Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e203631333137.roa
File:                     3133382e39392e3134342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          wuInXcny1NxDrSr1+PRUA6LQobMMpXLBxddfMlfB+g8=
Subject key identifier:   C6:4F:8F:1F:42:F8:1D:D9:89:01:43:29:8E:CF:80:39:41:28:F3:FE
Certificate issuer:       /CN=EBC77018588D7C3C87C3E13D71293177455EE57D
Certificate serial:       5510F0C4532322F874AFDB7BD74AE93828AA4873
Authority key identifier: EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 05 Mar 2024 17:40:39 +0000
ROA not before:           Tue 05 Mar 2024 17:35:39 +0000
ROA not after:            Tue 04 Mar 2025 17:40:39 +0000
asID:                     61317
IP address blocks:        138.99.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:10:f0:c4:53:23:22:f8:74:af:db:7b:d7:4a:e9:38:28:aa:48:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC77018588D7C3C87C3E13D71293177455EE57D
        Validity
            Not Before: Mar  5 17:35:39 2024 GMT
            Not After : Mar  4 17:40:39 2025 GMT
        Subject: CN=C64F8F1F42F81DD9890143298ECF80394128F3FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:24:2f:87:c3:d3:6b:3b:5a:c4:f3:73:66:
                    46:7d:ef:1f:3b:60:e2:f7:0a:bf:fe:86:8d:44:cc:
                    28:7e:c0:28:3e:85:3c:02:88:40:18:ff:5e:4c:84:
                    07:92:7f:14:8d:09:7d:f9:ad:fc:26:0d:86:22:b0:
                    a6:64:6d:c3:ed:70:0a:b3:57:5c:f5:12:6a:85:4d:
                    a6:0a:e4:a9:ef:4c:b4:77:8d:3c:f1:89:ac:10:86:
                    69:74:33:41:12:47:94:14:c1:08:ac:8d:95:66:4f:
                    81:4a:bb:a9:4a:88:63:89:07:47:08:02:74:05:a0:
                    97:89:7e:21:dc:1a:66:90:da:3b:c7:bb:f5:df:e9:
                    5f:31:6c:58:24:2d:e9:40:15:4c:c9:a0:7f:fa:4f:
                    1e:8a:02:82:4b:ae:b7:70:b4:97:48:ac:9b:e4:89:
                    8d:be:1b:77:33:6e:50:2a:22:c8:c5:c5:e4:e3:72:
                    6f:6c:4d:ae:b9:7e:1d:cf:e5:27:e4:3f:3d:86:e2:
                    bc:0a:8e:47:2c:3f:30:18:10:87:55:dd:e3:46:01:
                    b6:86:fa:d1:4b:2f:22:1e:f6:16:9f:65:81:ee:66:
                    f4:b4:df:f9:10:d0:ef:9a:6d:57:af:68:68:ac:f9:
                    8b:85:c9:67:6c:e2:c7:9c:80:b0:e1:7b:0c:0b:38:
                    38:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4F:8F:1F:42:F8:1D:D9:89:01:43:29:8E:CF:80:39:41:28:F3:FE
            X509v3 Authority Key Identifier:
                keyid:EB:C7:70:18:58:8D:7C:3C:87:C3:E1:3D:71:29:31:77:45:5E:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/EBC77018588D7C3C87C3E13D71293177455EE57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBC77018588D7C3C87C3E13D71293177455EE57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73A1AB471C09C73568BEF9A3061926DB93AD5EC2E0C694834C0474CFC561746A/0/3133382e39392e3134342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:52:df:f3:6d:98:56:e1:4c:64:c7:a6:8c:78:d7:32:d1:
         7c:b0:98:95:62:1f:30:69:96:27:fa:30:d2:2c:7c:d2:9f:07:
         99:ec:06:04:64:59:63:26:5d:b7:8c:2d:7b:c3:e3:b7:0a:73:
         16:75:fd:13:86:c7:5f:7b:5e:cd:b6:c5:08:dd:b1:2e:56:a0:
         84:ae:25:4d:9b:23:cd:82:cc:d0:a6:4e:ba:e6:32:83:40:9a:
         2e:cf:1a:e6:1b:40:00:6d:c2:a7:c0:9c:7b:ab:40:a3:f3:52:
         18:8a:ff:69:89:7b:21:ba:ff:47:51:d4:9c:7a:74:95:9b:d0:
         ca:b1:84:31:c1:25:e7:2e:98:7c:6a:fe:a2:ab:48:69:89:b4:
         8a:bf:72:dc:e2:f6:5f:c1:09:1d:a4:3c:b3:4d:2e:2f:4e:04:
         5f:ac:47:ff:fe:fd:22:0b:02:1b:d0:5e:55:71:3a:8e:9b:6a:
         9d:b8:f3:89:88:96:ce:f5:2c:9a:7a:c5:04:3a:c0:d0:c8:f3:
         60:ab:b6:9a:f8:a6:92:1b:63:de:a3:3b:9a:e0:e5:6c:c4:1d:
         25:82:94:b8:24:32:2b:55:02:7e:d0:84:1f:1e:e5:d9:95:c7:
         03:09:e1:8c:cc:7d:32:7e:f7:02:9c:f2:70:fe:15:8f:2b:33:
         48:36:2e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:07:42 2024 by rpki-client on console-fra.rpki-client.org