Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3133382e33362e3134342e302f32342d3234203d3e203332303334.roa
File:                     3133382e33362e3134342e302f32342d3234203d3e203332303334.roa (raw, json)
Hash identifier:          DLmoj2atxvn9Mfqu7VBjdYEexeeGv6TFfnaaNE9wIsk=
Subject key identifier:   DF:8C:8B:CF:F5:C6:9F:28:48:89:3D:07:38:E3:99:FB:BD:F8:4C:DC
Certificate issuer:       /CN=DC553BD05B33548C342568566291E719B4FA73B9
Certificate serial:       17EF3C2DD39018E5EFAD277B5A20EBDC6DF98F44
Authority key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3133382e33362e3134342e302f32342d3234203d3e203332303334.roa
Signing time:             Tue 04 Feb 2025 18:19:47 +0000
ROA not before:           Tue 04 Feb 2025 18:14:47 +0000
ROA not after:            Tue 03 Feb 2026 18:19:47 +0000
asID:                     32034
IP address blocks:        138.36.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ef:3c:2d:d3:90:18:e5:ef:ad:27:7b:5a:20:eb:dc:6d:f9:8f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC553BD05B33548C342568566291E719B4FA73B9
        Validity
            Not Before: Feb  4 18:14:47 2025 GMT
            Not After : Feb  3 18:19:47 2026 GMT
        Subject: CN=DF8C8BCFF5C69F2848893D0738E399FBBDF84CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:58:8e:e6:14:cf:4a:3f:99:2f:17:d4:ff:e0:
                    c5:dd:d9:66:ae:23:bf:e0:1a:4c:e3:91:c4:85:e0:
                    aa:1b:55:76:d5:82:18:02:a7:e2:01:52:9c:b3:d7:
                    d8:ff:a8:5a:b1:57:ed:af:ed:8e:fc:ba:38:dc:2e:
                    7c:df:38:7c:a9:f3:4d:30:6f:ef:0e:0f:21:fa:0b:
                    8c:70:49:1b:21:eb:d5:39:dc:85:ba:d9:54:b6:bc:
                    f4:d3:3e:76:4a:3e:f9:43:83:53:9b:43:2c:a9:c1:
                    51:6d:49:99:5c:4e:c6:d4:08:43:27:ab:66:76:dd:
                    0b:39:9f:15:1a:78:91:97:ea:c0:70:d3:65:f7:4c:
                    20:c2:44:6e:41:7f:24:f8:ac:1e:bf:96:f9:97:7a:
                    0d:ce:1a:7a:81:cb:9c:e2:d0:1a:b7:bc:0b:8d:16:
                    6a:4a:66:69:6a:57:cb:1b:9f:60:39:d0:97:b6:2f:
                    a8:47:1f:f3:ee:1d:5b:00:ab:87:4c:73:90:50:ab:
                    da:86:98:52:0f:5c:60:c1:75:55:9b:9a:1b:91:8b:
                    c3:7f:6d:8b:08:7f:8e:eb:8a:92:d4:21:c0:a9:ff:
                    87:b7:68:7c:8c:9e:da:1e:c7:0f:92:5f:f9:ba:43:
                    49:ab:02:e8:b1:ef:6e:cf:dd:13:ac:3e:c6:f0:3c:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8C:8B:CF:F5:C6:9F:28:48:89:3D:07:38:E3:99:FB:BD:F8:4C:DC
            X509v3 Authority Key Identifier:
                keyid:DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3133382e33362e3134342e302f32342d3234203d3e203332303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:aa:b3:90:e7:ac:b7:c2:22:a2:1d:c3:fd:92:e9:31:da:
         d7:b6:ee:ec:5c:cf:5a:1b:f1:0f:f4:84:b0:fc:ab:1d:5e:a3:
         0b:9d:ee:3f:57:1e:15:e3:cb:0d:63:74:0b:ae:f1:37:d8:ac:
         d9:07:31:15:ea:44:43:da:1f:34:65:15:62:2d:87:a0:88:77:
         80:cd:df:7e:2d:e6:92:56:7d:2c:d1:14:f5:a8:73:ef:4e:e9:
         fc:1f:29:1c:e5:7b:41:23:b6:e1:77:93:57:09:3f:11:d5:92:
         fe:64:0d:44:a9:60:78:12:ff:16:5a:e6:56:4a:50:73:5a:85:
         2a:c9:ac:93:30:71:01:04:43:52:df:58:60:53:dc:c9:db:20:
         44:f6:7b:da:17:bd:fc:08:e0:15:ef:22:df:ff:1c:d4:1b:54:
         2c:c9:a1:db:7e:c6:e0:f3:9d:4a:0e:c0:49:c2:06:68:cb:72:
         dd:f1:00:71:9e:b7:e9:d3:09:be:b5:d0:ce:fb:69:c6:e6:61:
         6c:cd:8f:e7:40:5b:57:8f:ac:40:4e:ed:ec:07:bd:fc:63:d5:
         40:28:26:38:f0:e7:af:c7:76:77:72:ff:c8:ea:23:5d:dd:a8:
         19:86:f2:18:34:3b:f2:1d:15:37:38:86:21:a5:04:ea:0a:8b:
         98:9a:75:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:23:03 2025 by rpki-client