Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa
File:                     3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa (raw, json)
Hash identifier:          HFSRWzDL2lrNorLyOZ2rpOj927L8vWA3XBEgTNt0Dtk=
Subject key identifier:   4A:DC:D4:FE:C4:ED:66:F0:57:C5:E4:DE:88:FA:9A:81:6E:D0:DB:63
Certificate issuer:       /CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
Certificate serial:       77EFDED72F612845EF298C1FFEFBE3EBC5504BD8
Authority key identifier: B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa
Signing time:             Tue 05 Mar 2024 17:42:25 +0000
ROA not before:           Tue 05 Mar 2024 17:37:25 +0000
ROA not after:            Tue 04 Mar 2025 17:42:25 +0000
asID:                     262287
IP address blocks:        138.99.210.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ef:de:d7:2f:61:28:45:ef:29:8c:1f:fe:fb:e3:eb:c5:50:4b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B147831184222B0B3FD3E390249ECA7AFC171F0D
        Validity
            Not Before: Mar  5 17:37:25 2024 GMT
            Not After : Mar  4 17:42:25 2025 GMT
        Subject: CN=4ADCD4FEC4ED66F057C5E4DE88FA9A816ED0DB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:59:3e:e8:b4:f3:d5:16:06:2c:92:d4:e1:
                    19:73:51:3b:24:c3:b9:35:d9:c4:ab:98:3c:55:51:
                    89:55:46:ae:df:52:b7:ec:d9:05:91:d5:6c:39:11:
                    6f:07:5c:f3:3d:f1:47:14:d2:1d:e3:7a:52:9d:83:
                    aa:38:33:d6:7f:72:44:35:42:c4:32:37:bf:aa:c3:
                    0d:7c:dc:e0:81:d5:2e:00:d6:73:4e:64:29:8e:8c:
                    b9:28:20:a9:22:72:c0:cd:ea:06:0e:e7:8b:e3:87:
                    ed:e6:62:26:b5:61:80:d1:40:c5:a9:70:d2:e0:9a:
                    b8:cb:1a:6c:5f:f8:4b:0a:48:70:b7:d0:6e:e8:67:
                    19:32:8e:0c:2e:e4:98:d8:85:6b:26:fa:9a:00:37:
                    f5:da:ee:c1:d2:3c:65:b2:3f:07:d7:f0:d1:a8:be:
                    37:30:6b:ec:cf:78:d9:60:c2:c7:f3:f9:8c:db:d7:
                    7e:85:39:78:3b:e1:95:e5:f5:8d:b0:4a:d1:c8:be:
                    cf:fc:07:8c:d1:43:f2:b8:f2:e9:2c:be:8c:77:2f:
                    d5:e0:0a:5a:37:42:24:5b:c5:0a:2c:ae:5a:75:98:
                    6b:30:34:ee:07:45:e8:55:f7:09:06:d6:d4:83:3e:
                    8d:79:df:09:2f:c4:68:4a:c1:c4:ec:69:4e:ec:61:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DC:D4:FE:C4:ED:66:F0:57:C5:E4:DE:88:FA:9A:81:6E:D0:DB:63
            X509v3 Authority Key Identifier:
                keyid:B1:47:83:11:84:22:2B:0B:3F:D3:E3:90:24:9E:CA:7A:FC:17:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B147831184222B0B3FD3E390249ECA7AFC171F0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0271B30871D18570997C743412B6A93E4880010DE250E1B3670C55D8D61BBF07/0/3133382e39392e3231302e302f32332d3234203d3e20323632323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:1a:d7:7b:59:94:34:9e:cf:ba:05:f9:f7:c2:95:9d:da:
         70:48:8c:bc:ab:8c:75:e3:8a:5b:95:a2:eb:7a:30:1f:6b:6e:
         27:d7:4d:f0:7a:52:95:82:e8:82:39:74:dc:19:1f:35:a8:7b:
         52:4d:ee:c5:85:5e:ea:d8:33:68:63:b7:2a:76:97:07:fd:f0:
         59:ce:e1:29:b0:02:8e:af:f4:fe:55:0c:04:3c:c1:3c:95:24:
         80:67:6b:ae:2d:39:c3:0f:6e:0a:67:cf:62:9d:c5:7b:21:92:
         cd:3d:31:dc:88:0f:06:d3:32:17:ae:49:11:86:9e:d0:98:71:
         8a:fa:43:b5:2c:ff:79:56:58:42:69:a3:1c:7d:55:c7:91:38:
         aa:bc:38:80:71:9a:f5:d8:0d:34:e7:94:35:9a:54:d8:60:c9:
         ff:ef:a3:10:52:78:5e:7d:6c:b9:52:fc:a3:67:27:2d:3f:ee:
         94:6e:1a:9f:0f:d4:de:cb:b2:ac:7f:81:1f:6c:e3:4c:15:90:
         39:3a:03:8c:a2:a2:55:4b:b7:08:d2:43:04:23:11:92:69:32:
         62:f4:88:e7:74:30:55:98:8d:94:b6:0d:d2:2a:41:d7:a3:49:
         25:77:83:09:ad:d3:b4:2a:54:0c:5d:12:ab:33:11:cd:bc:0b:
         83:cf:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:06:10 2024 by rpki-client on console-fra.rpki-client.org