Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa
File:                     3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa (raw, json)
Hash identifier:          ndw82tgGhD0cbKt8WwbQC3xb6HH1aYiaoyiR62r2kGM=
Subject key identifier:   03:90:BD:86:0A:DF:12:C8:A2:39:89:A9:0B:17:80:3A:BE:A3:E3:71
Certificate issuer:       /CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
Certificate serial:       467DBA210F441EFCED6CB730A957D1F0C1058E0F
Authority key identifier: 11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa
Signing time:             Tue 24 Jun 2025 16:23:29 +0000
ROA not before:           Tue 24 Jun 2025 16:18:29 +0000
ROA not after:            Tue 23 Jun 2026 16:23:29 +0000
asID:                     264645
IP address blocks:        138.255.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 01:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7d:ba:21:0f:44:1e:fc:ed:6c:b7:30:a9:57:d1:f0:c1:05:8e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
        Validity
            Not Before: Jun 24 16:18:29 2025 GMT
            Not After : Jun 23 16:23:29 2026 GMT
        Subject: CN=0390BD860ADF12C8A23989A90B17803ABEA3E371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c4:f5:a5:3c:df:2e:55:e7:47:a2:30:6c:55:
                    f7:05:c2:b1:9c:c6:94:6e:91:69:56:62:72:16:5f:
                    66:d0:95:ee:86:87:73:28:91:73:a9:a4:c0:a4:8d:
                    f5:fd:8c:e7:16:ce:ba:b2:4e:b7:b9:0b:1e:99:98:
                    47:c8:9a:88:35:63:de:6f:9d:4b:05:c0:24:36:55:
                    f9:b0:89:57:a2:ed:b8:d2:d8:f4:08:19:8a:ba:40:
                    c5:b4:e4:b0:9d:5a:a7:40:e7:be:ae:a5:1e:d8:73:
                    fc:84:a0:7d:e4:d9:03:f9:8f:28:71:8e:f9:75:9c:
                    76:af:e2:f4:0e:10:e4:55:24:7c:c9:50:0b:88:e3:
                    f9:4b:70:ab:7f:ca:e1:e3:a1:44:08:7e:53:fa:66:
                    85:af:34:97:04:f1:4e:92:7d:37:3a:08:55:0a:fe:
                    08:d2:21:fc:b8:63:55:cb:1d:47:45:93:9b:0a:92:
                    95:e9:51:84:48:7f:07:71:95:3e:c7:0c:ca:91:0a:
                    c2:d5:e9:b7:af:4f:3b:f6:1a:92:e6:2a:3e:69:81:
                    18:16:cd:b0:0e:41:2e:a4:d0:80:06:aa:93:a5:fa:
                    80:42:7e:7e:26:1b:b6:a0:2e:8d:a8:b2:c4:f7:f6:
                    cd:19:5e:13:3d:99:9c:c7:5a:88:2d:64:eb:4b:eb:
                    d1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:90:BD:86:0A:DF:12:C8:A2:39:89:A9:0B:17:80:3A:BE:A3:E3:71
            X509v3 Authority Key Identifier:
                keyid:11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235322e302f32342d3234203d3e20323634363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:e8:6d:0b:50:a2:f9:84:a9:9d:4e:4f:27:31:c0:65:7e:fa:
         33:55:04:a2:77:f0:00:ee:fe:f2:79:8f:c3:d9:02:1d:4e:ed:
         d0:20:ae:c3:71:a8:02:a7:36:57:89:20:93:83:89:e7:e1:0a:
         a0:92:34:6b:83:0c:6d:01:ba:8c:19:32:de:db:72:e8:90:23:
         50:f2:db:55:34:69:5b:5c:3b:0a:71:9c:a3:56:bf:4e:81:14:
         6e:48:3b:3f:44:e9:ae:c2:3e:15:50:af:a1:b8:c6:05:43:34:
         8a:fc:c8:01:9e:ca:18:1d:c8:ce:ba:5f:c0:4f:45:33:3d:e4:
         9f:ab:05:69:e4:06:34:3f:bd:50:3b:f0:0b:f3:5f:67:86:18:
         f0:57:c9:1a:d9:a8:3d:8a:c2:a0:4e:b1:34:b6:39:a7:e6:13:
         91:11:da:b4:ff:01:bf:db:d3:f2:ff:73:80:72:26:55:97:de:
         67:fa:66:8f:a1:89:65:f9:f1:68:8d:6e:dc:03:5e:6b:06:ed:
         49:23:9f:44:b4:d8:83:3f:03:e3:a1:e6:50:52:d5:c8:f0:94:
         6d:2c:e7:96:91:50:8e:cc:08:12:ee:ff:90:fc:0c:6c:73:1f:
         40:da:e9:be:cd:1b:a8:8a:11:18:96:61:ea:83:67:4e:71:a5:
         b8:8d:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 12:52:19 2025 by rpki-client