Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235342e302f32332d3234203d3e20323634363435.roa
File:                     3133382e3235352e3235342e302f32332d3234203d3e20323634363435.roa (raw, json)
Hash identifier:          WyvT6BKjOffyK/VR/uNd7FhK13KUj1Kut091yP2l0nk=
Subject key identifier:   C4:64:31:B2:10:65:FC:AD:BD:4D:B5:6B:EF:87:AD:51:91:EB:AB:20
Certificate issuer:       /CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
Certificate serial:       21C13F94C3E2A6298E8281F77811D1280AB01792
Authority key identifier: 11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235342e302f32332d3234203d3e20323634363435.roa
Signing time:             Tue 24 Jun 2025 16:23:29 +0000
ROA not before:           Tue 24 Jun 2025 16:18:29 +0000
ROA not after:            Tue 23 Jun 2026 16:23:29 +0000
asID:                     264645
IP address blocks:        138.255.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 01:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c1:3f:94:c3:e2:a6:29:8e:82:81:f7:78:11:d1:28:0a:b0:17:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
        Validity
            Not Before: Jun 24 16:18:29 2025 GMT
            Not After : Jun 23 16:23:29 2026 GMT
        Subject: CN=C46431B21065FCADBD4DB56BEF87AD5191EBAB20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:88:c0:ef:23:ef:2f:27:8a:22:8d:48:58:
                    75:b8:24:36:ae:4c:f1:d6:7c:92:a6:34:51:5e:26:
                    23:93:b9:2f:8b:01:9e:8c:c8:b3:cd:4d:60:2c:9d:
                    86:80:07:c4:e7:c4:e0:48:cf:27:b3:ed:ab:0a:0e:
                    16:a7:94:15:0c:c1:55:75:ae:52:f5:ac:b5:92:3b:
                    f3:94:de:12:db:b4:66:32:bc:7a:76:00:fe:9f:0c:
                    fe:6f:80:60:42:94:52:91:82:a7:8c:75:90:46:24:
                    34:59:e8:6a:06:33:77:8c:53:71:ec:d1:6a:3d:71:
                    d3:42:28:4c:14:1e:3f:a7:1d:99:95:98:b4:3b:10:
                    38:65:ce:ff:e5:4e:e1:35:2e:fe:bd:de:ca:e5:b4:
                    42:4b:11:f2:be:58:ae:2d:4f:b2:34:55:9e:d2:1f:
                    e0:7e:07:5a:53:b5:f0:52:41:52:94:aa:7a:5b:68:
                    fe:13:b4:48:44:9d:a9:79:61:ff:b1:11:c4:43:47:
                    35:61:37:d5:04:5b:28:8f:38:c8:48:e4:9f:10:99:
                    99:e0:13:e5:1e:f5:7a:cf:73:1a:8b:30:1e:95:e1:
                    23:bf:83:07:a8:79:ce:0d:76:3e:9b:c8:99:c6:82:
                    20:6b:4b:0d:e3:70:01:6e:06:fb:37:4c:a6:90:78:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:64:31:B2:10:65:FC:AD:BD:4D:B5:6B:EF:87:AD:51:91:EB:AB:20
            X509v3 Authority Key Identifier:
                keyid:11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3133382e3235352e3235342e302f32332d3234203d3e20323634363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:d0:12:5c:eb:6e:8e:1c:af:ea:c9:ce:3a:1b:23:bb:a5:ac:
