Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa
File:                     3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa (raw, json)
Hash identifier:          ClF3+0514qTlK8PRoTVGQYw8fBubhNWO7KsEYoLXhz0=
Subject key identifier:   7E:BA:67:F8:F3:A6:16:85:E7:3A:AE:D7:AC:25:5F:22:40:53:3A:E0
Certificate issuer:       /CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
Certificate serial:       18E4D399E2FDA5776B1B56B1E4E38576591929F0
Authority key identifier: B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa
Signing time:             Tue 04 Feb 2025 18:31:28 +0000
ROA not before:           Tue 04 Feb 2025 18:26:28 +0000
ROA not after:            Tue 03 Feb 2026 18:31:28 +0000
asID:                     262287
IP address blocks:        138.99.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e4:d3:99:e2:fd:a5:77:6b:1b:56:b1:e4:e3:85:76:59:19:29:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
        Validity
            Not Before: Feb  4 18:26:28 2025 GMT
            Not After : Feb  3 18:31:28 2026 GMT
        Subject: CN=7EBA67F8F3A61685E73AAED7AC255F2240533AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:62:fa:4b:11:4e:4b:06:f7:d6:a4:c2:e5:
                    b9:d6:2d:26:01:45:e1:4b:1c:aa:49:25:c7:5f:b0:
                    04:45:20:9f:ea:65:c6:a0:3a:4b:df:ad:54:eb:2a:
                    5f:8a:a3:16:73:14:cf:02:45:55:5f:8e:ed:64:29:
                    0f:71:48:77:13:49:4b:74:36:86:db:f5:b8:31:0e:
                    35:61:bf:08:9d:32:23:d1:c6:f2:8c:14:8f:f1:82:
                    35:39:7f:f8:9d:d3:10:31:12:e5:b5:66:1e:13:28:
                    fb:b3:b4:69:e5:f2:e6:09:14:64:31:9e:5d:4f:e5:
                    c0:fb:9f:65:16:56:c9:c2:6e:e6:ae:27:4c:1d:3b:
                    76:eb:da:c9:12:e3:f5:f5:e5:e5:df:51:98:8e:28:
                    ce:f5:ec:c4:7a:2f:ec:38:8f:4a:a7:64:42:da:d8:
                    8c:73:1c:39:59:42:18:d2:c4:cc:d1:25:59:f1:fa:
                    c0:aa:69:a5:44:2c:f7:47:c4:94:63:53:13:e9:07:
                    76:73:70:a2:ab:78:a7:59:b3:57:9e:8c:a5:45:4c:
                    57:1c:e3:3a:bc:f4:a8:b4:6d:54:ad:52:89:0a:5e:
                    b3:74:4c:68:64:4b:26:44:e8:42:04:17:8e:e5:dc:
                    49:58:76:bd:fd:1b:74:31:06:8f:b9:21:e7:f7:ec:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BA:67:F8:F3:A6:16:85:E7:3A:AE:D7:AC:25:5F:22:40:53:3A:E0
            X509v3 Authority Key Identifier:
                keyid:B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:29:e2:e7:45:3a:51:90:87:e7:89:6d:e6:f6:f1:7a:1e:10:
         31:2b:85:35:63:7d:c9:bd:f0:62:2d:82:d1:b4:ea:c3:37:22:
         01:4f:90:f3:be:23:a2:6b:40:fa:7a:7e:29:79:ff:2a:85:f0:
         fb:79:cc:2b:a5:71:26:73:d3:f8:85:24:71:6f:34:cf:64:10:
         1b:b3:ba:83:6c:a2:69:6b:68:6e:43:4f:bd:d9:d1:aa:1d:de:
         ce:0b:a9:2d:ba:67:d9:03:8c:2d:99:9b:90:e6:6e:8b:0a:a9:
         7b:f6:4b:49:91:46:56:ed:4d:10:18:50:63:9e:1e:08:2c:3f:
         c1:27:19:56:00:5a:de:16:7a:9d:b7:20:e4:bf:9e:6f:32:a4:
         51:3a:2b:5e:56:ca:7e:05:7c:6b:04:09:3d:4f:a3:23:75:87:
         60:b3:cb:0d:a5:67:c2:b7:be:4c:c0:df:63:71:94:40:88:04:
         38:96:e7:47:fe:5a:7a:4d:0f:e4:33:db:e7:8f:54:82:df:54:
         ea:92:7b:b5:72:0b:db:ce:5e:62:a8:d7:dd:bf:b2:bf:f9:98:
         8c:fe:ba:27:de:32:1d:95:01:f6:a5:bc:a2:ef:3a:fb:bb:5c:
         3c:8d:0c:d8:f4:c9:c8:a9:9d:90:12:52:cb:68:c6:bf:fe:cd:
         12:7b:60:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:58 2025 by rpki-client