Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138392e302f32342d3238203d3e20323633383031.roa
File:                     3133382e3132322e3138392e302f32342d3238203d3e20323633383031.roa (raw, json)
Hash identifier:          K8J+SoGciuP7nh2xwG2kVSlmJ8mhvofKC/aV9+BbUJM=
Subject key identifier:   06:C7:98:34:37:EF:F1:83:C3:31:0A:8F:7B:75:0F:94:79:29:AF:DF
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       2B38A54607625E291DEA4CE3271088CA98E8162B
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138392e302f32342d3238203d3e20323633383031.roa
Signing time:             Mon 05 May 2025 00:15:00 +0000
ROA not before:           Mon 05 May 2025 00:10:00 +0000
ROA not after:            Mon 04 May 2026 00:15:00 +0000
asID:                     263801
IP address blocks:        138.122.189.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 13:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:38:a5:46:07:62:5e:29:1d:ea:4c:e3:27:10:88:ca:98:e8:16:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: May  5 00:10:00 2025 GMT
            Not After : May  4 00:15:00 2026 GMT
        Subject: CN=06C7983437EFF183C3310A8F7B750F947929AFDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:ae:3c:78:86:17:da:8d:fc:28:52:69:3d:
                    47:df:0d:14:0e:b7:25:71:d5:a1:3e:46:65:c7:c8:
                    09:39:7d:b6:88:c0:39:8f:c9:93:41:6f:37:6e:e1:
                    29:26:47:27:d5:7f:fc:19:7e:36:cf:d7:e1:79:a0:
                    1d:8f:4b:a3:a9:f1:55:59:44:0e:2b:12:e1:d3:dc:
                    76:55:d3:00:bc:19:66:01:27:0a:f3:c0:d2:a6:00:
                    c8:8b:3b:a8:a9:06:74:f7:e0:a7:34:22:45:30:e3:
                    01:ab:2c:fa:4f:1d:4b:5d:c9:a3:85:fd:9a:8a:53:
                    96:02:f4:df:41:50:f6:46:bb:c1:b7:98:7c:7b:9c:
                    8a:5c:2d:19:fe:e7:ea:cb:db:a0:3e:0e:7e:50:e8:
                    0f:0d:2c:95:f4:eb:31:19:3a:d2:c0:cb:c5:b4:74:
                    31:60:23:82:7e:2c:e5:36:8f:af:4c:55:b4:dd:a2:
                    f4:20:ac:21:10:4c:b7:53:67:0c:6d:8e:fd:66:04:
                    ae:e4:a1:c7:68:a1:9e:b5:c2:ff:e2:14:f3:f9:2e:
                    23:8b:2a:47:60:52:a1:1c:0d:49:55:73:78:82:bc:
                    7b:f1:17:d0:b8:22:75:e6:47:2a:7c:3f:d9:1a:9e:
                    ac:c1:c8:1c:b1:bb:13:36:68:06:c5:a6:b0:4c:6c:
                    e4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C7:98:34:37:EF:F1:83:C3:31:0A:8F:7B:75:0F:94:79:29:AF:DF
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3138392e302f32342d3238203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:8f:9e:0b:4f:ed:37:a5:52:9e:1c:63:4a:50:d1:13:0c:87:
         e6:a3:ee:51:2f:d8:74:f4:75:8c:61:e5:80:69:21:4a:95:d0:
         32:5c:7e:d8:f6:4d:5f:fb:de:ec:6d:0d:2e:f8:d1:d0:5b:50:
         72:71:73:ef:fa:97:09:81:50:ee:d6:a2:3d:7f:1b:52:d5:15:
         71:7d:79:6f:28:39:a5:48:ea:f4:82:d5:ba:d1:18:33:31:ae:
         7e:0e:70:23:9a:e3:0e:11:49:88:6f:3b:db:9e:17:50:a3:7f:
         08:ac:38:3a:c9:59:00:61:6d:29:e1:4f:03:41:79:9a:73:4f:
         04:ca:9b:b4:2f:4f:f8:51:22:3d:6a:5e:dd:cf:01:21:d7:74:
         20:91:81:6a:fd:be:dd:dd:f2:1b:b0:fb:14:81:26:26:1c:40:
         05:c1:6f:84:07:53:c4:69:27:a1:f2:5d:55:f4:0f:e7:f8:84:
         72:fa:90:5e:7b:61:2c:69:61:88:f5:84:0a:94:06:1b:b9:84:
         28:ff:7d:e5:93:d2:5f:73:d0:6c:a9:07:9b:0d:d9:45:7e:57:
         c1:d3:88:d0:8d:30:ce:11:0f:c9:e0:48:fb:ea:07:b7:75:02:
         a0:d2:f1:63:b0:e7:55:52:ee:85:55:29:35:a1:9b:0d:f9:88:
         11:46:e1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:15:01 2025 by rpki-client