Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa
File:                     3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa (raw, json)
Hash identifier:          r3mpym8MNwnvHxIuYSgXnngQZcrxT6L1+B3uUPWi9dY=
Subject key identifier:   04:D3:86:B1:82:1B:83:A7:B1:B1:99:10:03:29:BA:60:F8:AC:69:15
Certificate issuer:       /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial:       76FA5D0452CF3FF60AABAD1496D8E172DA8528A0
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa
Signing time:             Tue 04 Feb 2025 18:21:35 +0000
ROA not before:           Tue 04 Feb 2025 18:16:35 +0000
ROA not after:            Tue 03 Feb 2026 18:21:35 +0000
asID:                     263244
IP address blocks:        138.99.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fa:5d:04:52:cf:3f:f6:0a:ab:ad:14:96:d8:e1:72:da:85:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
        Validity
            Not Before: Feb  4 18:16:35 2025 GMT
            Not After : Feb  3 18:21:35 2026 GMT
        Subject: CN=04D386B1821B83A7B1B199100329BA60F8AC6915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:11:20:73:24:2d:7d:86:ec:c8:a3:fc:74:
                    c6:3a:71:e7:07:be:55:07:27:e4:9a:e8:49:8d:f9:
                    e3:51:33:d9:e8:82:60:e6:f4:21:6a:f2:20:89:3b:
                    d8:ac:e2:77:7a:1a:bb:f7:aa:80:f3:a6:bb:85:48:
                    15:5d:d7:b8:f4:07:36:11:2a:f0:c1:9c:9e:6a:1b:
                    09:2c:94:9e:6b:bc:52:a4:a4:fa:b9:4b:94:bc:f5:
                    e4:30:7d:03:95:1b:23:36:22:b7:59:fb:31:1f:ee:
                    4b:9b:61:b9:ca:46:d9:ff:f9:f9:6d:42:3d:ee:c2:
                    87:6c:db:b4:a5:30:9c:1b:5f:b0:81:b3:c8:fc:b6:
                    0a:aa:0a:77:3f:06:55:cf:b7:00:00:5b:17:34:ef:
                    12:e4:07:16:24:40:32:76:a3:a2:27:be:16:fb:4f:
                    b5:74:24:a3:e6:92:0e:67:3d:f5:99:2a:8e:b5:7e:
                    90:61:bd:36:e4:c3:9d:71:c6:49:54:79:8b:12:6b:
                    66:be:6d:4b:5d:ed:65:c5:73:a3:af:3f:ea:cb:38:
                    82:a8:7e:e3:60:af:8d:38:f7:62:c7:9c:39:12:f1:
                    c1:3c:a6:19:cb:27:c6:5d:e0:a3:d7:3d:61:7a:6a:
                    72:be:91:14:48:51:57:97:b5:b6:b1:92:ab:b9:61:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D3:86:B1:82:1B:83:A7:B1:B1:99:10:03:29:BA:60:F8:AC:69:15
            X509v3 Authority Key Identifier:
                keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:40:b8:35:67:18:25:e7:49:bb:2c:fa:a7:a3:91:fa:5c:cb:
         69:55:93:86:71:bb:5a:ca:20:2e:7e:2a:69:3b:21:b7:0c:36:
         02:f4:78:d3:d2:67:03:af:f7:22:be:69:0e:de:9b:90:61:05:
         af:02:91:8c:ba:8f:da:b7:20:be:57:ae:81:7c:96:82:24:9a:
         4c:ca:d9:55:56:07:39:ec:14:e3:74:83:e2:53:5f:d3:73:b3:
         91:c8:8c:5e:77:18:f8:82:71:a2:ce:e2:51:8a:b5:cd:4d:08:
         25:cb:8f:ec:e0:90:19:0f:cc:01:b9:61:e0:63:4e:24:23:18:
         9e:1b:90:0f:d3:95:29:0a:f5:9b:72:7f:36:2c:10:04:44:26:
         a9:90:95:86:7c:c7:ab:fd:3d:0c:63:4b:38:69:e8:0b:83:97:
         bc:75:00:0f:0e:2e:33:55:07:de:a6:7b:7d:99:da:b7:ac:f0:
         a8:46:35:0d:2c:ce:fa:4c:75:11:b0:5b:50:fc:dc:3d:8f:4e:
         b6:65:63:69:bf:37:bc:46:45:0b:0f:f7:06:d2:a8:53:7f:39:
         5f:b1:6b:83:4b:ea:61:51:4b:c0:a7:e7:25:0c:59:37:f7:db:
         c6:0f:0e:27:7b:a1:0d:1c:06:69:6d:0b:98:48:4c:89:f9:a9:
         34:88:40:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:01 2025 by rpki-client