Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39392e302f32342d3234203d3e20323633373236.roa
File:                     3133382e33362e39392e302f32342d3234203d3e20323633373236.roa (raw, json)
Hash identifier:          7rUgq9Rhv+77CTxzxAkhVvyt8MLgh+XdP0DoOSxVJBA=
Subject key identifier:   73:4E:28:19:EF:5F:CC:D1:50:AB:4C:61:E9:63:DE:08:9C:8E:43:0A
Certificate issuer:       /CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
Certificate serial:       080CBEE4B9DCAAFAD8FE712ADF5C13D9FA69E2CF
Authority key identifier: A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39392e302f32342d3234203d3e20323633373236.roa
Signing time:             Fri 14 Mar 2025 21:11:55 +0000
ROA not before:           Fri 14 Mar 2025 21:06:55 +0000
ROA not after:            Fri 13 Mar 2026 21:11:55 +0000
asID:                     263726
IP address blocks:        138.36.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0c:be:e4:b9:dc:aa:fa:d8:fe:71:2a:df:5c:13:d9:fa:69:e2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C86299C5FA84F9AB35C2974EACE4484F0A087A
        Validity
            Not Before: Mar 14 21:06:55 2025 GMT
            Not After : Mar 13 21:11:55 2026 GMT
        Subject: CN=734E2819EF5FCCD150AB4C61E963DE089C8E430A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:3a:49:34:34:b6:a3:4d:3b:d1:87:5d:b9:
                    ea:13:4b:8f:9c:0a:ad:7d:ea:1d:11:13:42:e3:20:
                    9f:92:c6:39:1a:1b:f7:5b:f0:94:0b:9a:4e:c0:14:
                    8c:8b:61:79:69:46:ee:2c:29:7e:a8:a6:6a:44:d3:
                    03:d0:57:8e:92:b3:c8:89:e2:9a:79:82:af:f1:c2:
                    a7:90:70:3a:bc:ac:f6:9f:98:a1:58:74:87:d3:ce:
                    bc:d2:ca:e1:d2:94:9a:35:35:ef:c0:57:d2:49:77:
                    31:c8:33:65:e5:24:e4:43:38:43:30:13:11:9d:69:
                    c6:21:2b:cb:ff:ff:4d:4b:69:62:39:f9:b6:14:c2:
                    1c:ea:16:97:82:ff:07:40:f6:71:41:b6:a8:fa:46:
                    0f:7a:ff:41:46:e2:cb:04:91:db:fa:9c:88:0b:50:
                    f4:27:c6:9d:78:95:1f:62:4a:f1:c4:8a:1d:9d:72:
                    81:54:f5:1e:26:f3:7e:fb:2e:d1:24:56:88:6c:6b:
                    67:b4:db:81:b3:53:2f:b1:4d:b4:75:ba:0c:cd:db:
                    8b:49:2e:f7:f2:06:da:33:a3:e9:45:3c:fa:72:9a:
                    d9:80:f1:fd:d9:73:5e:87:d2:5b:f0:a4:2e:41:85:
                    a0:e3:db:22:1d:86:82:4a:9f:c6:e3:88:97:ee:29:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4E:28:19:EF:5F:CC:D1:50:AB:4C:61:E9:63:DE:08:9C:8E:43:0A
            X509v3 Authority Key Identifier:
                keyid:A1:C8:62:99:C5:FA:84:F9:AB:35:C2:97:4E:AC:E4:48:4F:0A:08:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1C86299C5FA84F9AB35C2974EACE4484F0A087A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29B8B0B5027D8D861D7CA62358652D20126B06A83B7179BC698D7D2A0E733F4D/0/3133382e33362e39392e302f32342d3234203d3e20323633373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:69:48:71:c4:aa:80:cb:2f:da:ff:cf:e6:bf:1c:46:ee:55:
         ce:7c:e8:b8:63:57:ed:a7:8a:89:64:91:0b:cc:96:3e:a2:2b:
         ee:d4:7a:7b:4b:bf:60:7d:9d:93:48:40:fb:5e:ea:99:4f:41:
         86:62:c2:7d:a0:e5:9c:08:8d:bb:3d:52:13:8b:64:7d:9c:2f:
         fd:93:0e:6f:ea:3d:fe:d0:f3:7f:a5:88:0e:e1:1e:fa:f5:aa:
         ac:43:9a:d2:d5:9f:87:c9:17:69:ba:9e:e4:30:eb:e3:0e:ed:
         ef:b2:8a:14:b2:ef:1c:b7:60:ef:7e:3a:7d:ff:9d:a8:18:0b:
         09:6c:91:f8:3f:1b:e1:fa:dc:56:cc:d1:bd:dc:46:4f:f5:a0:
         5a:98:17:1c:36:8c:b6:92:da:09:87:bc:37:8b:47:85:e5:5a:
         0e:95:27:63:16:1b:e6:ac:80:94:db:17:22:fd:d9:51:e5:27:
         13:ff:69:7a:94:65:96:10:81:11:9e:0b:80:fd:b5:8e:5c:10:
         b7:d8:ae:7d:ea:e7:ff:83:95:cc:76:1c:0a:68:a3:6a:22:b0:
         48:8b:d6:ef:41:11:7b:4d:1e:b7:e4:11:9b:67:f8:a2:fe:ec:
         55:9a:ae:79:e3:ee:23:81:57:09:90:9a:84:38:00:f9:d9:29:
         6c:b3:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:51 2025 by rpki-client