Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/3133382e33362e3232302e302f32322d3234203d3e20323635373034.roa
File:                     3133382e33362e3232302e302f32322d3234203d3e20323635373034.roa (raw, json)
Hash identifier:          7QE9VBIIyODJUeInxTC29uEYbuPmNgsFc8HDA1ZOv/U=
Subject key identifier:   76:A2:80:30:FA:D6:69:38:0F:9D:0C:79:86:53:1D:B1:2D:BA:24:D9
Certificate issuer:       /CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
Certificate serial:       7B1724BB9D036124F6C6BA05B0E8386F1478D12D
Authority key identifier: 79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/3133382e33362e3232302e302f32322d3234203d3e20323635373034.roa
Signing time:             Tue 04 Feb 2025 20:00:10 +0000
ROA not before:           Tue 04 Feb 2025 19:55:10 +0000
ROA not after:            Tue 03 Feb 2026 20:00:10 +0000
asID:                     265704
IP address blocks:        138.36.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:17:24:bb:9d:03:61:24:f6:c6:ba:05:b0:e8:38:6f:14:78:d1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
        Validity
            Not Before: Feb  4 19:55:10 2025 GMT
            Not After : Feb  3 20:00:10 2026 GMT
        Subject: CN=76A28030FAD669380F9D0C7986531DB12DBA24D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:ae:24:99:cb:4e:73:d5:9f:a8:59:78:9b:
                    ab:45:1d:fe:01:e5:30:80:ac:c9:bb:ef:ba:e8:fa:
                    b3:98:bf:cd:d6:1a:b3:ec:cd:25:d9:e7:48:d4:fc:
                    f7:73:3f:64:77:54:a5:a7:70:e4:a8:5f:8b:54:43:
                    ee:e3:fb:29:d4:ef:d1:5d:2d:5a:80:0c:41:5c:3f:
                    07:58:5d:19:0a:e6:db:3c:b3:0e:c5:7d:29:28:68:
                    c1:4f:de:06:89:73:ad:cd:15:bb:f8:47:52:01:1e:
                    2c:ad:d6:85:25:01:c3:9f:5f:a7:52:b9:a3:39:98:
                    00:73:84:e5:a2:9a:80:0d:f9:4e:9a:03:1c:1b:40:
                    9f:18:8d:39:df:84:b8:03:58:24:b2:9b:1f:c4:f8:
                    00:c1:71:ce:16:e2:30:8f:10:89:f3:47:2e:ce:6a:
                    3e:eb:7a:60:c1:fc:21:ba:1e:6b:1a:1a:ee:cb:93:
                    7d:ff:05:c5:a8:6e:3e:63:5d:d4:34:2c:c9:11:85:
                    c7:d3:77:e4:7a:69:8b:52:23:16:fe:4b:3c:5c:88:
                    64:11:b6:88:ca:33:db:74:37:4c:79:6d:ba:4f:a8:
                    fa:ea:37:7a:0e:a2:6f:09:88:66:f9:04:83:0b:90:
                    e5:4e:f6:1e:31:de:20:c4:8a:ad:da:80:84:e8:47:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A2:80:30:FA:D6:69:38:0F:9D:0C:79:86:53:1D:B1:2D:BA:24:D9
            X509v3 Authority Key Identifier:
                keyid:79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/3133382e33362e3232302e302f32322d3234203d3e20323635373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:b4:30:55:34:57:42:48:e9:68:a3:e9:ea:1c:13:e5:ed:0e:
         e4:91:a7:db:19:87:7e:5c:12:3e:a0:4c:7a:84:1d:f7:cd:5d:
         1f:1c:6f:9a:fc:a6:cb:33:fd:69:92:cd:eb:6c:fe:56:95:07:
         21:37:db:5a:62:c1:c1:a5:f2:9d:1a:6f:a2:58:1d:16:f6:19:
         56:bd:a5:ca:e1:c4:5d:3f:77:84:9a:a6:6f:29:33:d8:30:06:
         6f:16:e0:63:ca:e1:6f:fe:00:88:dd:7f:7b:f0:c6:cd:d9:bd:
         a9:d5:db:51:a1:0e:78:81:a1:ae:71:59:09:6c:e5:41:53:7c:
         7b:86:c6:0e:db:07:c2:f1:bd:d6:5c:6e:27:bb:16:9e:d5:1c:
         64:f7:81:fe:5d:04:b5:43:88:45:16:21:42:05:d6:25:6d:ad:
         e4:9b:10:cb:15:56:7a:96:ff:09:64:eb:d7:66:d2:51:95:d6:
         6d:0c:d3:e2:f7:1e:68:0a:b8:c7:2e:d3:31:cf:0e:ab:a0:dd:
         9b:80:92:23:3b:56:a0:10:5a:a9:d4:97:75:ba:0b:80:8c:d8:
         2a:85:2d:42:91:9f:ca:19:fc:e3:f1:68:41:b7:93:ff:6e:cd:
         cd:af:2e:3b:d8:c8:91:d7:2c:fe:ee:53:9a:51:c4:a6:ce:31:
         71:84:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:17:45 2025 by rpki-client