Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138382e302f32322d3234203d3e20323633383031.roa
File:                     3133382e3132322e3138382e302f32322d3234203d3e20323633383031.roa (raw, json)
Hash identifier:          MnTfu2E+bmbG543RzzYU2IjFZjS2+fuQiRrEw83x9MM=
Subject key identifier:   B4:39:CE:7D:2F:E2:AD:A2:D0:85:40:2A:99:9D:E3:8A:F1:5D:1F:08
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       030819F204F97BF7523A0596E9D4B2B888A5E555
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138382e302f32322d3234203d3e20323633383031.roa
Signing time:             Mon 05 May 2025 00:15:03 +0000
ROA not before:           Mon 05 May 2025 00:10:03 +0000
ROA not after:            Mon 04 May 2026 00:15:03 +0000
asID:                     263801
IP address blocks:        138.122.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 13:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:08:19:f2:04:f9:7b:f7:52:3a:05:96:e9:d4:b2:b8:88:a5:e5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: May  5 00:10:03 2025 GMT
            Not After : May  4 00:15:03 2026 GMT
        Subject: CN=B439CE7D2FE2ADA2D085402A999DE38AF15D1F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:0e:d7:14:0f:40:f4:e1:74:66:a2:18:cf:
                    f7:ba:8b:f5:08:07:65:4b:95:f5:86:ef:bb:f8:be:
                    00:53:29:a3:11:65:cb:34:26:a3:48:ca:01:85:85:
                    fe:f7:1e:a4:c8:37:db:2f:28:80:b4:ce:6f:ed:ed:
                    f3:97:14:df:97:4e:b5:29:02:bf:fe:91:09:45:e9:
                    bf:d2:fb:7d:7d:b2:57:ff:12:11:5e:25:b6:f2:f4:
                    ca:32:be:00:a6:ff:3c:41:ca:47:3e:bd:a6:d3:65:
                    6e:fb:6a:d0:c7:df:71:6c:84:d6:d6:56:b4:12:af:
                    34:5d:0f:ca:fe:63:ef:db:87:2b:86:12:fd:83:8e:
                    6f:7b:90:c4:2b:b3:aa:7a:57:22:dd:fa:65:de:a4:
                    2e:c8:09:d3:14:fc:d4:c8:81:44:e0:06:d1:94:c9:
                    eb:44:3b:42:fc:b9:64:81:5e:28:17:7c:28:91:b5:
                    6c:23:61:8a:68:c3:96:43:7e:37:9e:71:6d:a5:cf:
                    22:83:bf:2e:96:0a:8b:23:18:fa:22:ac:c3:08:1b:
                    55:55:cc:39:e0:43:32:40:84:7e:89:73:cd:d0:f4:
                    94:26:70:d5:04:d7:c4:59:54:e4:45:06:28:7f:16:
                    a7:8b:45:a2:34:c7:89:f6:9a:4c:a1:69:c2:db:80:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:39:CE:7D:2F:E2:AD:A2:D0:85:40:2A:99:9D:E3:8A:F1:5D:1F:08
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138382e302f32322d3234203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:a5:4e:bf:15:e8:52:1e:b1:e7:b3:98:c7:f9:f6:0a:87:96:
         aa:ff:5a:b3:75:27:4b:6d:bf:b0:15:8f:7b:a3:58:88:d9:f7:
         da:d7:24:1c:81:92:ff:19:60:78:7c:1e:5f:bf:b6:cc:9b:b3:
         f7:c6:9a:63:3a:e8:96:5f:71:ac:56:54:ec:23:b5:63:6a:79:
         db:6e:f8:b3:f9:d5:36:3a:84:27:f0:1a:66:be:9e:c3:01:09:
         18:71:43:01:ff:99:58:d3:17:cb:be:c8:6a:ff:26:60:03:ee:
         c7:9d:5c:3e:82:63:b9:d2:24:b2:61:f2:b7:55:2c:78:a6:ef:
         32:2f:c8:97:57:a9:b8:88:44:c8:18:d8:4b:d5:a0:aa:d4:a3:
         ea:a6:12:48:b1:ff:6f:f2:3a:fb:9e:97:07:92:4f:cd:d1:d6:
         ea:27:76:90:6b:56:d0:27:6f:4c:e4:34:c2:60:56:30:57:38:
         b7:2c:d2:fc:1d:cc:a0:2e:2a:83:ee:c8:01:04:cc:20:0d:d3:
         b8:7b:e8:30:11:c8:65:40:f5:78:3a:23:7f:3d:a4:86:41:40:
         fc:3e:b7:a5:28:c2:4f:ed:de:e0:a8:7c:df:e1:f0:c6:75:f7:
         98:c5:a8:03:cb:d1:12:93:76:c6:49:8c:11:62:e3:98:15:9c:
         b9:05:a6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:20:06 2025 by rpki-client