Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa
File:                     3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa (raw, json)
Hash identifier:          GKbXOAbHGidO1Yag/LWzAQX+aCAoGKtBmuviPdb8ed0=
Subject key identifier:   5A:D7:CB:3C:38:86:9B:89:1A:59:5E:67:8F:7A:49:24:39:36:39:CD
Certificate issuer:       /CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
Certificate serial:       6A4F3FB91C0D4A7E3A0D63A2E60B882E9778E17B
Authority key identifier: 11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa
Signing time:             Tue 24 Jun 2025 16:23:29 +0000
ROA not before:           Tue 24 Jun 2025 16:18:29 +0000
ROA not after:            Tue 23 Jun 2026 16:23:29 +0000
asID:                     27660
IP address blocks:        138.255.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4f:3f:b9:1c:0d:4a:7e:3a:0d:63:a2:e6:0b:88:2e:97:78:e1:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
        Validity
            Not Before: Jun 24 16:18:29 2025 GMT
            Not After : Jun 23 16:23:29 2026 GMT
        Subject: CN=5AD7CB3C38869B891A595E678F7A4924393639CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:3e:40:c9:ab:d0:7f:49:ef:aa:9b:b3:34:
                    e2:32:57:3d:4a:9c:1c:69:a9:46:11:d9:e3:b9:c3:
                    25:89:d6:0e:55:56:80:f8:54:a0:e0:e0:a4:99:06:
                    24:4d:c8:18:62:62:c3:54:96:35:d0:d0:07:4e:ad:
                    7a:77:c3:94:4e:e4:d5:70:e3:a8:32:9b:af:c1:e8:
                    56:28:82:e9:ac:e8:f8:13:c0:55:25:5f:a5:16:6d:
                    fd:52:31:41:32:50:df:05:50:0d:50:52:08:29:ff:
                    65:11:bd:4f:65:1a:de:39:a7:96:4c:7e:b0:7b:c0:
                    e1:4b:e7:0e:4e:27:d7:33:16:cf:de:f3:ac:d0:a1:
                    5d:eb:dc:87:6c:36:b3:d6:16:9f:1f:4e:e2:db:a7:
                    4c:c5:b3:af:e2:38:17:d1:62:cb:19:a0:2f:27:2f:
                    f5:b7:c4:a7:51:ca:20:2b:d0:88:fe:94:d7:9a:42:
                    b5:5d:43:7b:eb:34:4e:f9:54:90:a2:cb:1c:07:f3:
                    84:80:ee:77:6e:c7:4d:5c:0c:37:dc:3f:ad:0a:90:
                    4a:16:3a:ab:f5:96:e6:87:7a:d9:12:ad:91:b5:e2:
                    16:bd:95:6b:20:00:1b:d6:93:ae:e1:8f:98:bf:85:
                    0a:1c:91:e3:77:57:05:1f:92:1d:15:ee:db:02:2f:
                    15:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D7:CB:3C:38:86:9B:89:1A:59:5E:67:8F:7A:49:24:39:36:39:CD
            X509v3 Authority Key Identifier:
                keyid:11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235332e302f32342d3234203d3e203237363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:3c:c5:fe:b5:5f:d9:41:f0:e1:1d:21:c9:99:87:81:77:53:
         2b:7f:2a:7e:9c:a6:a1:bd:1c:42:13:0f:f4:09:5e:5d:98:c7:
         d5:e9:67:5a:3f:9f:dd:92:47:b4:9a:54:c4:e0:1f:f2:0e:a0:
         0f:72:25:ab:2d:83:fa:c3:fc:52:80:9c:db:63:71:ed:6a:a7:
         10:d1:96:35:ab:9b:3b:60:da:49:0f:13:8a:88:36:10:21:62:
         e1:d3:8b:11:c8:b9:a8:de:76:5f:d8:9e:4e:e8:19:27:bf:9a:
         0c:d5:e5:a7:7e:ad:3d:0c:a5:8a:06:6f:ca:0b:5d:8c:88:6a:
         a2:2b:5b:ec:03:93:1a:12:70:6d:74:63:1a:74:16:89:df:c7:
         a4:55:e0:72:79:ab:b1:05:bc:82:5d:29:15:d1:55:4c:af:8f:
         23:c8:ce:d1:1d:ae:8f:21:08:3a:ae:ba:0c:32:7e:05:c7:93:
         a0:b4:2d:e5:16:8b:a3:19:ca:b7:d4:5c:8c:0f:3c:34:c0:9d:
         96:45:c4:f2:49:0f:83:a7:bb:ec:45:2d:48:fa:85:71:ee:dc:
         c0:7a:07:b6:2f:05:69:a5:70:ee:72:f5:5f:25:5a:11:de:c1:
         9d:38:68:86:df:02:78:65:9f:5a:88:8e:aa:cd:08:c2:0b:57:
         ff:e4:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:26:42 2025 by rpki-client