Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/3133382e3132322e32342e302f32342d3234203d3e20323633373835.roa
File:                     3133382e3132322e32342e302f32342d3234203d3e20323633373835.roa (raw, json)
Hash identifier:          tn2VP+Fxf6wulCZB//fdOSuN1tjRXAeDKGZfrFkvlJk=
Subject key identifier:   9F:C3:57:B6:1F:80:50:FF:E5:2A:86:0D:0D:1E:FB:71:FD:52:8A:EB
Certificate issuer:       /CN=83F8DFD087BA80748886EDE0E890BB3BC4067535
Certificate serial:       68913FC4114FC44FF546D6D4A05BCD4CF54410D7
Authority key identifier: 83:F8:DF:D0:87:BA:80:74:88:86:ED:E0:E8:90:BB:3B:C4:06:75:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/3133382e3132322e32342e302f32342d3234203d3e20323633373835.roa
Signing time:             Wed 23 Jul 2025 02:05:00 +0000
ROA not before:           Wed 23 Jul 2025 02:00:00 +0000
ROA not after:            Wed 22 Jul 2026 02:05:00 +0000
asID:                     263785
IP address blocks:        138.122.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 02:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:91:3f:c4:11:4f:c4:4f:f5:46:d6:d4:a0:5b:cd:4c:f5:44:10:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F8DFD087BA80748886EDE0E890BB3BC4067535
        Validity
            Not Before: Jul 23 02:00:00 2025 GMT
            Not After : Jul 22 02:05:00 2026 GMT
        Subject: CN=9FC357B61F8050FFE52A860D0D1EFB71FD528AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:e6:0d:66:0a:5e:9e:78:15:86:31:37:b8:
                    55:35:55:34:5f:89:19:b1:11:66:10:f6:81:59:30:
                    72:4a:51:cd:10:56:de:88:8e:ca:65:c4:9c:b5:3c:
                    1c:d5:ad:0f:59:9d:cd:53:bb:a2:ed:b7:de:60:90:
                    fd:51:22:00:b8:7b:3c:ad:f5:fb:0e:bb:00:85:9e:
                    30:47:36:52:ef:c9:80:7b:1a:1f:3f:2e:85:37:ca:
                    6e:67:ec:2d:27:f3:d9:af:38:e3:5f:e0:d9:6d:72:
                    46:9c:08:3c:f8:0c:bb:db:59:c4:75:4f:47:7d:c2:
                    59:cb:48:1a:5d:6f:df:dd:1c:be:4c:22:21:30:64:
                    51:4c:a5:1b:ee:e0:45:d4:79:62:c3:b4:ed:f3:63:
                    e4:ad:0f:79:a2:0a:58:92:a8:88:df:ee:f8:ce:c4:
                    67:1f:4d:70:fe:87:5a:4a:9f:f7:6b:d1:9f:23:45:
                    3f:76:50:f5:f0:8f:9c:d5:04:21:96:ac:9e:c1:bc:
                    c2:0d:8c:b5:d7:10:18:18:23:07:4f:9c:8d:94:3f:
                    c4:7d:a5:1a:84:75:97:ec:2f:83:12:4d:75:30:1f:
                    04:46:e7:ce:57:75:5a:23:4a:5f:80:f9:7b:c8:f2:
                    31:0e:70:90:0d:17:d7:d5:c7:2c:c9:2e:56:cf:c7:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C3:57:B6:1F:80:50:FF:E5:2A:86:0D:0D:1E:FB:71:FD:52:8A:EB
            X509v3 Authority Key Identifier:
                keyid:83:F8:DF:D0:87:BA:80:74:88:86:ED:E0:E8:90:BB:3B:C4:06:75:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F8DFD087BA80748886EDE0E890BB3BC4067535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD1631316A1241999F7E920D19A47C84566AD3BF14886F93194C84E1EE56D58D/0/3133382e3132322e32342e302f32342d3234203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ad:d2:b4:af:ea:de:da:bb:68:8b:f8:a5:7d:95:65:48:e3:
         3d:8f:4d:6d:f2:32:7a:1e:55:e0:4b:3f:c8:ac:96:fc:e3:e9:
         f0:fa:8a:74:7b:96:1f:95:7f:43:3e:e2:b3:6d:cc:1f:88:86:
         09:f6:6b:7e:d6:5f:e9:2f:60:4b:1d:5b:92:2e:29:04:88:b7:
         88:14:8d:c5:6f:b2:a5:d7:74:02:08:81:0f:1c:9f:cb:3a:ae:
         8c:07:97:78:7a:e4:72:ad:4d:b9:67:60:30:24:39:07:9c:ba:
         67:96:a6:1e:34:66:8a:76:e8:0b:43:f8:7f:b5:07:45:33:ce:
         fc:8a:65:d0:fb:be:90:f3:0f:16:e2:14:57:09:94:aa:1d:af:
         1c:c1:19:91:ca:cb:95:f9:d7:89:10:c0:d7:bc:1e:07:59:70:
         82:a8:31:88:a0:15:f4:a3:81:7a:57:df:7a:ca:95:ec:05:ef:
         06:2f:ac:8a:07:2b:7b:b9:9a:1b:47:ba:95:98:b2:07:6e:bf:
         8d:a7:8e:4d:5a:f5:91:a2:4f:72:9e:0e:76:11:6e:fd:48:86:
         97:ff:3f:9d:87:64:fc:ca:7a:12:3e:4e:89:b4:82:c6:29:42:
         96:8a:62:40:66:66:f9:5e:be:c8:37:9b:74:80:06:77:10:4c:
         20:2f:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:01:02 2025 by rpki-client