Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31332e302f32342d3234203d3e20323732393634.roa
File:                     3133382e3131372e31332e302f32342d3234203d3e20323732393634.roa (raw, json)
Hash identifier:          DZeh4cpa0mbf6PEyU/Y4qhUyvG/Y17E0B7HHEcKqDNo=
Subject key identifier:   8F:42:DB:37:E2:98:5C:F2:F2:A6:DB:D0:D4:DE:33:DA:01:1F:46:8A
Certificate issuer:       /CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
Certificate serial:       3D65F0838DF8A48BBAF93EB685EA50528A574A38
Authority key identifier: D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31332e302f32342d3234203d3e20323732393634.roa
Signing time:             Fri 09 May 2025 12:50:00 +0000
ROA not before:           Fri 09 May 2025 12:45:00 +0000
ROA not after:            Fri 08 May 2026 12:50:00 +0000
asID:                     272964
IP address blocks:        138.117.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:65:f0:83:8d:f8:a4:8b:ba:f9:3e:b6:85:ea:50:52:8a:57:4a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03
        Validity
            Not Before: May  9 12:45:00 2025 GMT
            Not After : May  8 12:50:00 2026 GMT
        Subject: CN=8F42DB37E2985CF2F2A6DBD0D4DE33DA011F468A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:96:c7:55:1a:e2:69:bc:27:75:c5:46:f9:
                    fe:b9:38:29:c7:64:5b:e5:62:2e:cc:58:6d:f5:61:
                    06:67:35:a7:49:6d:b1:d1:73:d5:65:48:c9:42:3f:
                    da:ba:7c:df:b9:8d:7f:81:7b:be:47:a0:78:32:4d:
                    2f:0a:f9:b3:cd:9c:07:95:b1:67:11:98:87:08:b6:
                    1e:25:e7:e2:01:fa:59:48:eb:bb:07:be:ba:4b:ce:
                    85:4e:cc:75:49:aa:e3:4f:f0:60:3b:c9:1b:05:de:
                    e2:a0:f3:e7:7f:d2:51:23:63:81:1f:2b:65:4a:38:
                    94:74:d1:f0:23:31:f0:ce:c2:6a:5e:db:15:e2:7e:
                    1c:36:23:74:c2:fe:87:1d:74:ed:a2:8e:78:11:5b:
                    62:4d:dd:3f:c2:0d:b8:ff:09:1b:06:27:44:29:28:
                    81:c1:9e:3c:ac:5b:c6:d7:d3:33:08:0c:82:6c:e1:
                    ef:1b:0e:6e:bb:63:36:2d:fb:08:14:3a:06:56:6c:
                    81:94:41:3b:5b:1e:d8:2a:c8:f3:a4:2c:54:bb:e2:
                    f9:58:8a:d4:7b:b4:2c:58:31:5d:27:e0:df:bf:d8:
                    c1:4f:06:d8:11:e2:82:79:27:09:ce:9a:20:b3:2d:
                    9b:13:98:06:bc:30:7b:e0:d4:a9:20:ad:08:9d:f1:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:42:DB:37:E2:98:5C:F2:F2:A6:DB:D0:D4:DE:33:DA:01:1F:46:8A
            X509v3 Authority Key Identifier:
                keyid:D2:E6:A8:AF:32:26:50:1D:8C:0A:E8:9B:31:A7:8E:36:9B:CD:BC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2E6A8AF3226501D8C0AE89B31A78E369BCDBC03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A9BE8BAC0DBF04A04E657F177221DE5EFAED1478034BDE625FD43150BCFBF02/0/3133382e3131372e31332e302f32342d3234203d3e20323732393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:11:9c:88:7c:76:68:ee:ce:f3:b2:4b:ac:a3:5f:44:18:da:
         e1:ea:09:68:fe:8b:04:5f:3e:79:25:3c:eb:25:21:13:1e:fb:
         66:60:cd:d4:10:3b:e1:07:da:c4:50:4d:9d:6e:c9:f8:87:e8:
         41:f8:71:5d:79:35:39:ad:23:fe:a5:55:26:82:f0:39:eb:f1:
         13:9f:9c:59:9e:13:be:7a:35:9c:72:ed:2e:33:4c:b3:67:c0:
         64:cd:ff:92:d8:ce:0b:b7:18:42:1b:8c:b9:a9:e7:e2:9b:ea:
         a9:64:b8:74:c0:55:e4:e3:3d:95:40:6a:ac:7e:e4:cc:da:eb:
         d6:59:ab:f4:e8:02:ee:0f:25:61:70:c1:24:dd:e3:e4:1b:da:
         cf:f2:5b:f3:10:15:15:80:28:c5:0e:38:33:81:6d:7e:ca:c7:
         34:f0:29:51:31:12:ea:40:06:8f:4d:50:78:55:ac:2d:37:ff:
         60:65:6a:3f:f6:af:0f:03:8a:0e:0c:57:fa:17:c1:f0:f1:44:
         12:6c:1d:d5:a0:79:79:fa:51:47:13:af:56:5b:f8:fa:d6:a6:
         e9:05:e7:df:0c:3a:6c:5f:7a:e1:a2:50:d3:c7:cf:ba:c2:76:
         2a:e8:ed:bb:f2:6c:98:33:48:e1:a1:62:dc:83:48:20:39:6b:
         16:65:c4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 14:55:43 2025 by rpki-client