Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39392e302f32342d3234203d3e20323633373236.roa
File:                     3133382e33362e39392e302f32342d3234203d3e20323633373236.roa (raw, json)
Hash identifier:          K1FLNZRNa2qKeEsoD1bIGY2PjPKt9vYi+1Uq5GXCusQ=
Subject key identifier:   C5:82:20:26:4F:94:A3:A0:E0:EA:25:7D:61:0D:9A:80:CB:08:D5:29
Certificate issuer:       /CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
Certificate serial:       07249E08638C3206B9EA66C06F44F09C9B8044B8
Authority key identifier: A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39392e302f32342d3234203d3e20323633373236.roa
Signing time:             Fri 12 Apr 2024 20:15:02 +0000
ROA not before:           Fri 12 Apr 2024 20:10:02 +0000
ROA not after:            Fri 11 Apr 2025 20:15:02 +0000
asID:                     263726
IP address blocks:        138.36.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:24:9e:08:63:8c:32:06:b9:ea:66:c0:6f:44:f0:9c:9b:80:44:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
        Validity
            Not Before: Apr 12 20:10:02 2024 GMT
            Not After : Apr 11 20:15:02 2025 GMT
        Subject: CN=C58220264F94A3A0E0EA257D610D9A80CB08D529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:a5:34:c5:27:ce:02:31:c6:19:ad:c3:97:
                    88:fc:da:5e:80:f9:01:84:21:20:97:21:9f:d5:7b:
                    9a:bc:df:24:eb:32:b3:e1:dc:71:23:35:63:d5:49:
                    fb:b6:f0:62:e5:9b:1d:a0:fa:a0:69:b4:ee:d0:98:
                    15:e1:25:8e:d5:ae:42:25:43:c6:8b:8d:6f:35:98:
                    e9:af:75:4e:30:fd:e3:92:82:b1:eb:ac:23:28:14:
                    8a:76:50:f6:b0:80:3e:6b:c6:5f:ce:fd:d1:49:ee:
                    6f:bd:01:60:5e:aa:c5:a7:fa:a2:14:aa:64:1b:ce:
                    85:4a:48:ee:0e:db:79:6b:e6:56:0e:5a:e7:f9:ef:
                    b9:c3:d1:97:91:5c:a9:ca:a9:8f:86:7b:f0:47:73:
                    d4:0b:48:b2:63:d7:93:87:58:a6:2d:1b:2b:79:4f:
                    41:b2:69:e9:bb:61:11:35:4c:d4:48:b7:01:6f:be:
                    d5:47:df:48:0c:91:e9:0f:7b:89:41:01:f2:d5:cb:
                    25:aa:5e:df:d4:48:8e:ea:53:31:54:84:f5:f5:14:
                    39:a3:02:d3:ca:5e:dc:0f:7f:f6:f8:58:fe:c5:0d:
                    30:79:9e:b6:36:93:ee:cf:be:37:44:24:36:fa:21:
                    b8:ba:0e:68:39:25:39:e1:48:da:12:20:2d:3d:f5:
                    a3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:82:20:26:4F:94:A3:A0:E0:EA:25:7D:61:0D:9A:80:CB:08:D5:29
            X509v3 Authority Key Identifier:
                keyid:A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39392e302f32342d3234203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:77:46:ee:c2:b6:e7:94:cf:26:56:69:bd:85:74:98:f6:1b:
         3c:5c:80:6f:b8:fd:f9:8f:60:a3:89:db:0b:3d:28:70:b2:e4:
         cc:b1:5f:6b:03:71:5d:10:bb:b0:dc:1c:af:4f:4e:cd:78:d2:
         84:55:ba:2e:1f:4b:8d:78:97:f2:ed:41:c6:52:c5:59:8f:43:
         dd:99:cf:60:5c:8b:1b:96:01:60:79:d3:f8:9e:19:1e:01:3b:
         ed:f3:38:2b:3e:fd:54:40:95:88:4c:64:92:1e:52:61:6b:b9:
         8d:68:a6:a0:90:cc:a0:b9:20:2a:ec:59:27:66:95:0f:54:2a:
         b9:ba:4e:b7:71:43:0f:56:53:56:fe:02:36:35:d1:40:17:93:
         9a:98:68:10:9b:42:f0:3b:02:74:1f:8a:c4:c6:e3:1a:56:64:
         b4:62:5b:30:06:0c:d9:e5:2e:e9:49:a7:56:b4:ce:4e:6f:56:
         21:fa:07:6a:0d:b9:39:8c:4f:16:00:c2:64:51:cd:cc:fc:c2:
         5f:cd:e2:ae:7c:bd:f4:62:8f:5d:1a:50:aa:32:ca:e3:6b:4e:
         96:1a:d8:38:47:b1:24:42:20:de:aa:a6:f9:54:32:4d:de:1b:
         b5:df:a7:ee:f4:c4:f3:ad:c1:94:71:26:88:a2:ea:91:29:7a:
         f0:7b:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:21 2024 by rpki-client on console-fra.rpki-client.org