Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa
File:                     3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier:          1x3HavdccUhykGVqeOSy45cpT10NQLu3TIQlDpQq6Ig=
Subject key identifier:   D1:36:86:7D:84:BE:17:AE:A0:70:AE:AE:6B:E6:87:CF:93:CF:F1:2E
Certificate issuer:       /CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
Certificate serial:       52C48B6146E5ED2541B1D7F872B81EE0F24B990B
Authority key identifier: B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa
Signing time:             Tue 04 Feb 2025 18:31:27 +0000
ROA not before:           Tue 04 Feb 2025 18:26:27 +0000
ROA not after:            Tue 03 Feb 2026 18:31:27 +0000
asID:                     262287
IP address blocks:        138.99.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c4:8b:61:46:e5:ed:25:41:b1:d7:f8:72:b8:1e:e0:f2:4b:99:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
        Validity
            Not Before: Feb  4 18:26:27 2025 GMT
            Not After : Feb  3 18:31:27 2026 GMT
        Subject: CN=D136867D84BE17AEA070AEAE6BE687CF93CFF12E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:42:ee:4c:e2:fb:c0:b9:cb:0b:29:ce:bb:
                    85:74:71:21:6f:3d:93:4b:06:9b:13:94:85:2b:70:
                    f3:37:f8:f3:1f:b7:a2:1e:3d:36:f6:c8:92:30:0e:
                    3f:06:c9:8e:4b:56:f3:b5:95:74:64:ca:9d:57:b6:
                    e0:70:00:8e:b1:a0:8b:b8:e0:7a:56:74:dd:c2:46:
                    7b:65:6a:5e:99:90:13:9a:6f:76:9c:98:d7:a7:ee:
                    3d:ed:c4:11:d8:c4:3f:34:7b:de:4f:47:b7:17:6c:
                    2b:14:3b:de:05:2f:46:c7:e1:0a:70:06:e1:49:36:
                    f0:8f:c3:c1:e3:a3:94:54:a2:f1:40:5a:8c:f0:fe:
                    f1:25:9b:13:c6:5f:24:11:d1:03:e8:84:d2:f6:31:
                    f8:56:f6:8f:e9:79:33:70:0e:f0:44:ed:a5:cd:9e:
                    89:88:1d:e7:75:86:f6:68:fd:bb:0c:7a:c0:82:de:
                    2f:2f:ba:af:0b:a4:6d:75:69:92:86:7a:53:71:b9:
                    2c:fc:ca:d0:a6:44:15:93:a7:7c:85:91:b3:76:7f:
                    84:20:5b:6a:6c:ac:c8:a8:fa:d5:8a:43:94:c4:b6:
                    1b:83:35:c2:61:62:d0:b0:1b:07:00:fb:f5:39:4f:
                    f1:db:af:5f:65:ce:04:cf:e6:6b:0f:98:53:25:0e:
                    72:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:36:86:7D:84:BE:17:AE:A0:70:AE:AE:6B:E6:87:CF:93:CF:F1:2E
            X509v3 Authority Key Identifier:
                keyid:B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3230382e302f32342d3234203d3e20323632323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:71:ae:e1:b8:da:cb:67:51:58:6d:b5:23:fe:9c:a2:55:64:
         7c:6d:51:b7:3f:54:19:af:ae:8f:b7:a6:ba:47:7a:67:14:3e:
