Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3139302e302f32342d3238203d3e20323633383031.roa
File:                     3133382e3132322e3139302e302f32342d3238203d3e20323633383031.roa (raw, json)
Hash identifier:          Rx37dc9q5pTqbtd2aPP9iWxHOlE6fynpqYcPKCad07s=
Subject key identifier:   99:C7:62:80:85:83:CB:6B:AA:67:D3:C1:C1:78:F7:8A:C4:B4:FC:97
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       2CA12911B48A255009F5AAB91845AFA425E0C04C
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3139302e302f32342d3238203d3e20323633383031.roa
Signing time:             Mon 05 May 2025 00:15:03 +0000
ROA not before:           Mon 05 May 2025 00:10:03 +0000
ROA not after:            Mon 04 May 2026 00:15:03 +0000
asID:                     263801
IP address blocks:        138.122.190.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:37:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a1:29:11:b4:8a:25:50:09:f5:aa:b9:18:45:af:a4:25:e0:c0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: May  5 00:10:03 2025 GMT
            Not After : May  4 00:15:03 2026 GMT
        Subject: CN=99C762808583CB6BAA67D3C1C178F78AC4B4FC97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:95:7e:59:88:f1:11:28:6d:cc:f4:70:98:
                    d8:36:7b:e7:42:e8:55:c4:f0:6e:fd:5a:9d:9d:9f:
                    3f:8a:7f:1d:61:cc:a8:c3:f4:c9:87:74:43:f6:56:
                    49:10:cf:c2:08:38:50:2d:1d:42:1f:3b:d1:bc:6d:
                    ae:e6:d7:14:35:04:6f:07:dd:97:ae:72:b9:bb:f5:
                    a6:91:45:43:a6:bf:75:88:4b:2f:3a:b5:48:d3:94:
                    1e:cc:5f:4b:f0:11:50:e7:c1:7b:0f:e4:2d:1c:7b:
                    3f:3b:19:3d:ae:08:68:5d:88:ed:f9:7b:99:c7:f1:
                    81:a6:89:99:bf:82:f1:ff:fc:42:ae:2c:c1:4d:cb:
                    f3:ce:ce:fb:0d:11:7f:85:97:d0:89:b3:1e:9c:3c:
                    ca:3a:ff:b1:eb:ff:6e:77:2b:b1:a4:9b:e1:a0:d7:
                    c0:77:4f:f8:3b:67:eb:fb:ba:37:05:ff:cc:ad:5b:
                    33:ad:d8:05:40:51:e6:de:db:a9:74:4b:bf:38:58:
                    ac:86:14:84:69:85:8c:8e:79:4e:ac:f2:3f:d2:e2:
                    59:fb:bb:ef:97:bc:78:46:68:85:b2:b3:be:0d:07:
                    85:d8:c9:3b:95:e3:6d:5e:e9:37:87:7f:da:fd:63:
                    aa:51:95:84:36:66:28:81:3d:1f:b8:2f:b5:67:f9:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C7:62:80:85:83:CB:6B:AA:67:D3:C1:C1:78:F7:8A:C4:B4:FC:97
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3133382e3132322e3139302e302f32342d3238203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:e1:95:e4:bd:bf:a1:11:e4:e8:69:76:69:ee:2f:58:aa:94:
         45:b0:aa:7e:8f:85:91:4b:e2:84:ba:b3:29:4d:c5:e6:e0:d5:
