c4:12:c8:3a:7a:04:53:78:f9:
                    3a:f8:13:c0:80:b7:eb:ee:c4:96:89:79:b2:1b:37:
                    17:05:f5:ae:26:59:10:b9:84:e3:09:f3:c6:a9:1b:
                    4e:f0:b3:e1:e4:a8:3b:3f:b5:bd:07:8b:30:4b:d4:
                    70:ae:63:63:1a:66:49:e4:ed:20:55:e8:4b:18:bc:
                    0b:e7:f4:54:14:dd:74:2b:bb:a7:b9:f0:49:ea:a1:
                    b5:77:66:1e:af:c3:c5:9d:28:6c:e3:a0:e6:99:da:
                    84:ca:54:3c:20:49:8c:ab:6b:3c:ec:64:d9:6f:6f:
                    c6:f0:93:76:bd:3a:d8:6c:92:5c:ba:f3:e7:33:6a:
                    f3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DD:1B:49:AA:02:72:5B:07:B7:CC:7B:9D:F8:D9:1A:85:1F:85:34
            X509v3 Authority Key Identifier:
                keyid:C3:B8:E2:97:B1:CF:DA:FE:3E:21:4D:9F:DC:13:80:26:04:06:DB:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3B8E297B1CFDAFE3E214D9FDC1380260406DB97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE7677F9C05E37FF4C0570E1707E405442B42C43723633F7E3091CD88BC2EE5D/0/3133382e3132312e3130302e302f32322d3234203d3e20323633373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:0b:4b:3d:07:d4:9d:0e:c6:7c:00:8f:ad:63:cb:0f:9e:4b:
         88:fe:0b:1b:64:44:c7:8b:0e:8a:9d:e3:5f:7d:81:64:b9:b6:
         06:0c:8e:c4:10:30:13:60:9e:9c:b8:c5:68:b5:76:82:4b:bd:
         6f:6b:69:b5:ae:16:8a:14:65:e1:a5:64:34:27:0a:f1:82:d2:
         47:e0:65:f7:6a:84:9d:f6:b7:08:cf:96:f7:c0:e7:7f:e5:eb:
         f4:ea:26:ed:b4:91:e0:86:12:85:f5:68:ee:72:f3:e6:e9:28:
         2d:c7:a7:08:3d:48:4a:31:37:79:ac:55:d4:d7:da:c2:3f:1b:
         81:77:05:d3:c2:c6:24:a2:e9:26:89:80:e9:47:e9:e2:cf:de:
         3d:58:98:dd:e0:ef:f1:16:5e:3a:01:63:63:7d:0d:70:e4:22:
         39:da:cd:be:ba:2a:57:06:50:5e:83:6b:9e:88:28:24:f3:a3:
         30:b9:43:71:03:b6:84:14:31:b3:e6:8b:7e:fb:7d:79:4d:34:
         f5:63:36:35:3f:49:f4:e1:47:83:d9:20:c3:e5:00:37:bc:62:
         cd:b2:36:89:36:ab:6e:bd:37:75:ca:b9:03:b0:40:d5:82:8c:
         18:10:30:c4:68:aa:cf:05:72:e7:a2:12:6d:70:c1:bb:4d:52:
         d5:42:b5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:29 2025 by rpki-client