Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/3133382e3131372e3134322e302f32332d3234203d3e20323633373631.roa
File:                     3133382e3131372e3134322e302f32332d3234203d3e20323633373631.roa (raw, json)
Hash identifier:          NWARDmTfVbmcabcRFjb+sLS+xAHuL16Y22QRLgRN4zA=
Subject key identifier:   D5:8C:96:16:47:44:05:7D:13:2B:EB:95:EC:A2:9C:F8:3F:DA:E8:2B
Certificate issuer:       /CN=F279D661C4E03FF0C843C0E122E4839565933C7C
Certificate serial:       4D14F0A5515CEA56CBA340600852A10262EA538E
Authority key identifier: F2:79:D6:61:C4:E0:3F:F0:C8:43:C0:E1:22:E4:83:95:65:93:3C:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/3133382e3131372e3134322e302f32332d3234203d3e20323633373631.roa
Signing time:             Mon 24 Feb 2025 15:10:58 +0000
ROA not before:           Mon 24 Feb 2025 15:05:58 +0000
ROA not after:            Mon 23 Feb 2026 15:10:58 +0000
asID:                     263761
IP address blocks:        138.117.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:14:f0:a5:51:5c:ea:56:cb:a3:40:60:08:52:a1:02:62:ea:53:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F279D661C4E03FF0C843C0E122E4839565933C7C
        Validity
            Not Before: Feb 24 15:05:58 2025 GMT
            Not After : Feb 23 15:10:58 2026 GMT
        Subject: CN=D58C96164744057D132BEB95ECA29CF83FDAE82B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:13:12:0a:68:0d:e2:1c:bb:aa:65:46:33:
                    64:4f:2b:e6:14:cd:98:d1:bb:89:90:30:f4:44:41:
                    89:8c:02:16:fd:4c:d8:8c:56:74:27:c2:56:b7:25:
                    5f:2d:35:73:4b:05:37:48:90:b3:6a:f5:b3:35:0c:
                    b2:af:ea:a6:5c:8e:fd:9b:55:32:6c:f3:3d:47:0e:
                    c7:25:39:1a:9c:d3:a7:81:3a:72:21:34:ef:eb:f1:
                    c9:07:82:68:77:f0:d7:cf:f8:0b:ba:5e:c5:08:86:
                    d6:63:a1:28:01:fc:ad:1e:94:1f:62:eb:4e:87:a0:
                    88:30:2e:fa:ed:f7:7d:98:43:6a:40:87:65:13:24:
                    69:99:7a:2e:e0:1a:56:2f:c6:f9:84:03:13:e6:33:
                    be:14:c0:38:6c:57:3f:49:09:17:45:65:b9:ef:3c:
                    fb:22:c3:f0:ff:3a:d8:1d:b8:36:e2:af:74:f4:6f:
                    db:74:29:0a:1f:da:f0:43:a6:2a:c3:ff:95:b6:1d:
                    bc:1f:38:80:b3:5a:f3:77:db:54:13:d6:a1:f2:59:
                    a5:d7:16:b3:a5:49:95:5c:b1:88:96:03:6f:61:1c:
                    cb:ed:f1:cf:91:cd:ac:6a:e8:60:2f:76:43:ef:8a:
                    72:fe:18:a1:2c:97:be:96:84:80:2b:4f:87:c0:ce:
                    08:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8C:96:16:47:44:05:7D:13:2B:EB:95:EC:A2:9C:F8:3F:DA:E8:2B
            X509v3 Authority Key Identifier:
                keyid:F2:79:D6:61:C4:E0:3F:F0:C8:43:C0:E1:22:E4:83:95:65:93:3C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/F279D661C4E03FF0C843C0E122E4839565933C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F279D661C4E03FF0C843C0E122E4839565933C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE664F72D9B391E53BD233E258BF0C2E97193405A4F8BAC8A6D7BD823EA3C9A6/0/3133382e3131372e3134322e302f32332d3234203d3e20323633373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:75:f2:67:77:b8:40:f3:fd:f2:89:86:43:2a:4d:c1:2a:c2:
         02:a2:02:d8:13:88:11:e2:6a:e3:b9:8d:76:7f:90:ed:f9:45:
         fd:2d:98:a6:c4:a7:c0:7c:7c:5e:04:c5:ae:16:28:13:18:75:
         40:10:68:80:52:ce:f6:4d:2d:ed:e0:fa:ed:26:6e:d7:37:32:
         cc:de:8a:70:5f:32:84:60:fe:3a:94:14:d3:26:a2:07:6d:eb:
         eb:0e:fc:4d:2e:54:4d:9e:1f:5f:3b:ff:21:6c:ff:18:0e:25:
         80:e0:70:f7:4f:b1:ec:d4:8b:46:10:2a:8e:e5:cb:81:88:e9:
         c7:62:55:ca:b0:7d:7e:d8:26:99:e0:01:15:a9:ca:33:48:b4:
         86:a9:18:64:a2:b4:fc:7f:95:36:39:01:8d:14:74:b8:5f:66:
         b3:4c:82:e9:a9:16:56:00:b8:15:2a:2e:fa:14:25:30:69:84:
         05:f7:88:e2:6c:63:10:1b:f6:06:e5:86:7a:7e:bf:38:d9:b1:
         5f:76:19:e8:0d:4c:dd:6e:4f:fb:0c:71:ee:dc:20:80:f5:20:
         3a:4b:b4:d8:8a:8d:a3:c3:f6:86:f4:b2:59:c8:89:1d:be:70:
         d3:9b:0d:bb:a0:f0:ec:74:cf:dc:44:7f:fc:e5:e2:f7:92:bf:
         20:14:5c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:21:45 2025 by rpki-client