Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234352e302f32342d3234203d3e203238313130.roa
File:                     3133382e3132322e3234352e302f32342d3234203d3e203238313130.roa (raw, json)
Hash identifier:          0oniXqRTN/y7NmNJQbqpwcPkLCo8cp4yeH+5QAwNnDg=
Subject key identifier:   37:25:33:85:25:88:ED:30:36:FE:65:35:E4:1A:D8:A9:97:25:E6:77
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       529A3A049F1AE573491673F6B8158497AF48B626
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234352e302f32342d3234203d3e203238313130.roa
Signing time:             Tue 06 May 2025 20:20:00 +0000
ROA not before:           Tue 06 May 2025 20:15:00 +0000
ROA not after:            Tue 05 May 2026 20:20:00 +0000
asID:                     28110
IP address blocks:        138.122.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9a:3a:04:9f:1a:e5:73:49:16:73:f6:b8:15:84:97:af:48:b6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: May  6 20:15:00 2025 GMT
            Not After : May  5 20:20:00 2026 GMT
        Subject: CN=372533852588ED3036FE6535E41AD8A99725E677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:20:4f:30:33:ad:5f:de:c1:c1:5e:7a:df:81:
                    b1:6d:3b:8a:40:8a:26:a4:cd:d1:b1:76:d7:bc:6e:
                    c2:43:15:4a:d6:08:1c:d3:5b:1f:f3:6b:3b:94:88:
                    7e:b5:ca:39:d4:b3:44:28:94:ba:a2:e6:be:fa:32:
                    2d:2b:de:6a:eb:6a:90:fd:23:13:81:63:5c:b0:58:
                    f2:e5:bb:66:9c:63:bd:ec:9a:d9:ab:8d:5d:94:50:
                    74:70:7d:cb:a7:4f:34:43:c9:11:51:af:72:63:c8:
                    31:aa:d8:36:72:d9:7d:73:6c:eb:80:39:4f:aa:6e:
                    16:f7:ad:75:46:f6:c5:1d:e0:9a:45:d1:66:a7:06:
                    87:fa:0d:03:2d:e5:93:7f:59:96:a1:a6:cd:aa:55:
                    f2:8c:a9:98:6a:9a:db:4a:da:b3:98:b3:56:c7:d3:
                    41:0b:ff:65:f5:5e:ce:7e:18:bf:ba:b3:8f:ae:c3:
                    46:e0:e9:16:ff:d2:5e:de:c1:0b:d7:0c:e1:b5:e2:
                    3e:48:d1:a0:cd:5a:f2:16:73:14:a0:d8:d9:49:16:
                    73:ca:6b:cc:af:a9:80:e3:51:63:2f:0c:25:9b:6c:
                    9d:e1:59:b7:d0:4b:3c:e0:6d:4e:f0:be:60:97:d7:
                    fe:f4:b0:b1:62:4e:5e:47:c1:8b:87:59:6e:c3:fd:
                    33:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:25:33:85:25:88:ED:30:36:FE:65:35:E4:1A:D8:A9:97:25:E6:77
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3133382e3132322e3234352e302f32342d3234203d3e203238313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:22:71:0a:5f:e0:87:18:99:b8:1d:cf:cc:84:77:7f:92:f0:
         18:31:26:76:25:29:3d:ec:fe:07:d9:a3:9c:50:91:ce:3c:55:
