Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/3133382e3138352e3230352e302f32342d3234203d3e20323633373034.roa
File:                     3133382e3138352e3230352e302f32342d3234203d3e20323633373034.roa (raw, json)
Hash identifier:          iXNdD2CaYFCkxY2Xc1ahxIfv8GTc23+QcluTTbHK4EI=
Subject key identifier:   9A:B0:05:79:96:AA:C3:C8:9B:EC:BD:2D:37:C4:E9:39:BC:0C:E9:4E
Certificate issuer:       /CN=D6D506245328F9A3F0499B715D40967C3D5A3303
Certificate serial:       6A42312BF358F97B65651D8E5BC5C1028F15F69C
Authority key identifier: D6:D5:06:24:53:28:F9:A3:F0:49:9B:71:5D:40:96:7C:3D:5A:33:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D506245328F9A3F0499B715D40967C3D5A3303.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/3133382e3138352e3230352e302f32342d3234203d3e20323633373034.roa
Signing time:             Tue 04 Feb 2025 18:28:10 +0000
ROA not before:           Tue 04 Feb 2025 18:23:10 +0000
ROA not after:            Tue 03 Feb 2026 18:28:10 +0000
asID:                     263704
IP address blocks:        138.185.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/D6D506245328F9A3F0499B715D40967C3D5A3303.crl
                          rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/D6D506245328F9A3F0499B715D40967C3D5A3303.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D506245328F9A3F0499B715D40967C3D5A3303.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:42:31:2b:f3:58:f9:7b:65:65:1d:8e:5b:c5:c1:02:8f:15:f6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D506245328F9A3F0499B715D40967C3D5A3303
        Validity
            Not Before: Feb  4 18:23:10 2025 GMT
            Not After : Feb  3 18:28:10 2026 GMT
        Subject: CN=9AB0057996AAC3C89BECBD2D37C4E939BC0CE94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:64:38:08:8b:c8:b8:cf:59:9e:7b:d6:35:
                    52:3a:f8:cc:d1:b4:9e:18:de:9b:dc:29:15:df:08:
                    0e:67:de:49:bb:5a:a6:66:7f:47:17:f6:93:1b:87:
                    32:fc:8e:00:27:9e:cd:78:87:c7:f8:87:a8:bc:8a:
                    2c:73:3d:35:67:05:6d:45:98:15:ac:9c:89:c8:cb:
                    56:5b:ea:99:02:92:7e:27:b1:da:96:e7:26:1d:57:
                    b1:bf:76:4f:92:b6:3a:91:97:af:8b:82:4b:2b:12:
                    e1:2b:4e:ff:dc:4e:73:1f:7e:6b:cf:3c:3c:06:46:
                    13:65:d5:8f:95:a0:ee:f0:80:5a:ca:dd:ee:d0:01:
                    62:36:02:05:9d:3c:21:89:84:40:ac:47:14:20:f9:
                    e4:4c:9e:56:86:77:02:7c:be:24:ae:ff:33:29:a6:
                    5a:7e:d1:45:42:04:73:bb:64:f3:7a:de:81:41:e4:
                    f8:cb:64:cc:90:9d:74:87:94:13:1d:bc:f3:31:61:
                    c2:6c:9b:c7:00:de:fd:73:b4:52:21:2f:ab:f0:7e:
                    25:31:e4:b1:8d:5b:ee:e2:f6:50:42:78:e6:ec:08:
                    1c:6b:8d:6b:22:63:3a:fa:d2:3b:92:b6:ec:a1:fd:
                    46:ac:34:c8:99:25:7e:0e:be:74:02:1c:eb:e9:fe:
                    47:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B0:05:79:96:AA:C3:C8:9B:EC:BD:2D:37:C4:E9:39:BC:0C:E9:4E
            X509v3 Authority Key Identifier:
                keyid:D6:D5:06:24:53:28:F9:A3:F0:49:9B:71:5D:40:96:7C:3D:5A:33:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/D6D506245328F9A3F0499B715D40967C3D5A3303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D506245328F9A3F0499B715D40967C3D5A3303.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/454AE8ECF9626510BB5761B2C6174CA1FC6E2743C576626E394C056471335078/0/3133382e3138352e3230352e302f32342d3234203d3e20323633373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:eb:7c:c9:85:a4:f9:58:8f:91:ce:4f:a8:fc:43:d6:e4:7d:
         5f:79:d0:35:cc:89:66:07:78:85:f1:9b:cd:12:58:e8:65:ec:
         2b:97:ba:51:f0:66:67:64:a8:f3:9e:e4:cd:d0:35:53:27:b0:
         97:ad:17:5f:e5:7e:38:96:75:d4:30:ba:ac:86:bd:62:f0:97:
         37:f0:bd:02:8f:81:8c:90:1f:0d:66:24:18:ae:8b:9e:77:52:
         59:f6:d6:bc:84:81:b7:d5:47:6f:24:f8:65:58:77:16:30:9c:
         79:8f:9c:6d:37:8d:02:f6:0b:e8:44:62:c7:80:11:23:72:17:
         a1:6a:21:44:52:fd:85:8e:0c:5a:16:40:53:00:cb:8c:1e:00:
         89:f0:db:55:74:66:29:b3:1a:3e:9d:9c:3a:7a:25:75:6f:b1:
         c7:72:53:a8:f5:1f:6f:be:2b:72:a1:79:44:8e:d9:cb:9e:71:
         71:a3:5f:85:d4:12:b2:22:79:d6:84:ca:e2:f8:b8:c3:c8:f7:
         5b:57:e6:37:f5:35:79:0e:dd:3d:43:0a:43:7e:06:ee:4b:64:
         57:48:c2:59:06:cd:3d:bd:3a:ff:4c:e0:c0:d6:85:84:3f:f9:
         9e:11:3a:be:8e:61:e0:28:d2:00:8d:c9:f0:bd:ed:1d:62:12:
         25:47:bd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:55 2025 by rpki-client on console.sobornost.net