Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3133382e3131372e34312e302f32342d3234203d3e20323732383132.roa
File:                     3133382e3131372e34312e302f32342d3234203d3e20323732383132.roa (raw, json)
Hash identifier:          Yt36B7paDtRu4f6ICSs4KBJtd8+g3vYrJ7uxpyvXZbs=
Subject key identifier:   BD:36:E8:C0:C0:09:F6:1D:DB:24:59:68:BE:E2:77:69:3A:43:14:39
Certificate issuer:       /CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
Certificate serial:       16DA4276E344E5A3C62252263249746FCE80DD47
Authority key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3133382e3131372e34312e302f32342d3234203d3e20323732383132.roa
Signing time:             Tue 03 Jun 2025 14:30:02 +0000
ROA not before:           Tue 03 Jun 2025 14:25:02 +0000
ROA not after:            Tue 02 Jun 2026 14:30:02 +0000
asID:                     272812
IP address blocks:        138.117.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 17:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:da:42:76:e3:44:e5:a3:c6:22:52:26:32:49:74:6f:ce:80:dd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
        Validity
            Not Before: Jun  3 14:25:02 2025 GMT
            Not After : Jun  2 14:30:02 2026 GMT
        Subject: CN=BD36E8C0C009F61DDB245968BEE277693A431439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:79:bf:a0:45:93:ec:77:5d:7a:fb:f5:6c:
                    6d:dd:82:05:35:6f:fb:b9:0c:92:b1:22:d0:0f:34:
                    bf:c2:b4:b4:05:1b:1f:ab:f3:a7:0f:a7:ec:a8:bb:
                    72:08:02:d6:8c:bd:f8:5a:e7:3e:32:50:c6:7f:e7:
                    63:a8:69:91:74:2b:9e:5f:43:0e:47:be:5b:5e:96:
                    d2:f3:7f:1e:bc:72:25:47:1e:45:57:5e:b4:1f:28:
                    68:35:ea:ed:93:0f:38:27:17:a5:98:fa:54:ed:2b:
                    14:17:1b:8c:be:9f:76:78:d6:35:95:09:84:3c:34:
                    36:4b:81:c2:8f:c4:e0:58:b0:5c:f7:c1:46:a5:cf:
                    b9:99:98:4a:7b:23:4e:e9:7b:06:65:b9:69:66:eb:
                    05:5b:48:11:cf:a6:c2:cb:36:4d:73:99:38:0d:8b:
                    18:26:cd:69:fb:05:54:b1:a3:7c:4d:0f:86:05:81:
                    51:0b:54:d8:3a:91:57:1f:3f:3a:9c:92:cb:f8:19:
                    2f:83:9c:2e:1b:0e:a2:08:17:e3:ba:61:22:25:6c:
                    af:b7:f8:7a:ed:74:7b:b7:a4:ce:ea:f9:a6:01:12:
                    87:16:af:3c:da:53:7f:15:77:32:0e:5e:5a:97:22:
                    2a:95:1c:16:84:92:7f:23:6a:7f:65:c8:2a:b8:73:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:36:E8:C0:C0:09:F6:1D:DB:24:59:68:BE:E2:77:69:3A:43:14:39
            X509v3 Authority Key Identifier:
                keyid:B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3133382e3131372e34312e302f32342d3234203d3e20323732383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:52:63:50:1a:65:bf:d6:eb:34:4e:12:ad:e1:3a:1b:e3:e0:
         81:9d:3c:ec:fb:9f:5d:02:ad:93:8c:ee:04:b2:e7:ea:84:4a:
         c4:60:02:ec:d0:fa:99:ae:bd:ad:c6:59:26:00:1e:16:0d:fb:
         cc:79:e2:49:fd:9c:b4:84:ce:e7:11:2e:ec:df:ac:96:0d:41:
         86:80:64:0e:8b:ce:da:d0:cc:46:91:ea:9f:dd:74:6a:7d:72:
         36:3b:66:ca:5c:32:d5:2a:22:ee:05:82:57:5d:fa:8b:74:ca:
         86:36:d6:fe:54:68:95:6e:55:86:7d:bf:01:fa:e4:af:e5:b5:
         02:cf:58:d2:41:78:28:e9:80:a3:c7:21:94:54:00:00:fc:f5:
         7f:da:e5:20:2d:5a:7d:02:dc:8a:ba:8c:d4:f6:93:0e:fe:52:
         b6:5a:0e:05:dc:e6:8d:3b:59:57:52:1b:54:41:55:ab:8d:c9:
         e8:a7:64:fe:14:82:3e:ec:5b:cc:f1:d6:d0:88:4a:84:6d:ae:
         6d:27:27:c8:f4:14:e8:44:48:c3:c0:bf:c2:0c:27:b5:f2:df:
         34:05:32:1f:f7:8a:76:66:73:ca:94:59:6b:66:2d:d2:4a:a0:
         2f:f6:5c:f5:9c:aa:0b:67:ba:80:1e:f4:b0:5b:6c:ab:f1:98:
         01:8e:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:16:47 2025 by rpki-client