         ee:de:a3:47:5d:23:2d:c1:7a:7d:db:69:54:1b:38:4d:49:b7:
         f0:56:3f:ef:c0:34:f4:83:02:79:e4:87:8e:1f:9d:b2:74:95:
         3c:05:29:c7:fa:2a:f8:66:16:7e:81:c6:f6:13:24:f7:26:0a:
         e9:32:44:68:75:0c:7f:d1:13:fe:ea:34:ae:7e:9f:18:c8:89:
         b3:f3:93:56:65:d6:d1:ae:6d:cb:e7:30:2b:e3:2a:9e:42:56:
         7b:9f:19:13:ce:08:0f:04:46:51:f3:6d:e3:35:ef:5b:c2:3b:
         31:45:2c:1f:51:79:e7:f7:e5:f2:ca:ce:1e:9e:e7:c2:ab:cb:
         63:8f:19:6a:52:e7:ce:cd:49:11:94:54:49:34:f9:2f:5f:0b:
         d5:2b:2e:8a:7e:de:ef:dc:15:83:de:e7:c6:7c:19:c7:9e:89:
         ee:93:14:f3:a7:62:55:77:8e:33:e9:e5:41:25:77:c3:5e:30:
         e4:21:d1:30:65:40:8f:eb:f6:ce:8d:b7:5b:ee:7d:6c:42:bd:
         b5:0c:dd:b7:17:6e:3a:ef:5d:2b:b5:b3:29:2b:a9:c9:e2:3a:
         9c:27:f5:21:d9:64:3b:61:9e:aa:d7:50:d1:1e:ca:5d:71:13:
         2b:1e:99:0f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUIcE/lMPipimOgoH3eBHRKAqwF5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE3MzFENkE4ODFGOTEwMDhDQUZFRDNCQTBFNkFFQzYx
RTYyNUNGMjAeFw0yNTA2MjQxNjE4MjlaFw0yNjA2MjMxNjIzMjlaMDMxMTAvBgNV
BAMTKEM0NjQzMUIyMTA2NUZDQURCRDREQjU2QkVGODdBRDUxOTFFQkFCMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVW4jA7yPvLyeKIo1IWHW4JDau
TPHWfJKmNFFeJiOTuS+LAZ6MyLPNTWAsnYaAB8TnxOBIzyez7asKDhanlBUMwVV1
rlL1rLWSO/OU3hLbtGYyvHp2AP6fDP5vgGBClFKRgqeMdZBGJDRZ6GoGM3eMU3Hs
0Wo9cdNCKEwUHj+nHZmVmLQ7EDhlzv/lTuE1Lv693srltEJLEfK+WK4tT7I0VZ7S
H+B+B1pTtfBSQVKUqnpbaP4TtEhEnal5Yf+xEcRDRzVhN9UEWyiPOMhI5J8QmZng
E+Ue9XrPcxqLMB6V4SO/gweoec4Ndj6byJnGgiBrSw3jcAFuBvs3TKaQeBP3AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUxGQxshBl/K29TbVr74etUZHrqyAwHwYDVR0j
BBgwFoAUEXMdaogfkQCMr+07oOauxh5iXPIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zREFDNjE0MTZFNUMxOTU1RjIyQUZBNjk5REQ4NTUxODRG
NjA5ODRCODI1QTJDMENBMzBDOEU5QUNDRUZFRUUxLzAvMTE3MzFENkE4ODFGOTEw
MDhDQUZFRDNCQTBFNkFFQzYxRTYyNUNGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMTczMUQ2QTg4MUY5MTAwOENB
RkVEM0JBMEU2QUVDNjFFNjI1Q0YyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0RBQzYxNDE2RTVDMTk1NUYyMkFGQTY5OUREODU1MTg0RjYwOTg0Qjgy
NUEyQzBDQTMwQzhFOUFDQ0VGRUVFMS8wLzMxMzMzODJlMzIzNTM1MmUzMjM1MzQy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM0MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK
//4wDQYJKoZIhvcNAQELBQADggEBAFPQElzrbo4cr+rJzjobI7ulrO7eo0ddIy3B
en3baVQbOE1Jt/BWP+/ANPSDAnnkh44fnbJ0lTwFKcf6KvhmFn6BxvYTJPcmCuky
RGh1DH/RE/7qNK5+nxjIibPzk1Zl1tGubcvnMCvjKp5CVnufGRPOCA8ERlHzbeM1
71vCOzFFLB9Reef35fLKzh6e58Kry2OPGWpS587NSRGUVEk0+S9fC9UrLop+3u/c
FYPe58Z8Gceeie6TFPOnYlV3jjPp5UEld8NeMOQh0TBlQI/r9s6Nt1vufWxCvbUM
3bcXbjrvXSu1sykrqcniOpwn9SHZZDthnqrXUNEeyl1xEysemQ8=
-----END CERTIFICATE-----
Generated at Sat Jul 5 12:48:54 2025 by rpki-client