Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa
File:                     3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier:          8TP4OaE1jSvt89WaCEr9dhGmD20RJ3OCjq8BMKVZY6k=
Subject key identifier:   88:10:34:D5:F3:4E:10:5A:30:D5:E6:44:C9:E8:49:93:20:4F:3F:64
Certificate issuer:       /CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
Certificate serial:       5E87B1324AB9C8CCE61F4BEBC71BC0A926F9B215
Authority key identifier: B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa
Signing time:             Tue 05 Mar 2024 17:42:25 +0000
ROA not before:           Tue 05 Mar 2024 17:37:25 +0000
ROA not after:            Tue 04 Mar 2025 17:42:25 +0000
asID:                     262287
IP address blocks:        138.99.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:87:b1:32:4a:b9:c8:cc:e6:1f:4b:eb:c7:1b:c0:a9:26:f9:b2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
        Validity
            Not Before: Mar  5 17:37:25 2024 GMT
            Not After : Mar  4 17:42:25 2025 GMT
        Subject: CN=881034D5F34E105A30D5E644C9E84993204F3F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:0f:f5:63:b8:b8:02:76:7c:08:72:65:2f:
                    85:a4:9d:59:6c:f8:6b:62:7d:97:80:88:d6:33:9f:
                    df:ee:73:85:12:4f:16:f3:f6:79:a6:34:68:7c:8c:
                    ec:95:52:17:63:db:53:25:88:5c:0c:6e:bc:e0:8c:
                    b8:0c:20:2b:ae:2a:78:61:11:13:96:4f:31:1f:90:
                    ca:20:27:65:b9:d3:d8:12:47:9d:f4:8d:04:b7:3c:
                    a5:2e:21:f5:82:cc:28:d2:fc:19:59:c5:fc:33:b2:
                    29:39:2a:30:be:a1:fe:0f:95:4a:84:10:a5:29:2a:
                    e3:30:f6:8e:79:1d:ab:cd:03:83:2d:96:7a:49:7d:
                    57:da:ee:b7:13:0d:67:b5:bd:29:5c:e1:5b:5a:4e:
                    7a:57:2a:35:48:56:70:d4:cd:cc:73:47:12:e3:72:
                    ae:af:e7:b2:60:f8:d1:c9:4f:77:1c:a2:1f:8f:4c:
                    9d:be:d6:62:b3:47:5c:28:aa:e6:1c:0c:b4:91:a6:
                    a8:b7:74:12:0d:7e:94:26:b7:79:d5:4f:d8:50:58:
                    c0:37:99:99:03:0d:5a:84:4a:9b:0c:0c:be:3e:9d:
                    f3:26:a9:c1:ea:e6:28:15:ae:82:22:13:95:07:24:
                    52:a6:33:8e:e5:64:2d:a6:0d:b3:a5:a7:85:34:6f:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:10:34:D5:F3:4E:10:5A:30:D5:E6:44:C9:E8:49:93:20:4F:3F:64
            X509v3 Authority Key Identifier:
                keyid:B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:75:5f:ff:00:91:e3:44:84:2d:dd:12:c1:49:63:ad:97:64:
         f5:a4:ed:93:02:a0:6f:21:5d:30:7e:45:20:fb:1e:f5:49:21:
         76:22:a2:2b:76:2e:ed:ba:f5:24:b8:99:22:ed:aa:64:54:00:
         88:c2:19:0a:59:db:c6:82:65:c3:81:15:14:7b:e5:de:27:d9:
         08:da:7c:30:72:0c:7c:b6:55:95:75:8f:b8:2c:76:5b:00:8f:
         aa:b1:8f:00:0b:10:39:b3:05:7b:1c:b1:35:df:ab:48:6a:f4:
         b8:b2:ba:00:42:fa:69:02:f9:20:52:30:4d:27:fc:84:10:b1:
         38:9a:5f:06:85:ca:87:98:25:4b:61:5e:38:7a:f3:4f:c7:82:
         62:24:5f:60:3e:d2:d4:ea:39:e5:7e:5c:8b:b5:b3:8e:c4:ea:
         de:d4:80:9c:e7:97:10:a9:7a:3a:47:ff:b5:16:19:c4:f4:f2:
         a9:81:f8:b3:23:f0:86:b9:9e:03:a6:c4:b1:e1:68:d5:f3:69:
         20:c8:7a:00:09:7d:0d:f6:a9:e1:29:64:e6:64:8f:f0:f8:8c:
         61:0a:e7:35:fb:1e:5b:f2:9c:9f:13:fe:c5:fa:70:77:b6:fb:
         ff:18:30:0e:1d:22:1b:ba:5c:5c:25:8b:3b:95:e7:78:e1:bc:
         4e:d2:30:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:06:10 2024 by rpki-client on console-fra.rpki-client.org