         40:9c:60:da:9b:af:86:bd:84:fb:eb:fd:eb:ba:e4:74:14:59:
         bc:b0:34:72:ff:f5:94:39:20:50:96:7d:cf:25:3e:ba:61:e3:
         ad:29:3f:6e:d1:b2:11:77:1e:c8:0b:2b:17:14:bb:1d:93:14:
         5d:72:9e:0a:98:f2:f7:d9:39:7f:b2:34:db:cf:93:71:fd:e0:
         ca:ae:83:d3:d1:74:61:08:c8:0a:31:3b:58:8b:b1:5d:a3:1a:
         4a:f8:3c:1c:60:05:cd:21:b8:a4:a6:13:1b:e8:8b:8c:40:6f:
         64:69:26:68:82:64:40:16:9e:4a:ca:54:96:70:49:87:30:aa:
         54:9a:f0:25:63:a4:9b:4b:e9:9e:53:0a:ff:ad:98:57:28:5b:
         3b:9c:a4:57:9b:0f:75:e0:21:75:97:c9:66:cb:2d:ab:9f:dd:
         ba:05:23:8f:7f:c0:97:ce:1d:d1:74:92:65:8a:f0:33:5f:33:
         a6:58:b8:54:01:e0:a4:4f:28:cf:18:2c:a2:a8:c0:bd:fb:40:
         0c:b0:b9:20:b8:cf:43:02:66:de:e8:a3:4e:30:0f:f3:ea:cc:
         31:cf:78:41
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUsSLYUbl7SVBsdf4crge4PJLmQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE0NzgzMTE4NDIyMkIwQjNGRDNFMzkwMjQ5RUNBN0FG
QzE3MUYwRDAeFw0yNTAyMDQxODI2MjdaFw0yNjAyMDMxODMxMjdaMDMxMTAvBgNV
BAMTKEQxMzY4NjdEODRCRTE3QUVBMDcwQUVBRTZCRTY4N0NGOTNDRkYxMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzkLuTOL7wLnLCynOu4V0cSFv
PZNLBpsTlIUrcPM3+PMft6IePTb2yJIwDj8GyY5LVvO1lXRkyp1XtuBwAI6xoIu4
4HpWdN3CRntlal6ZkBOab3acmNen7j3txBHYxD80e95PR7cXbCsUO94FL0bH4Qpw
BuFJNvCPw8Hjo5RUovFAWozw/vElmxPGXyQR0QPohNL2MfhW9o/peTNwDvBE7aXN
nomIHed1hvZo/bsMesCC3i8vuq8LpG11aZKGelNxuSz8ytCmRBWTp3yFkbN2f4Qg
W2psrMio+tWKQ5TEthuDNcJhYtCwGwcA+/U5T/Hbr19lzgTP5msPmFMlDnLVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0TaGfYS+F66gcK6ua+aHz5PP8S4wHwYDVR0j
BBgwFoAUsUeDEYQiKws/0+OQJJ7KevwXHw0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMjcxQjMwODcxRDE4NTcwOTk3Qzc0MzQxMkI2QTkzRTQ4
ODAwMTBERTI1MEUxQjM2NzBDNTVEOEQ2MUJCRjA3LzAvQjE0NzgzMTE4NDIyMkIw
QjNGRDNFMzkwMjQ5RUNBN0FGQzE3MUYwRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMTQ3ODMxMTg0MjIyQjBCM0ZE
M0UzOTAyNDlFQ0E3QUZDMTcxRjBELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDI3MUIzMDg3MUQxODU3MDk5N0M3NDM0MTJCNkE5M0U0ODgwMDEwREUy
NTBFMUIzNjcwQzU1RDhENjFCQkYwNy8wLzMxMzMzODJlMzkzOTJlMzIzMDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzIzODM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAimPQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBOca7huNrLZ1FYbbUj/pyiVWR8bVG3P1QZr66P
t6a6R3pnFD5AnGDam6+GvYT76/3ruuR0FFm8sDRy//WUOSBQln3PJT66YeOtKT9u
0bIRdx7ICysXFLsdkxRdcp4KmPL32Tl/sjTbz5Nx/eDKroPT0XRhCMgKMTtYi7Fd
oxpK+DwcYAXNIbikphMb6IuMQG9kaSZogmRAFp5KylSWcEmHMKpUmvAlY6SbS+me
Uwr/rZhXKFs7nKRXmw914CF1l8lmyy2rn926BSOPf8CXzh3RdJJlivAzXzOmWLhU
AeCkTyjPGCyiqMC9+0AMsLkguM9DAmbe6KNOMA/z6swxz3hB
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:54 2025 by rpki-client