Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa
File:                     3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa (raw, json)
Hash identifier:          YjKcL0kfNC4hgjJGB22Cfr5yqM/zKoJUiRLkbuK1iFE=
Subject key identifier:   DD:D6:BB:FE:09:79:F1:04:EA:11:0F:96:86:43:93:79:4F:13:7F:CE
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       67A95AFAFF693E28264947213D3BF6EE56A92481
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa
Signing time:             Thu 19 Jun 2025 05:22:48 +0000
ROA not before:           Thu 19 Jun 2025 05:17:48 +0000
ROA not after:            Thu 18 Jun 2026 05:22:48 +0000
asID:                     263681
IP address blocks:        138.204.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 16:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a9:5a:fa:ff:69:3e:28:26:49:47:21:3d:3b:f6:ee:56:a9:24:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: Jun 19 05:17:48 2025 GMT
            Not After : Jun 18 05:22:48 2026 GMT
        Subject: CN=DDD6BBFE0979F104EA110F96864393794F137FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:ea:10:3c:ff:2e:2f:69:c7:9f:54:5f:96:
                    8b:69:fa:81:6c:f6:f1:9b:15:d7:fb:19:9e:25:79:
                    13:e0:1c:3f:65:15:3d:bc:d8:61:ff:04:54:ff:9f:
                    ee:e0:6b:eb:ac:1e:f9:e3:b3:03:68:c8:3c:3c:8c:
                    cd:90:ff:4e:23:c4:7e:b2:31:45:4f:af:0e:2a:69:
                    13:3b:8e:55:75:ad:80:c3:f3:12:e8:69:95:41:98:
                    32:4c:dd:13:f9:f7:6c:cb:30:69:54:dd:a8:be:27:
                    02:8d:d7:98:2d:40:e8:7f:65:e4:9e:c0:df:30:70:
                    b9:fb:4f:90:73:07:cf:0f:51:d6:0e:4f:86:ac:ac:
                    46:f0:2c:d0:e7:00:9a:10:93:47:23:5f:53:78:f0:
                    07:51:32:6f:cb:e7:ee:5f:71:8a:83:bb:f5:d4:fe:
                    9b:71:10:7e:c0:49:11:c4:ac:9a:57:a6:18:7f:cd:
                    65:ed:38:f2:00:e9:14:67:dd:ab:af:80:02:a5:eb:
                    81:af:51:9d:e5:c2:65:85:2c:dd:23:9e:66:06:6d:
                    e2:b9:0c:35:79:54:04:8b:68:1c:93:49:55:43:93:
                    ae:80:36:fc:a5:a5:4b:94:ca:13:e3:08:81:c7:4c:
                    de:d1:37:55:2a:3f:34:bc:cf:a7:d4:cc:fe:32:3f:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D6:BB:FE:09:79:F1:04:EA:11:0F:96:86:43:93:79:4F:13:7F:CE
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/3133382e3230342e31332e302f32342d3234203d3e20323633363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:b6:20:36:7e:a9:d7:21:b9:89:e1:fc:e2:8f:62:c5:ed:d9:
         9f:5e:6f:ac:6e:a1:a8:e1:c0:eb:5b:99:be:c1:56:d2:15:d0:
         2a:0b:66:22:d6:3e:4d:a0:23:54:68:6a:d5:91:be:c8:04:6c:
         d9:79:54:89:4c:74:7a:a8:3f:5b:07:5f:ad:79:53:e0:f5:e5:
         d5:99:7d:2f:30:9d:88:74:de:6d:77:78:0a:cb:ae:94:9d:2f:
         a7:c1:92:e4:cf:3f:cc:5a:f2:21:ea:43:9f:56:55:b2:57:ea:
         6a:5d:88:81:c7:37:1c:3f:a6:ab:a4:f4:90:90:04:11:44:69:
         06:ca:e8:90:ae:a1:9f:be:5f:90:9e:e9:9e:91:18:1c:9c:82:
         69:7e:49:c5:c4:f9:8e:9b:b3:ad:b4:19:cc:e3:0c:f4:fe:65:
         d8:a3:01:fc:f8:73:18:43:84:1c:b2:9b:fb:56:8f:0e:ef:06:
         d6:11:de:1d:aa:68:63:be:c6:dc:ce:9a:f0:4f:b3:95:38:4c:
         73:36:45:ee:bb:71:3c:4a:28:81:4a:da:7f:a3:1b:03:d3:9e:
         71:ef:4c:b8:3c:38:7e:c7:42:40:9b:62:ba:73:0e:ee:e3:9b:
         9f:4d:92:ab:48:40:8d:ab:cd:d4:ea:4d:a6:66:6a:f2:cb:5c:
         29:82:52:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 01:03:45 2025 by rpki-client