Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32342d3234203d3e20323633373530.roa
File:                     3133382e39392e3130322e302f32342d3234203d3e20323633373530.roa (raw, json)
Hash identifier:          hanObOtHVSZgsIQym/91p8FBaU6Nar/qLGM8TIS8A2s=
Subject key identifier:   1E:02:BF:6B:09:7A:A7:61:19:96:8A:DF:59:16:0A:C4:F3:D9:BD:FD
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       368983FE87A6F71DC9A2A6B8242C579666C52734
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32342d3234203d3e20323633373530.roa
Signing time:             Thu 27 Jun 2024 20:30:03 +0000
ROA not before:           Thu 27 Jun 2024 20:25:03 +0000
ROA not after:            Thu 26 Jun 2025 20:30:03 +0000
asID:                     263750
IP address blocks:        138.99.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Oct 2024 22:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:89:83:fe:87:a6:f7:1d:c9:a2:a6:b8:24:2c:57:96:66:c5:27:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Jun 27 20:25:03 2024 GMT
            Not After : Jun 26 20:30:03 2025 GMT
        Subject: CN=1E02BF6B097AA76119968ADF59160AC4F3D9BDFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:9c:d1:20:68:c9:ff:dc:ad:5e:5c:39:03:
                    14:e0:ad:5c:c0:77:ee:4f:1e:ba:92:7c:77:50:f7:
                    d5:e8:ab:66:fd:c9:9e:cc:96:b3:76:4e:0b:94:36:
                    30:cc:06:b8:87:4d:a4:aa:4f:91:0b:6d:34:5e:1b:
                    0e:fa:a1:c7:b6:4c:4a:4c:5b:62:69:d5:c7:d7:7f:
                    90:f2:40:00:ee:a6:15:5d:e1:a5:e5:1b:d4:a6:4c:
                    b2:63:f6:da:22:e3:e1:8e:eb:1c:5d:33:a1:f2:7e:
                    58:13:af:15:e6:98:b6:3a:10:68:af:97:76:b3:b8:
                    0c:46:e0:fe:f3:28:1e:b2:42:8e:df:31:b7:11:ed:
                    35:79:b2:ff:c1:0e:72:4c:78:27:e9:4c:41:3d:aa:
                    06:73:b4:3b:48:3b:c8:a2:6e:d1:11:56:fc:96:9b:
                    b9:8c:20:14:2b:6f:a2:70:cb:83:1b:d5:a9:97:6d:
                    e7:36:0f:a7:10:f4:24:2a:ed:06:c9:b2:4a:ba:55:
                    25:b7:e1:b0:aa:47:23:d9:d6:46:54:20:52:61:a8:
                    f7:bd:3f:9b:0e:b0:f8:0f:e2:c2:c1:14:d9:0b:b1:
                    43:a7:0f:30:de:12:25:57:3f:28:71:2d:20:6f:c1:
                    4f:5f:cb:bc:1e:1b:88:cb:5a:f1:fb:6e:21:81:a6:
                    33:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:02:BF:6B:09:7A:A7:61:19:96:8A:DF:59:16:0A:C4:F3:D9:BD:FD
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/3133382e39392e3130322e302f32342d3234203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:4d:98:a5:44:5d:be:01:cc:46:1a:00:f2:dc:cf:b8:6c:
         de:35:80:fd:ed:dc:e7:31:65:4c:35:69:25:e0:ff:ff:b8:ef:
         7b:7a:a2:24:a8:34:0d:ec:2f:f3:42:20:a3:47:de:7d:dd:4f:
         6c:a5:1c:9f:ba:a1:a9:e6:9c:fa:f6:3b:be:f3:e5:23:db:1d:
         fc:75:a0:6d:fb:e5:a7:5e:9b:f3:54:d7:b3:f6:71:6d:a5:ec:
         56:f2:92:50:1f:66:46:d0:eb:18:1c:8c:13:f7:55:72:a0:d6:
         78:32:f1:78:11:18:6c:05:b5:73:fd:df:c5:11:0d:e1:ec:21:
         7d:18:6a:c7:48:9d:63:f6:76:9d:e9:c7:e0:3b:c7:e1:e5:8e:
         47:80:17:25:6c:88:a3:41:1f:c3:80:84:58:39:21:0e:31:6b:
         f2:7c:87:46:43:3d:53:46:4e:01:10:1d:d8:26:b3:12:26:35:
         c3:f0:ea:37:de:b2:b3:a7:8f:cb:6a:2d:62:9d:39:b3:e8:73:
         75:dc:be:6b:ee:1f:bd:57:50:64:74:78:85:70:34:92:4b:08:
         58:e3:be:e3:5c:b6:b4:0e:3c:e7:3d:01:54:a4:1a:44:20:c0:
         6a:fc:d1:61:3a:13:1b:36:28:3e:5b:87:6e:bd:37:f5:1a:fb:
         51:ac:27:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 18:15:25 2024 by rpki-client on console-ams.rpki-client.org