Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3133382e3131372e34302e302f32342d3234203d3e20323639393830.roa
File:                     3133382e3131372e34302e302f32342d3234203d3e20323639393830.roa (raw, json)
Hash identifier:          OlT1MHOud0kRRuTNjpfAf41NLuWma15FhUgZeHjC440=
Subject key identifier:   DE:9E:3A:F8:BA:07:DD:98:4C:1D:94:48:0C:FD:91:69:61:48:98:D4
Certificate issuer:       /CN=2FD825A27B2B347F806C2CACDF49209D17BBF654
Certificate serial:       65F77EEC43859E7862A44CC2BB4DDD976916CB30
Authority key identifier: 2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3133382e3131372e34302e302f32342d3234203d3e20323639393830.roa
Signing time:             Fri 21 Feb 2025 21:45:00 +0000
ROA not before:           Fri 21 Feb 2025 21:40:00 +0000
ROA not after:            Fri 20 Feb 2026 21:45:00 +0000
asID:                     269980
IP address blocks:        138.117.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f7:7e:ec:43:85:9e:78:62:a4:4c:c2:bb:4d:dd:97:69:16:cb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FD825A27B2B347F806C2CACDF49209D17BBF654
        Validity
            Not Before: Feb 21 21:40:00 2025 GMT
            Not After : Feb 20 21:45:00 2026 GMT
        Subject: CN=DE9E3AF8BA07DD984C1D94480CFD9169614898D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:27:1d:bd:28:31:a1:e4:fe:60:ed:f6:80:49:
                    d2:a3:16:7e:ad:97:6a:6f:d3:f4:92:c4:bd:73:f9:
                    83:f2:d9:9f:5e:b2:d1:73:8f:1f:e1:8c:1c:bd:64:
                    47:7b:74:4a:d0:ec:ac:ae:cd:a2:7e:aa:9b:28:74:
                    7b:fd:d0:3b:2e:e8:b5:8f:2e:06:0a:70:20:9d:52:
                    d9:57:10:92:b4:36:47:da:a0:c0:79:f0:9a:a8:c4:
                    0a:23:59:bc:26:e2:af:33:98:48:54:53:e5:4d:2a:
                    12:59:da:c7:33:d7:de:15:03:8d:b1:92:12:13:8f:
                    0f:5d:da:b1:b0:c4:1f:e7:66:32:ee:5f:a9:e7:d2:
                    f0:dd:db:26:fe:dc:7b:9c:42:4f:b3:cd:c4:fe:bb:
                    17:3e:e3:d7:58:b0:e1:cd:06:32:d8:ad:41:65:08:
                    59:3a:78:52:5f:6f:45:0a:f7:75:fd:50:c1:80:d3:
                    ca:48:60:33:53:b2:2d:e7:e6:82:af:7b:20:2b:20:
                    8d:c0:a9:51:07:4e:52:aa:f8:67:50:18:d3:4c:26:
                    0b:6e:02:78:d7:17:ff:f9:5a:14:66:3f:0e:48:75:
                    76:32:8e:09:52:34:8e:72:08:b3:a5:b4:76:cf:af:
                    ae:57:8e:2a:32:c2:6b:f5:54:af:5d:93:72:25:8d:
                    75:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9E:3A:F8:BA:07:DD:98:4C:1D:94:48:0C:FD:91:69:61:48:98:D4
            X509v3 Authority Key Identifier:
                keyid:2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3133382e3131372e34302e302f32342d3234203d3e20323639393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f1:65:66:14:f1:52:4d:8c:78:9c:bc:04:f5:74:1f:51:6b:
         50:d1:c5:3a:c9:fa:b1:c1:e3:dc:13:fa:8c:b1:23:1c:ef:c4:
         5e:0b:28:d0:d6:a0:31:74:b3:4b:18:5f:ad:5e:d0:d7:d5:52:
         ad:05:fe:ea:46:ce:50:5d:fc:f8:37:2f:ed:dc:73:dd:cf:dd:
         d0:a4:ec:d8:e5:7e:84:14:b6:ae:43:52:8c:3f:fb:f6:21:fc:
         7c:5e:fc:18:f9:7e:71:90:f4:cb:40:22:17:e2:b7:64:f4:6e:
         c6:c7:05:2c:16:ab:9f:5a:5b:03:57:d7:56:18:9c:b5:55:bc:
         61:d6:d0:83:07:87:df:1c:5c:5b:59:52:db:33:c1:2c:f3:39:
         2f:f6:09:1d:cb:34:8c:a7:ee:63:7c:13:d9:a3:80:05:c2:94:
         73:ad:70:51:9f:23:f0:5b:b2:b1:6d:11:b8:e1:82:6f:30:04:
         12:e7:c1:bd:bc:cb:c2:db:df:0d:03:70:29:f6:8c:d4:44:4f:
         11:69:4b:4f:d4:3d:55:1f:2d:23:d1:e1:bf:98:20:28:32:ae:
         e6:50:69:7c:39:08:1e:3c:22:34:15:5d:cf:2b:25:d0:73:27:
         10:b5:2d:52:b7:58:41:d7:aa:11:6a:12:0f:20:96:02:fc:9e:
         b4:5a:e9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:06:26 2025 by rpki-client