Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32332d3233203d3e20323633373530.roa
File:                     3133382e39392e3130322e302f32332d3233203d3e20323633373530.roa (raw, json)
Hash identifier:          Uv6nExLckiGaOD4w1QT8edGaPbtdCck1S3vCPb9K5Zo=
Subject key identifier:   B0:03:21:F3:32:4B:2F:58:9F:6E:DC:E1:83:CA:99:AF:20:C4:71:26
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       30586ED3C7EA2A38B7A0DEDF58C981577808EC2E
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32332d3233203d3e20323633373530.roa
Signing time:             Thu 27 Jun 2024 20:30:03 +0000
ROA not before:           Thu 27 Jun 2024 20:25:03 +0000
ROA not after:            Thu 26 Jun 2025 20:30:03 +0000
asID:                     263750
IP address blocks:        138.99.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Oct 2024 22:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:58:6e:d3:c7:ea:2a:38:b7:a0:de:df:58:c9:81:57:78:08:ec:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Jun 27 20:25:03 2024 GMT
            Not After : Jun 26 20:30:03 2025 GMT
        Subject: CN=B00321F3324B2F589F6EDCE183CA99AF20C47126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:e3:23:f6:63:34:62:ef:33:82:f4:8f:8a:
                    46:b4:dd:26:b3:58:e2:e6:46:72:fa:14:ce:f7:12:
                    f6:75:f9:46:c1:01:4d:f1:f7:cb:9e:f7:b7:a7:4c:
                    6a:3d:aa:f9:c5:8f:a1:2f:b7:2c:fe:fc:78:28:fa:
                    15:31:37:ff:21:bb:07:39:91:2e:8e:a5:16:90:db:
                    97:b3:a1:57:9b:a6:d2:1d:db:43:df:cd:cd:e3:5b:
                    72:2a:3b:78:c4:86:5b:ea:de:9b:7d:c5:c7:22:ed:
                    a8:1b:e6:d4:b8:e4:69:d1:98:7c:37:06:32:19:d4:
                    21:ef:e6:2b:41:21:b9:2d:48:ca:cd:ae:be:69:70:
                    7c:34:fc:75:9a:2c:74:b6:b3:96:24:b0:4e:ee:85:
                    08:f1:e5:1a:28:5e:4e:6b:b2:fa:8b:d8:78:5a:79:
                    49:8a:f9:e2:66:ee:7c:96:e5:25:3d:0e:f4:87:d0:
                    7f:7e:8a:b4:65:23:51:8d:92:48:6d:bc:61:55:23:
                    bb:e3:da:02:af:bd:95:1a:8c:66:0a:b3:24:21:43:
                    8f:7e:d4:54:9a:97:51:31:07:5b:80:1b:99:74:b5:
                    9e:2b:66:cc:f8:2d:16:51:0a:d7:22:11:2c:9f:1f:
                    61:eb:5e:f4:bb:bc:5d:36:69:88:78:47:f1:0a:f0:
                    f0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:03:21:F3:32:4B:2F:58:9F:6E:DC:E1:83:CA:99:AF:20:C4:71:26
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32332d3233203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:20:9b:32:2c:5d:65:54:2a:b5:e6:7f:4a:5c:dc:ed:20:89:
         30:58:c4:bb:a7:d6:0d:54:1b:29:8d:7d:bc:f5:1c:7f:31:b8:
         67:7c:ea:1a:9f:e1:44:ba:78:11:24:bc:79:ff:98:04:6e:8d:
         a2:c1:0e:0d:05:34:f8:2b:a1:fd:bb:e4:f7:a2:e2:81:e6:67:
         33:52:4b:b2:85:13:1d:28:ae:7b:00:3e:d6:c8:d7:cb:4f:fc:
         82:62:c8:11:7a:df:0f:52:2a:e1:41:79:46:53:94:f1:c9:79:
         60:77:b8:85:30:4a:e7:38:0e:84:25:19:66:0f:1d:11:25:8b:
         a7:81:53:44:2d:93:df:7d:23:8e:52:9c:80:92:96:7a:22:55:
         c1:3a:0d:da:d8:12:66:2a:ae:1b:29:68:bf:f8:e8:fe:2b:05:
         95:f4:63:c8:c3:95:38:64:9d:63:b9:13:8e:a8:40:e7:4c:ef:
         65:5a:42:05:b7:3b:14:86:d3:43:c3:06:5c:4b:cc:67:ec:52:
         73:20:e6:65:ff:70:73:41:2b:cb:77:71:b8:58:65:a4:0e:75:
         69:98:ac:09:b1:9e:7b:04:70:4e:5c:76:dc:a3:f6:a2:ea:a3:
         f0:d5:fc:c4:bc:88:5d:b4:51:f1:4c:2d:98:1a:e4:91:14:58:
         23:a6:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 18:15:25 2024 by rpki-client on console-ams.rpki-client.org