Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3133382e3131372e34302e302f32342d3234203d3e20323639393830.roa
File:                     3133382e3131372e34302e302f32342d3234203d3e20323639393830.roa (raw, json)
Hash identifier:          YCi00WPXCoH+LgxMFocBT7un54JV2nliIXmT+l48sxk=
Subject key identifier:   B9:17:7D:EB:53:F9:A6:C3:EA:37:19:CA:A2:C8:EB:8F:EC:7A:11:66
Certificate issuer:       /CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
Certificate serial:       454772DBBD03C6575C17A6CFCB9757B94640394E
Authority key identifier: B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3133382e3131372e34302e302f32342d3234203d3e20323639393830.roa
Signing time:             Tue 03 Jun 2025 14:30:02 +0000
ROA not before:           Tue 03 Jun 2025 14:25:02 +0000
ROA not after:            Tue 02 Jun 2026 14:30:02 +0000
asID:                     269980
IP address blocks:        138.117.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 11:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:47:72:db:bd:03:c6:57:5c:17:a6:cf:cb:97:57:b9:46:40:39:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C
        Validity
            Not Before: Jun  3 14:25:02 2025 GMT
            Not After : Jun  2 14:30:02 2026 GMT
        Subject: CN=B9177DEB53F9A6C3EA3719CAA2C8EB8FEC7A1166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:bb:14:de:33:41:37:3b:66:c7:91:32:cb:
                    4c:0d:31:d6:5d:fc:fd:84:4a:0c:62:76:e0:a8:47:
                    ea:a1:68:07:86:05:28:9c:bc:18:29:c4:80:c0:93:
                    7f:31:a3:e0:b3:bf:46:21:9c:42:01:7c:9e:7c:be:
                    3a:80:0f:06:0d:d8:08:61:24:e6:4f:f1:df:4e:e2:
                    00:56:6a:a9:76:3c:dc:87:cd:d8:ad:e0:81:7a:f1:
                    7d:62:92:46:af:8a:b9:fb:4d:4e:40:b2:87:ce:86:
                    4c:f5:1f:99:1d:dd:27:9b:37:5d:4c:5a:fe:03:7b:
                    06:44:0c:e1:0b:67:10:f9:cc:c7:83:12:e3:8d:c3:
                    cf:36:6c:78:e1:42:b6:3c:7d:b1:0f:1d:76:74:51:
                    7b:83:cf:21:75:0c:f8:8e:ea:10:dd:87:f5:48:82:
                    81:cb:ed:7c:ed:79:db:89:3a:8b:58:6b:17:1b:87:
                    15:d9:08:3e:51:4c:45:08:49:3f:59:3b:b0:85:d5:
                    95:bf:5b:64:9b:fd:32:ea:df:37:1a:7c:8f:7e:e0:
                    8b:d7:b8:c0:1b:9c:50:7e:b0:e0:71:00:63:c5:fd:
                    73:82:08:9c:d3:27:8f:26:d5:a9:0b:a6:76:11:13:
                    d1:37:8d:92:77:62:99:be:f5:fd:98:e3:32:ff:aa:
                    e6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:17:7D:EB:53:F9:A6:C3:EA:37:19:CA:A2:C8:EB:8F:EC:7A:11:66
            X509v3 Authority Key Identifier:
                keyid:B1:9D:CD:B6:4E:50:6E:AC:5C:80:E9:A6:A0:E2:2F:0D:F2:5D:72:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B19DCDB64E506EAC5C80E9A6A0E22F0DF25D723C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D932B69CBE34140327D3802970BFFFBE9112C0C84B4AD58C28D44E1578550061/0/3133382e3131372e34302e302f32342d3234203d3e20323639393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:59:f3:0a:23:a8:6b:b6:fa:a6:c9:d4:0e:ba:6b:b7:1f:2e:
         56:c5:b4:08:8c:c2:77:df:bc:d9:3f:9a:e6:e5:3d:bb:d7:ef:
         d0:4c:43:64:06:ac:a7:d2:14:95:15:cf:ba:cf:44:c8:a5:5a:
         6f:ff:75:a1:24:56:b3:31:df:f9:7d:f4:ca:31:6b:95:69:94:
         55:25:eb:a4:57:06:86:b9:32:62:ea:14:5c:8f:49:aa:5b:2b:
         9d:b0:54:21:8e:f7:c3:16:15:3f:fe:54:b1:96:90:40:f9:83:
         20:d5:c2:69:a2:3f:03:d7:5a:62:1a:bf:9b:94:0a:fc:01:d1:
         3f:0b:09:b1:55:74:5c:6c:74:11:54:ec:77:5e:65:8c:cb:a8:
         43:1b:bb:45:a6:22:aa:a2:97:c0:75:91:96:d8:7a:0d:0c:33:
         d2:ce:de:ac:54:fd:6a:21:e8:60:8a:fb:2e:f8:78:ac:a9:3d:
         68:51:00:c7:f3:43:c6:fd:c7:56:87:bc:11:8a:7d:4c:68:4a:
         d7:ff:f8:72:79:02:c9:b2:0e:c3:c1:24:9f:d3:c4:fb:66:b1:
         ca:5a:2e:ef:2a:c6:d8:07:0c:7e:37:a4:5d:95:b8:80:83:f0:
         39:1f:a4:02:aa:1a:be:4d:bd:49:f9:49:ae:44:74:0a:9a:63:
         2c:ed:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 00:26:02 2025 by rpki-client