Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/3133382e3230342e3135382e302f32332d3234203d3e20323635373938.roa
File:                     3133382e3230342e3135382e302f32332d3234203d3e20323635373938.roa (raw, json)
Hash identifier:          8CQjWTRXhRp/g5+TcdpqWH9xMQ9w0JBJmRTCc67Ob+4=
Subject key identifier:   50:75:3C:7D:8E:F9:3C:F7:A5:BD:78:EA:B2:7B:8C:11:F6:03:C4:46
Certificate issuer:       /CN=6C13327D2AB4EDC82CA05B305855EF3EE3E609B1
Certificate serial:       678F1BD9ECDC30D1FA8FA7F10913CBEB2EB4FDE8
Authority key identifier: 6C:13:32:7D:2A:B4:ED:C8:2C:A0:5B:30:58:55:EF:3E:E3:E6:09:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/3133382e3230342e3135382e302f32332d3234203d3e20323635373938.roa
Signing time:             Sat 10 May 2025 23:18:22 +0000
ROA not before:           Sat 10 May 2025 23:13:22 +0000
ROA not after:            Sat 09 May 2026 23:18:22 +0000
asID:                     265798
IP address blocks:        138.204.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8f:1b:d9:ec:dc:30:d1:fa:8f:a7:f1:09:13:cb:eb:2e:b4:fd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C13327D2AB4EDC82CA05B305855EF3EE3E609B1
        Validity
            Not Before: May 10 23:13:22 2025 GMT
            Not After : May  9 23:18:22 2026 GMT
        Subject: CN=50753C7D8EF93CF7A5BD78EAB27B8C11F603C446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:8e:09:26:2b:9e:89:20:b4:2c:a1:8a:ef:
                    07:b5:2e:74:87:c0:e2:71:38:3c:3f:4b:2a:d1:48:
                    98:d3:23:6d:3e:88:69:1d:7d:79:1c:19:82:23:21:
                    06:79:5e:d3:d3:ea:3e:bc:8f:0f:76:57:91:21:b8:
                    d0:d4:f1:b7:b3:7d:05:d9:0b:db:ac:fd:9d:e5:ca:
                    0d:09:c6:d0:c0:a3:e2:37:64:e9:cf:69:72:1f:74:
                    ba:b0:40:23:f9:ab:29:1c:e8:26:af:89:f9:ed:f7:
                    b1:79:d4:15:a9:8a:7d:dc:14:73:b6:65:37:72:69:
                    87:ea:c5:35:b7:65:09:84:ab:a3:b6:84:78:62:d9:
                    e7:cd:3c:73:83:7b:6c:b1:b2:f3:4b:01:80:7c:12:
                    d6:18:f4:ba:6e:85:26:61:f3:6c:86:01:15:17:43:
                    ed:de:88:f1:70:6b:fa:6d:e2:a4:aa:31:ae:ed:d4:
                    d7:b1:78:93:f8:f0:40:59:d0:82:e1:20:d8:bb:33:
                    c2:e6:5c:bf:41:00:7c:ca:89:04:fa:3d:63:2f:ff:
                    01:8d:3f:7b:6b:45:99:d6:2b:dd:a2:a0:8c:36:5f:
                    cc:67:9a:91:35:a6:fd:dd:1b:17:45:16:14:81:6f:
                    fa:6b:30:36:2d:d8:d7:c2:78:49:81:ba:98:66:e3:
                    40:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:75:3C:7D:8E:F9:3C:F7:A5:BD:78:EA:B2:7B:8C:11:F6:03:C4:46
            X509v3 Authority Key Identifier:
                keyid:6C:13:32:7D:2A:B4:ED:C8:2C:A0:5B:30:58:55:EF:3E:E3:E6:09:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C13327D2AB4EDC82CA05B305855EF3EE3E609B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8419E9319BD6A11D3C755CE3E4386F697A9BFAE9A71AF06C2B8AFD181A870E7A/0/3133382e3230342e3135382e302f32332d3234203d3e20323635373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:02:75:c1:3f:34:98:c7:90:77:d2:7b:90:78:1b:55:5e:63:
         b5:13:ad:bd:4f:9c:d8:c7:85:c2:13:78:5d:48:1f:49:b9:89:
         4b:5a:70:52:52:68:a2:7f:e2:3f:e8:7c:c9:32:81:be:8e:2f:
         70:64:2a:0b:3c:5d:e4:24:81:94:63:09:fd:e3:cd:a2:d3:ba:
         1c:c9:08:26:af:97:6c:d5:72:03:6b:32:d8:6e:2b:ed:44:6a:
         44:e0:85:9f:24:24:3d:2b:49:f7:e3:73:f6:e5:02:28:39:17:
         f8:90:18:62:2e:5b:9b:99:27:5e:92:07:93:92:52:79:fd:bf:
         60:47:7a:58:b9:26:72:3f:61:7b:0a:c8:58:6f:65:40:e0:97:
         d5:0a:0c:20:67:81:a1:3d:88:93:6e:fb:5a:9e:3a:5e:50:66:
         91:0c:08:7a:38:53:70:bd:b0:bd:37:d7:2c:e9:9b:51:93:df:
         1d:40:df:ec:a4:93:09:f5:17:9b:e2:da:60:13:c9:20:bc:78:
         27:15:01:81:23:a6:f7:51:67:d9:cf:89:0a:15:a4:af:f4:3d:
         9d:fa:1d:d8:ab:bb:57:b7:d7:15:3b:2d:e7:1f:e9:a5:d8:84:
         12:63:5a:ff:c3:2a:5e:c6:a0:2f:3b:cf:17:c5:eb:a4:d8:c2:
         ff:0e:8b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 09:40:21 2025 by rpki-client