Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3133382e3138362e32302e302f32322d3234203d3e203532343638.roa
File:                     3133382e3138362e32302e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          PNsA3AEjptY5ez0riAdux/WLxsnxH3ZzK+bp8Ogb8ks=
Subject key identifier:   EB:2B:32:25:96:59:BF:3C:B9:34:0A:A8:F2:39:33:F9:3F:6D:E2:86
Certificate issuer:       /CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
Certificate serial:       48B4A9E7E02D822912F5B27E1D7CC48FC59E98CE
Authority key identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3133382e3138362e32302e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 20:04:16 +0000
ROA not before:           Tue 04 Feb 2025 19:59:16 +0000
ROA not after:            Tue 03 Feb 2026 20:04:16 +0000
asID:                     52468
IP address blocks:        138.186.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b4:a9:e7:e0:2d:82:29:12:f5:b2:7e:1d:7c:c4:8f:c5:9e:98:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
        Validity
            Not Before: Feb  4 19:59:16 2025 GMT
            Not After : Feb  3 20:04:16 2026 GMT
        Subject: CN=EB2B32259659BF3CB9340AA8F23933F93F6DE286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ec:27:7c:6a:38:2a:90:c4:3e:95:54:19:46:
                    11:ca:bc:9f:40:27:c9:75:20:02:9a:79:38:a4:36:
                    87:01:ac:c9:19:97:39:77:bf:e0:1a:57:73:0b:04:
                    d6:6e:25:5b:4a:9a:e0:a2:e3:89:86:95:73:cc:3c:
                    cd:4c:1c:98:90:52:5f:cb:92:34:c2:ce:70:20:f1:
                    5e:b1:93:93:d6:3c:b9:d4:02:69:a2:0b:d8:66:a1:
                    15:7b:ab:bd:fc:56:51:af:40:d9:9c:ed:1b:86:20:
                    1e:4d:57:b2:a3:9f:fc:35:a8:44:04:80:f2:fc:41:
                    9c:6f:f0:49:4e:9c:9c:a5:9b:a2:09:6b:38:00:87:
                    e2:a9:47:37:34:58:2c:f6:2d:fa:b6:69:96:7f:9c:
                    c7:0d:10:d7:63:f8:a2:46:c2:df:ac:8d:7f:f0:ea:
                    1c:47:66:54:36:16:78:17:2e:d9:35:96:cc:ce:64:
                    b7:70:bd:c1:a0:d3:b5:4d:31:4c:45:62:ac:59:f7:
                    ad:55:c6:5a:75:ed:f9:5f:7a:5a:ee:f9:78:e4:0d:
                    2a:ec:af:8c:2a:22:82:8f:ae:62:6d:5c:87:ba:bf:
                    f4:7f:ce:c0:31:fc:ac:60:89:73:7c:61:8f:ed:b2:
                    2c:c6:06:fb:94:c2:a3:13:3c:58:49:2e:83:08:2a:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2B:32:25:96:59:BF:3C:B9:34:0A:A8:F2:39:33:F9:3F:6D:E2:86
            X509v3 Authority Key Identifier:
                keyid:86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3133382e3138362e32302e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:67:b9:b9:10:8f:23:24:7e:7d:37:54:9e:3c:c8:8e:0e:f0:
         d1:73:14:78:cd:4a:49:9d:6f:be:b1:7c:00:6e:ec:da:e7:5d:
         29:30:e3:ca:9c:11:a1:a5:05:2a:e2:34:5f:89:81:14:8b:a0:
         78:77:55:c8:30:2c:3f:9a:93:20:c5:d8:69:2a:35:25:c8:87:
         09:a9:2c:a8:2a:22:7b:6c:0f:7e:14:1c:6c:9f:96:e0:91:c8:
         3c:70:ee:b5:bc:1e:06:84:9e:aa:b7:9d:13:5b:30:fb:00:52:
         5f:54:df:47:05:5d:99:c5:4c:2e:fd:29:57:4c:16:5d:f1:bb:
         a9:07:dc:bb:2b:dd:c3:40:40:f5:2c:94:52:a5:6a:c7:e8:db:
         97:60:96:85:b3:f1:57:57:42:4e:48:3a:c2:33:f1:c3:60:13:
         33:6f:89:14:94:74:a4:4c:80:85:c6:ae:dc:a4:b6:31:c0:9d:
         58:50:86:20:7e:23:bf:8b:07:80:3c:94:62:fa:ea:fe:83:69:
         28:a2:c2:1d:b4:fc:88:61:15:d1:81:74:34:22:cd:85:c8:25:
         08:9c:a4:36:97:fb:bb:a7:7f:8c:0e:15:2b:ee:b8:74:92:f9:
         a6:f3:09:03:87:20:be:22:cc:61:10:58:a9:70:8e:27:63:b2:
         fb:82:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:54 2025 by rpki-client