Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3232382e302f32342d3234203d3e20323639393839.roa
File:                     3133382e3131372e3232382e302f32342d3234203d3e20323639393839.roa (raw, json)
Hash identifier:          m+z39EmdqZD/39eL26QpTg+zThINCvXI4ZB+EyiDdiY=
Subject key identifier:   E0:FA:86:8C:AD:84:E1:71:11:28:6B:A5:C7:12:EC:42:7F:71:0F:4A
Certificate issuer:       /CN=3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6
Certificate serial:       0818ADC8C6479F515BE75A28B9A34A405BF77A7D
Authority key identifier: 36:32:90:0A:5F:3F:72:A0:6C:F6:EC:B7:B9:D3:B1:E3:35:6D:A9:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3232382e302f32342d3234203d3e20323639393839.roa
Signing time:             Mon 21 Apr 2025 19:15:37 +0000
ROA not before:           Mon 21 Apr 2025 19:10:37 +0000
ROA not after:            Mon 20 Apr 2026 19:15:37 +0000
asID:                     269989
IP address blocks:        138.117.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:18:ad:c8:c6:47:9f:51:5b:e7:5a:28:b9:a3:4a:40:5b:f7:7a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6
        Validity
            Not Before: Apr 21 19:10:37 2025 GMT
            Not After : Apr 20 19:15:37 2026 GMT
        Subject: CN=E0FA868CAD84E17111286BA5C712EC427F710F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:26:7d:59:49:a3:30:60:24:d1:67:0f:d2:9c:
                    89:6d:97:2f:33:d4:d2:58:94:12:3a:dc:89:00:11:
                    82:6b:35:69:d9:b9:cd:d2:1f:98:ba:46:a8:c1:fd:
                    f2:97:f3:5b:24:f6:ed:42:43:f2:a1:02:e1:d2:1b:
                    5e:c8:ad:eb:ae:40:8e:cc:c6:41:db:4e:81:11:37:
                    75:bd:5b:07:9f:16:24:9c:55:7e:d5:46:fd:f6:e2:
                    43:38:ae:7f:05:03:49:d0:7d:98:e3:ae:28:d4:3b:
                    84:64:c6:a1:36:3e:ec:40:81:bc:ad:1d:1a:76:0d:
                    d1:d7:14:81:c6:68:cc:f2:4a:63:80:af:cd:22:94:
                    8e:3d:23:8b:b7:dd:f0:4d:27:dd:25:15:1a:28:41:
                    92:56:59:c0:6f:ce:96:d8:d3:56:45:68:09:aa:3c:
                    2e:33:99:46:6c:58:f9:f9:bf:f9:a2:2a:36:cf:dc:
                    a3:00:4e:9b:67:b0:b1:29:b1:b6:8d:49:79:29:33:
                    5b:5b:d5:74:ad:0f:f9:26:c5:f7:08:93:06:d1:7b:
                    e4:e4:de:8e:e4:54:b3:c8:ad:69:cf:b1:f4:dc:27:
                    1f:4c:8b:61:0d:60:58:67:fc:04:26:c6:ab:dd:45:
                    b7:52:8d:fb:9f:88:f6:a6:70:0f:f0:79:0b:b3:2d:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FA:86:8C:AD:84:E1:71:11:28:6B:A5:C7:12:EC:42:7F:71:0F:4A
            X509v3 Authority Key Identifier:
                keyid:36:32:90:0A:5F:3F:72:A0:6C:F6:EC:B7:B9:D3:B1:E3:35:6D:A9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3632900A5F3F72A06CF6ECB7B9D3B1E3356DA9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6CF068CF4BA434782FDDD7B24AAA11651528BBE5A39AF9222DAD287AA32678B/0/3133382e3131372e3232382e302f32342d3234203d3e20323639393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:61:43:f2:df:df:2c:4e:4e:cc:73:c7:12:bf:c8:68:d3:17:
         a8:3d:0a:73:f2:00:b5:c3:17:96:b2:c2:69:7d:bf:f0:0c:07:
         c4:13:cb:8b:a7:c6:36:52:f3:c8:6d:f1:b6:49:de:3f:b5:22:
         3f:bf:37:84:3a:28:6a:30:74:5c:30:c3:5e:ad:a1:fc:99:30:
         81:c1:b5:5f:d2:bd:3f:bf:58:60:55:0d:78:78:28:89:b4:eb:
         77:b9:bc:26:12:f2:5b:f3:e3:6b:89:4f:b0:fe:7f:97:3e:cb:
         89:45:fb:ab:e8:67:0d:5f:4d:d2:78:0a:f4:f5:28:b1:00:31:
         0b:34:f7:f8:85:15:9c:23:28:a3:48:35:51:65:de:2b:11:d4:
         10:b4:dd:5e:ce:26:b9:e9:3c:8c:ac:59:87:8c:8b:76:68:9f:
         c4:69:03:13:7a:ab:41:44:c1:2d:ad:0c:f8:18:28:46:49:51:
         27:e1:db:eb:ad:08:45:a2:3a:22:a6:cd:60:e6:b7:e6:af:87:
         41:b7:af:5c:df:be:94:c5:e5:3f:a1:82:f1:5a:55:98:2a:ca:
         5a:7d:45:70:90:5b:23:1d:b0:a3:40:1a:9d:d0:cd:e3:98:14:
         4f:23:df:b3:38:f7:3d:4f:2e:71:e6:ba:23:08:02:ac:e4:d1:
         45:e0:a2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:14 2025 by rpki-client on console.sobornost.net