         4b:d3:42:18:71:6c:70:fb:8c:c7:06:36:0b:ae:ce:30:41:4e:
         eb:e0:a1:70:57:44:7f:3e:45:12:43:75:24:a3:1c:03:e1:64:
         07:43:f8:06:ac:91:4e:35:d2:52:80:9b:ea:36:74:2c:d5:22:
         05:38:cc:a2:9c:c2:3f:fe:b4:e3:b9:53:fe:0a:84:f4:e9:c4:
         7d:97:50:05:a2:6d:b9:67:cf:77:1d:7a:95:7a:38:67:0c:17:
         f5:9c:d7:72:f7:38:bd:ac:84:d0:20:0f:f3:1c:98:5b:1f:ba:
         cf:d5:4a:2e:b3:64:e6:9a:6e:be:71:16:bf:85:1d:40:7f:2f:
         ec:22:54:8a:30:ef:1d:8c:9a:22:06:cf:e7:2d:6a:7c:1a:84:
         58:3f:cb:f4:5d:35:35:3c:ba:1c:4f:7e:f1:4e:f8:36:cc:fb:
         76:9f:e3:92:20:84:c5:d4:e6:44:d9:e3:25:63:1e:97:4b:67:
         c0:c2:da:b8:3d:53:12:03:a4:bc:02:50:41:82:a1:04:cb:22:
         08:98:b7:42:07:16:c6:ee:5f:46:ed:f5:fc:e4:4d:7b:3f:e5:
         2f:8c:7e:29
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIULKEpEbSKJVAJ9aq5GEWvpCXgwEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1MERCRDQyMjRGMTJCOTFEOEIxMDM0NzFDNzlFMjE0
OTRBQUFCRTAeFw0yNTA1MDUwMDEwMDNaFw0yNjA1MDQwMDE1MDNaMDMxMTAvBgNV
BAMTKDk5Qzc2MjgwODU4M0NCNkJBQTY3RDNDMUMxNzhGNzhBQzRCNEZDOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpPZV+WYjxEShtzPRwmNg2e+dC
6FXE8G79Wp2dnz+Kfx1hzKjD9MmHdEP2VkkQz8IIOFAtHUIfO9G8ba7m1xQ1BG8H
3Zeucrm79aaRRUOmv3WISy86tUjTlB7MX0vwEVDnwXsP5C0cez87GT2uCGhdiO35
e5nH8YGmiZm/gvH//EKuLMFNy/POzvsNEX+Fl9CJsx6cPMo6/7Hr/253K7Gkm+Gg
18B3T/g7Z+v7ujcF/8ytWzOt2AVAUebe26l0S784WKyGFIRphYyOeU6s8j/S4ln7
u++XvHhGaIWys74NB4XYyTuV421e6TeHf9r9Y6pRlYQ2ZiiBPR+4L7Vn+S0NAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUmcdigIWDy2uqZ9PBwXj3isS0/JcwHwYDVR0j
BBgwFoAU5FDb1CJPErkdixA0cceeIUlKqr4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83N0RDMEQ0MDhBMTIyMkMwM0JGNjJGRTdFQjEzRjJERDk1
OUFDMkJEMzUxRkZBQUYxMjY5Q0I3NkNFMUY4QkZCLzAvRTQ1MERCRDQyMjRGMTJC
OTFEOEIxMDM0NzFDNzlFMjE0OTRBQUFCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNDUwREJENDIyNEYxMkI5MUQ4
QjEwMzQ3MUM3OUUyMTQ5NEFBQUJFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzdEQzBENDA4QTEyMjJDMDNCRjYyRkU3RUIxM0YyREQ5NTlBQzJCRDM1
MUZGQUFGMTI2OUNCNzZDRTFGOEJGQi8wLzMxMzMzODJlMzEzMjMyMmUzMTM5MzAy
ZTMwMmYzMjM0MmQzMjM4MjAzZDNlMjAzMjM2MzMzODMwMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACK
er4wDQYJKoZIhvcNAQELBQADggEBAFfhleS9v6ER5OhpdmnuL1iqlEWwqn6PhZFL
4oS6sylNxebg1UvTQhhxbHD7jMcGNguuzjBBTuvgoXBXRH8+RRJDdSSjHAPhZAdD
+AaskU410lKAm+o2dCzVIgU4zKKcwj/+tOO5U/4KhPTpxH2XUAWibblnz3cdepV6
OGcMF/Wc13L3OL2shNAgD/McmFsfus/VSi6zZOaabr5xFr+FHUB/L+wiVIow7x2M
miIGz+ctanwahFg/y/RdNTU8uhxPfvFO+DbM+3af45IghMXU5kTZ4yVjHpdLZ8DC
2rg9UxIDpLwCUEGCoQTLIgiYt0IHFsbuX0bt9fzkTXs/5S+Mfik=
-----END CERTIFICATE-----
Generated at Sun May 18 06:59:13 2025 by rpki-client