Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234342e302f32332d3234203d3e203136393036.roa
File:                     3133382e39342e3234342e302f32332d3234203d3e203136393036.roa (raw, json)
Hash identifier:          IkCrvl0Y0rzg5hFfCs5CcalW1+0avCgv41C14aXdtg8=
Subject key identifier:   1D:E7:42:20:0E:A3:DA:3D:3A:6A:CC:55:1D:01:64:D2:89:AA:EB:B1
Certificate issuer:       /CN=715132E5B211C0DCD956A35200F9D107D5463F64
Certificate serial:       59C3D9589A51B33921E5223C0DDFA38EFB14C4F1
Authority key identifier: 71:51:32:E5:B2:11:C0:DC:D9:56:A3:52:00:F9:D1:07:D5:46:3F:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234342e302f32332d3234203d3e203136393036.roa
Signing time:             Thu 19 Jun 2025 22:22:50 +0000
ROA not before:           Thu 19 Jun 2025 22:17:50 +0000
ROA not after:            Thu 18 Jun 2026 22:22:50 +0000
asID:                     16906
IP address blocks:        138.94.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 16:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c3:d9:58:9a:51:b3:39:21:e5:22:3c:0d:df:a3:8e:fb:14:c4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715132E5B211C0DCD956A35200F9D107D5463F64
        Validity
            Not Before: Jun 19 22:17:50 2025 GMT
            Not After : Jun 18 22:22:50 2026 GMT
        Subject: CN=1DE742200EA3DA3D3A6ACC551D0164D289AAEBB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:26:ae:1d:03:e0:21:a3:7b:2a:5a:4a:ad:d3:
                    6c:54:56:4e:55:3d:7a:b2:88:bc:43:b1:1d:7f:fd:
                    25:98:51:c6:48:86:c1:76:b0:1d:f3:b5:6d:b3:dc:
                    07:0a:db:20:41:e9:0f:bc:77:e1:f6:0c:6f:e6:8b:
                    35:ae:24:a0:02:aa:62:e6:ff:79:30:d8:39:f9:d8:
                    ff:9a:cc:11:3d:73:ec:40:00:83:65:e9:e6:d5:04:
                    32:ac:00:bb:92:5d:8a:b5:d0:2e:82:5a:ff:64:dc:
                    ea:29:e2:dd:f3:ea:de:d0:0d:9a:fe:45:35:c0:0a:
                    1b:a7:3c:e7:a7:43:7c:70:46:d0:d7:77:d3:b4:14:
                    f9:c8:19:5e:20:ac:6f:df:2f:d9:9e:d7:7b:7c:0a:
                    cf:56:a8:88:eb:b6:5d:6b:66:2a:6b:d7:6e:70:91:
                    75:82:8b:54:56:19:42:00:83:c3:72:16:3d:50:71:
                    34:7b:b7:91:35:fd:f3:58:23:53:e8:a3:7e:0a:14:
                    0b:ef:42:4c:f2:eb:8f:12:4f:0a:08:48:6a:07:58:
                    9b:3d:e0:bd:d4:22:64:42:eb:3f:e9:ff:30:a0:37:
                    59:19:12:fd:69:97:fc:92:ce:95:72:3e:5e:53:38:
                    3d:f7:8a:18:23:47:56:ed:1c:2b:b0:b9:96:5c:02:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E7:42:20:0E:A3:DA:3D:3A:6A:CC:55:1D:01:64:D2:89:AA:EB:B1
            X509v3 Authority Key Identifier:
                keyid:71:51:32:E5:B2:11:C0:DC:D9:56:A3:52:00:F9:D1:07:D5:46:3F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/715132E5B211C0DCD956A35200F9D107D5463F64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/715132E5B211C0DCD956A35200F9D107D5463F64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43304FCA810494E4019CF35E83C893ACEEA84CFE21A6924BFE540EC17B17DD86/0/3133382e39342e3234342e302f32332d3234203d3e203136393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:04:7c:bc:e2:35:07:26:18:1f:28:c2:8c:c1:90:34:3e:01:
         3c:71:ed:e3:72:37:e2:00:8e:22:84:47:0e:1f:3d:a9:39:9c:
         97:1f:f0:f6:07:a7:78:ec:ef:55:05:bc:e4:7c:9e:f1:43:22:
         00:bf:5f:d9:71:02:1e:62:ce:7e:72:42:ed:b6:ee:79:ba:ee:
         59:da:52:12:37:f4:63:36:85:57:f0:d5:15:fc:77:24:9b:a7:
         8d:90:86:a2:97:51:d7:ae:2b:5e:e2:a4:41:1d:b8:1d:45:1a:
         62:fc:8c:50:f4:85:62:c5:33:47:05:b8:e8:cc:0d:35:f1:b3:
         36:1b:a8:1d:ea:75:b9:01:49:e3:c2:8f:16:08:9c:28:a0:ad:
         b6:f3:cb:92:3f:7c:53:f2:58:46:c5:1a:4b:cf:f5:55:1c:16:
         53:6f:a0:ba:3c:8b:5e:aa:b2:7e:b1:28:1c:c3:9a:c4:9f:f9:
         02:63:08:50:99:82:93:ed:d6:da:4e:80:bb:ff:dc:9d:e3:7a:
         8e:6f:61:7b:f9:8e:00:9a:07:bf:69:29:67:81:2e:66:e2:23:
         33:37:f5:0e:92:69:5f:22:09:b6:8a:b2:e9:89:4d:88:fa:2e:
         e6:29:54:a0:19:32:c4:45:c8:1e:cf:ca:1a:0a:8b:96:d1:0e:
         7a:44:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 10:35:59 2025 by rpki-client