Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132332e302f32342d3234203d3e203634313339.roa
File:                     3133382e302e3132332e302f32342d3234203d3e203634313339.roa (raw, json)
Hash identifier:          C+EfL3m+CBc1rEWDXAzXamIIQGKAtXtd+ejROE9iQVc=
Subject key identifier:   C8:BF:4E:65:16:39:A8:4E:7C:FE:7E:52:DB:E0:3C:51:E9:9C:69:0E
Certificate issuer:       /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial:       5D462732EC9DBE08C1766E6C0E727D13B19ECD40
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132332e302f32342d3234203d3e203634313339.roa
Signing time:             Tue 04 Feb 2025 18:54:10 +0000
ROA not before:           Tue 04 Feb 2025 18:49:10 +0000
ROA not after:            Tue 03 Feb 2026 18:54:10 +0000
asID:                     64139
IP address blocks:        138.0.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:46:27:32:ec:9d:be:08:c1:76:6e:6c:0e:72:7d:13:b1:9e:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
        Validity
            Not Before: Feb  4 18:49:10 2025 GMT
            Not After : Feb  3 18:54:10 2026 GMT
        Subject: CN=C8BF4E651639A84E7CFE7E52DBE03C51E99C690E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f3:20:a8:1c:a5:fb:fd:db:28:91:0e:4e:f1:
                    b6:a2:a6:db:66:b6:41:f1:91:2a:96:c5:1f:b8:60:
                    1f:d5:42:34:29:c0:90:ff:0d:06:05:a0:9e:18:72:
                    c1:60:94:35:60:36:f8:c6:08:8e:b2:96:d9:ec:34:
                    01:e5:2d:0d:d1:1f:40:be:0f:fd:45:bf:44:a8:97:
                    b0:94:e0:d1:c2:99:64:dc:49:2c:69:66:aa:e0:0a:
                    f2:9c:83:7e:4f:dd:da:cc:b0:28:6d:78:0c:09:1b:
                    c7:2e:68:c4:52:bc:8e:07:99:97:ea:a8:07:dd:19:
                    25:aa:51:53:9e:2f:5d:ea:9b:66:d5:9b:31:ec:0f:
                    52:5c:71:80:86:c1:8e:f6:eb:5d:cc:a8:7d:db:3e:
                    31:27:a4:1c:90:62:f7:bb:64:d9:1a:1a:2e:a0:a7:
                    cc:e0:ab:b8:10:bc:1a:9f:06:c4:78:89:15:e2:59:
                    65:13:fd:80:83:24:f3:f4:7c:6e:0d:41:01:50:47:
                    cf:af:c7:50:90:8f:ae:16:bd:88:c9:0d:33:24:d6:
                    37:fa:e4:d9:cc:03:eb:1e:6d:20:c6:f5:2e:ad:6e:
                    79:93:4c:c4:f0:0c:00:de:ca:38:c7:74:d2:9e:8c:
                    63:e2:57:b0:ee:6d:49:1a:21:79:72:cd:1d:9b:89:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BF:4E:65:16:39:A8:4E:7C:FE:7E:52:DB:E0:3C:51:E9:9C:69:0E
            X509v3 Authority Key Identifier:
                keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/3133382e302e3132332e302f32342d3234203d3e203634313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:f4:47:0b:bf:28:a3:cc:66:35:a0:c5:af:01:90:85:c9:
         7e:1d:55:21:d6:99:5d:43:e0:4f:f7:16:da:62:73:ec:6b:d6:
         65:f5:fa:cf:b7:a5:f3:cb:91:09:98:db:c4:2c:6d:27:63:c3:
         5c:a1:f6:4e:95:14:27:85:6e:03:b5:2e:d8:90:1b:96:a9:b4:
         0d:c2:5c:4e:3f:ee:6a:a1:6d:bb:b1:c5:f0:c2:80:8b:79:d7:
         38:40:01:a2:cb:d4:8d:d1:de:25:ae:7a:e7:b9:2f:32:25:08:
         26:d1:94:7e:48:3c:5e:8c:97:59:ee:61:12:47:d9:6a:07:58:
         07:11:1a:7c:b3:ea:c9:44:8c:c8:9c:4f:0d:01:06:fe:ed:31:
         69:41:c5:ff:88:f0:50:14:78:20:2c:6e:4d:4c:b8:07:1c:39:
         59:6f:25:3e:d4:89:d0:65:fe:b9:ae:1d:4c:58:df:42:d7:62:
         9e:2e:2c:ae:37:e4:b9:3a:10:ab:12:8e:5f:86:11:5e:37:bb:
         f1:44:c8:44:01:63:ca:0b:0f:5e:03:ee:ce:d1:29:aa:61:b7:
         38:02:f8:64:d6:4c:af:6f:16:da:43:07:f1:25:87:53:77:35:
         20:33:25:39:e1:94:89:7d:aa:c6:18:8e:42:10:2b:fb:f8:39:
         c0:2a:e3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:54 2025 by rpki-client