Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/3133382e35392e302e302f32322d3235203d3e20323633373339.roa
File:                     3133382e35392e302e302f32322d3235203d3e20323633373339.roa (raw, json)
Hash identifier:          4dsfMufvY/8uSZDjERdkcyZaHdxHh0BHPpPEkrlOZjI=
Subject key identifier:   1B:AB:7F:59:E0:AD:AC:34:CF:FA:9C:AB:4F:BC:C2:58:A5:D3:E9:4F
Certificate issuer:       /CN=75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6
Certificate serial:       340655D8612AFC190931E7893B57FF29B6E1634D
Authority key identifier: 75:BA:39:73:8D:8D:B5:3F:4F:1A:AC:B2:D0:1E:33:19:F1:CE:D0:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/3133382e35392e302e302f32322d3235203d3e20323633373339.roa
Signing time:             Mon 27 Jan 2025 13:55:00 +0000
ROA not before:           Mon 27 Jan 2025 13:50:00 +0000
ROA not after:            Mon 26 Jan 2026 13:55:00 +0000
asID:                     263739
IP address blocks:        138.59.0.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:06:55:d8:61:2a:fc:19:09:31:e7:89:3b:57:ff:29:b6:e1:63:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6
        Validity
            Not Before: Jan 27 13:50:00 2025 GMT
            Not After : Jan 26 13:55:00 2026 GMT
        Subject: CN=1BAB7F59E0ADAC34CFFA9CAB4FBCC258A5D3E94F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b9:b0:17:fd:85:3c:63:fe:7d:72:4e:11:26:
                    0a:55:ce:73:86:5d:d6:80:36:37:65:22:54:71:25:
                    2b:d1:db:b6:e4:12:66:99:be:8d:de:0b:7f:bb:9a:
                    d4:b1:5a:61:60:2e:49:32:41:0a:15:8f:a9:52:7f:
                    56:98:58:73:e5:5c:47:93:74:34:1b:57:bb:d1:46:
                    d2:fb:23:9f:df:36:5f:65:e6:e2:92:3c:8f:cd:74:
                    b1:04:71:62:c5:e8:e4:35:f6:2e:bd:06:b5:1b:51:
                    97:1a:47:98:da:51:ad:d4:eb:f0:eb:ef:f8:80:fa:
                    31:88:79:a8:74:1d:39:ee:58:2d:90:15:a1:1f:b2:
                    46:fb:ab:4a:4f:d8:35:6b:9d:b9:72:b3:bf:33:74:
                    c2:2c:6e:9f:ed:11:0f:f8:d4:36:fe:f2:43:3d:5d:
                    27:1d:df:3e:e2:aa:27:68:9d:8e:f9:bc:31:9c:ee:
                    49:19:19:a4:8c:2e:09:eb:20:f2:f7:51:e9:5f:6b:
                    7d:6a:3a:2f:e2:70:92:40:1b:23:e6:4c:2e:f1:fa:
                    ee:24:34:b3:7d:5b:d4:71:83:0e:e2:7c:ba:a1:89:
                    22:e1:05:1d:96:c0:19:51:24:b1:10:97:11:2e:43:
                    a5:4c:e9:c9:65:3a:56:52:23:97:4e:9b:95:8d:30:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AB:7F:59:E0:AD:AC:34:CF:FA:9C:AB:4F:BC:C2:58:A5:D3:E9:4F
            X509v3 Authority Key Identifier:
                keyid:75:BA:39:73:8D:8D:B5:3F:4F:1A:AC:B2:D0:1E:33:19:F1:CE:D0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75BA39738D8DB53F4F1AACB2D01E3319F1CED0A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2BE090BE382C82690F7774238A2A67E240D968381332546AF54EACE891DB971/0/3133382e35392e302e302f32322d3235203d3e20323633373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:ff:6f:77:a1:9e:d2:dd:c2:49:22:66:69:20:85:90:19:6b:
         65:51:b8:80:db:49:27:80:04:d5:69:4a:d8:47:74:86:70:ab:
         6c:e8:64:6b:67:a6:1b:23:88:4f:a0:06:f8:bb:d1:52:26:02:
         55:4e:a8:55:51:d3:89:d3:99:d5:6f:5e:24:9b:66:0a:03:57:
         42:5f:0f:c1:4e:db:ae:81:25:41:1c:c9:97:46:1f:4e:00:2a:
         09:ce:f5:d6:68:78:e6:c9:42:eb:71:db:b9:cf:8b:38:04:b3:
         f6:d0:13:e1:b6:85:16:14:15:a7:bc:c7:0b:76:03:61:2c:da:
         ad:66:45:3c:c0:1f:df:f5:cd:d1:9f:7a:36:bc:d5:4e:aa:4e:
         1e:71:97:13:70:d4:80:ce:63:17:75:b4:0e:d3:dd:02:d6:3a:
         70:19:65:1f:89:a2:e2:8f:ef:bb:0a:3c:8e:74:99:a1:d2:75:
         cb:fa:04:41:4a:eb:37:17:37:aa:b2:43:56:62:4c:d2:f1:d9:
         e4:2c:4c:14:ac:95:49:96:6d:74:1e:6d:b2:06:8a:97:28:6e:
         38:f7:67:02:30:a8:7b:c8:42:d2:a0:5c:70:14:43:37:0c:09:
         08:8b:f9:5a:c7:ba:45:a0:6c:de:65:ca:33:67:5c:77:d7:05:
         60:5c:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:42 2025 by rpki-client