Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/3133382e3131382e3231362e302f32322d3234203d3e20323633373830.roa
File:                     3133382e3131382e3231362e302f32322d3234203d3e20323633373830.roa (raw, json)
Hash identifier:          5Vqb2aSrrASOeAez1vkzIPzermB8opauDGLc/Yygjlw=
Subject key identifier:   A9:E1:74:41:95:6C:B6:64:3E:39:61:D4:6E:9F:02:7F:4E:B4:EA:B0
Certificate issuer:       /CN=188358D72A27E615B114F9B1D346721CB266F6EA
Certificate serial:       747F5FB14071DEF22B4C24BCCBC4D73AC8973EE5
Authority key identifier: 18:83:58:D7:2A:27:E6:15:B1:14:F9:B1:D3:46:72:1C:B2:66:F6:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/188358D72A27E615B114F9B1D346721CB266F6EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/3133382e3131382e3231362e302f32322d3234203d3e20323633373830.roa
Signing time:             Tue 04 Feb 2025 18:41:56 +0000
ROA not before:           Tue 04 Feb 2025 18:36:56 +0000
ROA not after:            Tue 03 Feb 2026 18:41:56 +0000
asID:                     263780
IP address blocks:        138.118.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/188358D72A27E615B114F9B1D346721CB266F6EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/188358D72A27E615B114F9B1D346721CB266F6EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/188358D72A27E615B114F9B1D346721CB266F6EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7f:5f:b1:40:71:de:f2:2b:4c:24:bc:cb:c4:d7:3a:c8:97:3e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188358D72A27E615B114F9B1D346721CB266F6EA
        Validity
            Not Before: Feb  4 18:36:56 2025 GMT
            Not After : Feb  3 18:41:56 2026 GMT
        Subject: CN=A9E17441956CB6643E3961D46E9F027F4EB4EAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:ac:55:50:86:e3:e0:e0:c3:71:7a:f7:f4:
                    70:36:7f:aa:37:b0:8e:6f:12:95:e0:6c:7e:fd:44:
                    7f:09:19:50:30:b0:fa:82:23:94:ae:32:8e:28:85:
                    79:92:82:35:05:fb:c5:c7:16:a1:b0:59:f5:34:e2:
                    92:4e:de:fa:5a:d4:24:98:d3:85:d1:db:76:82:d2:
                    85:8d:d3:1b:b0:30:9a:02:1a:dc:db:7d:97:06:84:
                    24:18:b9:57:0a:24:6b:c2:17:3d:1f:69:fb:f8:2b:
                    a3:38:dc:ab:eb:67:1a:6e:dc:fb:ff:4f:a1:9d:7a:
                    31:f0:b2:94:4b:cb:f2:17:f6:4f:0c:b0:66:a8:42:
                    4f:a0:aa:fe:1a:f9:ac:a6:a4:0c:5e:5a:2a:19:08:
                    81:53:3a:b6:05:ef:f0:97:77:6b:de:86:ab:c3:19:
                    2d:45:52:d1:7a:26:69:ff:22:1e:7b:63:cf:09:a6:
                    3f:25:d9:5d:8a:76:42:26:32:34:3d:99:d3:cf:cc:
                    64:0f:2d:40:de:17:15:3e:53:02:47:a3:ab:f1:39:
                    fd:29:21:6c:9e:8f:dd:15:14:65:ef:59:4f:68:a1:
                    5a:2b:95:b2:19:c9:e1:78:f5:ba:27:27:2e:f5:26:
                    ce:aa:2c:8a:3e:17:bc:92:d9:ba:01:14:29:a0:27:
                    31:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E1:74:41:95:6C:B6:64:3E:39:61:D4:6E:9F:02:7F:4E:B4:EA:B0
            X509v3 Authority Key Identifier:
                keyid:18:83:58:D7:2A:27:E6:15:B1:14:F9:B1:D3:46:72:1C:B2:66:F6:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/188358D72A27E615B114F9B1D346721CB266F6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/188358D72A27E615B114F9B1D346721CB266F6EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/3133382e3131382e3231362e302f32322d3234203d3e20323633373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:6d:49:13:e0:99:bf:ab:79:05:2d:75:b8:94:eb:41:3c:1a:
         b3:62:40:90:69:9c:5f:d8:ba:5c:aa:81:2c:11:c9:d2:6a:82:
         e4:d7:0c:a3:36:70:5b:02:29:30:d4:9b:8a:36:25:ef:3d:d3:
         05:69:61:d5:bb:56:9d:ac:4c:c9:1e:b4:7f:18:43:ce:a1:4d:
         a1:dc:dd:45:3d:28:6d:05:9f:58:8c:88:64:fb:b4:75:45:79:
         58:dc:88:85:ca:78:a8:a7:a5:56:8f:08:d9:f9:2e:a6:cf:4c:
         9e:74:29:1e:2b:3f:b5:ae:64:53:21:f4:97:5e:12:ac:8c:87:
         6c:59:b2:6c:22:2f:37:c2:b3:da:31:f8:95:fa:26:3a:51:59:
         91:27:80:c4:49:b9:73:fc:a2:ea:2f:81:ef:df:f8:e0:ff:9e:
         4e:e9:c3:99:f0:5a:97:83:eb:39:60:92:f0:94:3c:c5:e0:51:
         34:40:e0:b5:db:d4:5b:58:02:d0:cf:ab:5c:c1:0d:cf:4b:4b:
         ab:3f:b3:56:e8:c8:2a:27:0c:c0:d3:db:9e:df:98:a7:50:61:
         34:75:74:01:65:67:be:dc:7c:3f:9d:ff:cb:7e:78:af:90:75:
         f0:45:52:13:77:56:13:ed:92:2a:02:2d:14:9b:3d:00:05:dd:
         8a:8e:41:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:03 2025 by rpki-client