         89:08:98:44:7f:40:6e:f0:96:b0:72:0e:e1:6d:e3:a9:28:bb:
         99:55:ac:17:eb:1b:5b:eb:7d:85:23:90:85:12:82:f3:73:26:
         11:16:eb:6e:05:d9:87:8a:b6:ad:b8:0f:34:fc:9f:07:a6:9b:
         ce:50:31:25:eb:d0:a5:fb:71:0d:bf:5c:87:44:fd:5b:e0:4d:
         e3:d4:bb:58:77:ed:7f:9a:23:16:b4:e2:a4:49:c3:ed:8e:e6:
         fd:fd:d3:81:67:e5:90:f1:1c:6b:45:fe:e6:03:0b:73:a7:77:
         f7:12:0e:0e:a3:83:f2:43:0a:0d:86:b6:fd:8a:cf:bd:ba:91:
         93:1c:54:79:80:ff:e2:e3:85:1b:cd:e5:83:a0:b1:5a:a0:ad:
         d0:6c:23:a1:34:75:0c:44:7c:5e:32:de:d1:44:85:c7:61:96:
         5f:0d:41:b4:68:7b:fc:b6:c4:72:82:fb:5d:c7:e2:28:66:e2:
         8f:47:30:45:fd:b5:f3:ef:5f:a8:5d:ab:2c:d0:7c:34:98:0f:
         59:61:40:b3:92:c2:28:47:df:82:8f:c7:66:61:53:8e:46:a9:
         06:cb:65:57
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUpo6BJ8a5XNJFnP2uBWEl69ItiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU4ODg5MzcyNDQ2RUY2NzhFMzVFOUQzNDlDMDc4NUE4
MUI4RkJCNzAeFw0yNTA1MDYyMDE1MDBaFw0yNjA1MDUyMDIwMDBaMDMxMTAvBgNV
BAMTKDM3MjUzMzg1MjU4OEVEMzAzNkZFNjUzNUU0MUFEOEE5OTcyNUU2NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNIE8wM61f3sHBXnrfgbFtO4pA
iiakzdGxdte8bsJDFUrWCBzTWx/zazuUiH61yjnUs0QolLqi5r76Mi0r3mrrapD9
IxOBY1ywWPLlu2acY73smtmrjV2UUHRwfcunTzRDyRFRr3JjyDGq2DZy2X1zbOuA
OU+qbhb3rXVG9sUd4JpF0WanBof6DQMt5ZN/WZahps2qVfKMqZhqmttK2rOYs1bH
00EL/2X1Xs5+GL+6s4+uw0bg6Rb/0l7ewQvXDOG14j5I0aDNWvIWcxSg2NlJFnPK
a8yvqYDjUWMvDCWbbJ3hWbfQSzzgbU7wvmCX1/70sLFiTl5HwYuHWW7D/TO3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUNyUzhSWI7TA2/mU15BrYqZcl5ncwHwYDVR0j
BBgwFoAUhYiJNyRG72eONenTScB4WoG4+7cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTgzNUM1ODE4MEIyNDQ4MkI0OEVDMkM3OTY3NTQ2MDBD
RUU2RjNCMThCNjlCQzRCQkRGRkRDMjI4NUVDNDhBLzAvODU4ODg5MzcyNDQ2RUY2
NzhFMzVFOUQzNDlDMDc4NUE4MUI4RkJCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTg4ODkzNzI0NDZFRjY3OEUz
NUU5RDM0OUMwNzg1QTgxQjhGQkI3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4MzVDNTgxODBCMjQ0ODJCNDhFQzJDNzk2NzU0NjAwQ0VFNkYzQjE4
QjY5QkM0QkJERkZEQzIyODVFQzQ4QS8wLzMxMzMzODJlMzEzMjMyMmUzMjM0MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzEzMTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAinr1
MA0GCSqGSIb3DQEBCwUAA4IBAQBVInEKX+CHGJm4Hc/MhHd/kvAYMSZ2JSk97P4H
2aOcUJHOPFWJCJhEf0Bu8Jawcg7hbeOpKLuZVawX6xtb632FI5CFEoLzcyYRFutu
BdmHiratuA80/J8HppvOUDEl69Cl+3ENv1yHRP1b4E3j1LtYd+1/miMWtOKkScPt
jub9/dOBZ+WQ8RxrRf7mAwtzp3f3Eg4Oo4PyQwoNhrb9is+9upGTHFR5gP/i44Ub
zeWDoLFaoK3QbCOhNHUMRHxeMt7RRIXHYZZfDUG0aHv8tsRygvtdx+IoZuKPRzBF
/bXz71+oXass0Hw0mA9ZYUCzksIoR9+Cj8dmYVOORqkGy2VX
-----END CERTIFICATE-----
Generated at Sun May 18 13:04:58 2025 by rpki-client