Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa
File:                     3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa (raw, json)
Hash identifier:          nAlIq8Imsva/hGiNGY1F5AlzIAoCx0BlIMSVHvrB7HQ=
Subject key identifier:   58:6C:10:6F:12:52:05:1C:4F:59:47:24:5D:B8:DD:5E:94:E8:1B:29
Certificate issuer:       /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial:       09B73BDF33BA748F5D96CA4C3DDC7CC2224A8BD2
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa
Signing time:             Tue 05 Mar 2024 17:55:34 +0000
ROA not before:           Tue 05 Mar 2024 17:50:34 +0000
ROA not after:            Tue 04 Mar 2025 17:55:34 +0000
asID:                     263244
IP address blocks:        138.99.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b7:3b:df:33:ba:74:8f:5d:96:ca:4c:3d:dc:7c:c2:22:4a:8b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
        Validity
            Not Before: Mar  5 17:50:34 2024 GMT
            Not After : Mar  4 17:55:34 2025 GMT
        Subject: CN=586C106F1252051C4F5947245DB8DD5E94E81B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:f0:85:b1:2d:2d:2f:bc:ac:c7:6a:10:3a:
                    32:4f:35:69:54:5d:04:9f:56:80:3e:b9:0f:e8:a4:
                    de:c6:ef:9e:73:52:b7:9c:0f:90:d9:3d:95:35:f0:
                    7f:d3:05:96:46:97:28:1a:04:40:d9:c5:fc:37:ac:
                    7b:31:86:fc:d3:41:bd:ca:de:35:36:2a:20:7c:24:
                    fd:85:16:ce:51:63:7b:cf:86:39:cc:eb:b1:04:60:
                    a0:f8:0d:3c:8c:b1:dd:84:a2:72:53:3e:5c:0b:10:
                    5d:fd:52:75:88:94:81:1f:2c:72:5a:8f:26:6b:46:
                    22:34:4f:28:9a:ad:28:9d:18:24:95:53:d7:1b:42:
                    76:18:0d:d4:55:84:1a:22:58:ec:ea:c1:31:91:c0:
                    9b:7a:44:b3:78:fb:b1:aa:3a:00:7f:8b:1d:00:0e:
                    6f:b6:07:bb:5e:11:73:87:48:9b:2d:e4:13:eb:04:
                    ad:75:8c:8d:9c:52:2c:e5:db:23:55:d7:85:ce:0c:
                    c3:44:75:3c:64:27:e6:73:db:30:e6:64:8e:04:f0:
                    65:2e:10:37:79:98:25:56:4c:fc:d2:38:68:47:7b:
                    cf:78:10:19:64:de:88:72:2d:1d:eb:b9:50:a0:0b:
                    cf:ca:64:7c:e6:3b:09:f3:f5:c8:82:21:ea:3e:f7:
                    e9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6C:10:6F:12:52:05:1C:4F:59:47:24:5D:B8:DD:5E:94:E8:1B:29
            X509v3 Authority Key Identifier:
                keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3133382e39392e3138342e302f32322d3234203d3e20323633323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:c5:7e:62:6a:47:2b:a1:87:e7:75:ad:1b:fa:a1:f7:b8:d6:
         8b:b6:43:35:83:88:ac:30:5d:ae:5e:5e:34:60:05:09:af:b6:
         81:60:74:6e:81:35:5e:96:b6:34:f3:df:ae:67:60:00:ce:b2:
         a2:a3:a5:0a:4f:89:90:66:b7:f1:3e:14:f4:22:f3:4a:a4:db:
         c6:d5:db:90:16:38:ef:cd:6d:1c:d2:64:2c:29:db:c1:71:a7:
         32:64:03:bc:4e:58:dd:79:f8:1f:94:a4:d0:ae:fd:83:b1:af:
         f2:f7:04:4f:ad:b9:f8:bf:6b:3e:e2:d7:53:69:81:de:02:9a:
         84:07:f7:c6:04:31:78:e4:8d:7e:0a:e2:d9:ba:bb:f6:f4:8e:
         1c:c4:79:e4:89:eb:68:ea:4d:f3:7a:f8:97:fe:e2:66:fb:a7:
         01:35:fc:f6:66:1d:2c:e1:f6:9f:90:c0:df:eb:67:2c:85:0c:
         dc:03:00:6c:7c:0f:2f:8c:f2:63:89:3e:fe:b4:bf:69:10:42:
         38:c3:4f:3d:98:ea:05:5c:14:87:8a:37:0d:7a:c4:09:65:1d:
         6d:f7:8a:80:56:ed:74:b7:e1:33:c8:94:23:54:14:5a:3e:eb:
         dc:63:19:e0:92:d5:35:6c:73:b1:4b:12:f1:b8:54:b4:5e:fa:
         dc:3b:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:01 2024 by rpki-client on console-ams.rpki-client.org