Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3134382e302f32322d3232203d3e203238333938.roa
File:                     3133382e39392e3134382e302f32322d3232203d3e203238333938.roa (raw, json)
Hash identifier:          57u9KhVCUL1ZOJ1utXfWT9lnOr02PpjCz/xdcbmmEds=
Subject key identifier:   95:B6:B1:07:C3:8E:E3:1D:F4:60:6C:16:13:78:13:77:2E:E3:23:A2
Certificate issuer:       /CN=8190D453933A57C152D409DC05B6F96B6F662E76
Certificate serial:       1BDF5D26D6F13CDD5CE5C61802FFA4C5E93B3587
Authority key identifier: 81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3134382e302f32322d3232203d3e203238333938.roa
Signing time:             Tue 05 Mar 2024 17:57:49 +0000
ROA not before:           Tue 05 Mar 2024 17:52:49 +0000
ROA not after:            Tue 04 Mar 2025 17:57:49 +0000
asID:                     28398
IP address blocks:        138.99.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:df:5d:26:d6:f1:3c:dd:5c:e5:c6:18:02:ff:a4:c5:e9:3b:35:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8190D453933A57C152D409DC05B6F96B6F662E76
        Validity
            Not Before: Mar  5 17:52:49 2024 GMT
            Not After : Mar  4 17:57:49 2025 GMT
        Subject: CN=95B6B107C38EE31DF4606C16137813772EE323A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:dc:d6:a6:9e:59:d0:6e:77:13:35:40:03:
                    65:15:b0:42:ba:02:a3:ee:1b:76:f5:6e:e6:5b:ed:
                    f1:03:7b:b2:44:96:d7:a7:dd:ac:41:74:43:24:38:
                    00:8d:68:05:13:2f:62:57:8e:a2:02:98:d7:a8:98:
                    d2:5a:58:eb:3f:f7:16:a4:d8:e7:d3:bf:4e:55:e0:
                    3b:59:be:10:02:03:a1:12:42:f4:7d:bf:72:00:d5:
                    d1:a3:7b:13:6a:01:5d:33:4c:91:9e:54:92:c7:6e:
                    20:86:28:71:f0:06:94:89:e7:ed:27:58:60:6f:9f:
                    73:58:42:29:e6:81:6f:8a:5e:76:f4:73:f4:92:49:
                    fc:d8:77:ba:b5:18:c8:32:f0:db:94:63:0a:22:f0:
                    1a:16:01:4f:8d:9a:61:af:e6:22:01:86:d0:fe:43:
                    20:e7:67:33:8b:22:65:ee:9f:80:a1:40:cb:fe:f4:
                    c1:13:61:6b:29:1b:1f:77:5f:52:b3:c1:7b:56:8f:
                    2e:1c:1f:06:9a:8b:3e:99:2f:0b:a4:86:5a:74:9d:
                    66:0a:6d:b9:c3:59:93:0e:34:09:46:60:2f:26:57:
                    5e:e2:13:35:19:db:72:ac:04:52:5e:f6:14:8f:db:
                    02:06:37:f9:71:46:63:17:d7:45:fa:4e:f5:5f:c8:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B6:B1:07:C3:8E:E3:1D:F4:60:6C:16:13:78:13:77:2E:E3:23:A2
            X509v3 Authority Key Identifier:
                keyid:81:90:D4:53:93:3A:57:C1:52:D4:09:DC:05:B6:F9:6B:6F:66:2E:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/8190D453933A57C152D409DC05B6F96B6F662E76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8190D453933A57C152D409DC05B6F96B6F662E76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D58F4E06F82CC440713E7E43376265B7270312DDB84BD9F95C171730AA2DF65/0/3133382e39392e3134382e302f32322d3232203d3e203238333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:96:c0:c5:66:13:18:bc:0e:89:a4:a1:37:17:0b:93:d1:43:
         f1:66:32:36:1c:1a:d2:b7:b5:a6:d1:4e:56:1b:ba:6c:59:2e:
         56:e2:53:a5:b4:13:50:6c:fc:ab:9d:96:a7:37:9b:cc:53:23:
         e8:f5:bf:60:cf:d9:ae:f6:7c:9d:41:c5:77:1a:3e:f7:1d:07:
         a9:41:82:a5:dc:e6:32:c6:63:3e:33:ad:a9:b7:be:82:12:8e:
         cc:b2:3a:41:f7:54:b2:a0:f9:90:c0:68:3e:f1:fc:34:0f:57:
         f1:03:55:bf:d2:45:c6:23:cd:51:16:3f:40:39:21:79:8c:76:
         4c:75:cf:cc:02:a1:c1:16:b2:c2:25:e6:b4:98:24:a4:41:1e:
         b4:25:72:76:a8:fc:26:71:0f:26:bf:38:44:39:ff:53:ed:90:
         22:09:47:df:39:27:41:bd:ce:2d:de:fe:92:f8:d6:f3:00:47:
         ef:6b:96:52:5e:2b:67:83:cc:eb:95:5c:f1:3b:c4:57:0a:74:
         89:bb:35:f5:0a:a5:7e:ae:b8:98:72:1e:30:b7:49:c5:4a:7f:
         1f:a9:24:47:1b:70:66:58:72:bf:dc:62:88:0c:0f:5f:53:c8:
         7b:10:41:66:8e:58:ae:5f:8d:2d:33:fc:15:75:21:39:a3:7a:
         b3:b1:7e:6b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUG99dJtbxPN1c5cYYAv+kxek7NYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE5MEQ0NTM5MzNBNTdDMTUyRDQwOURDMDVCNkY5NkI2
RjY2MkU3NjAeFw0yNDAzMDUxNzUyNDlaFw0yNTAzMDQxNzU3NDlaMDMxMTAvBgNV
BAMTKDk1QjZCMTA3QzM4RUUzMURGNDYwNkMxNjEzNzgxMzc3MkVFMzIzQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQdzWpp5Z0G53EzVAA2UVsEK6
AqPuG3b1buZb7fEDe7JElten3axBdEMkOACNaAUTL2JXjqICmNeomNJaWOs/9xak
2OfTv05V4DtZvhACA6ESQvR9v3IA1dGjexNqAV0zTJGeVJLHbiCGKHHwBpSJ5+0n
WGBvn3NYQinmgW+KXnb0c/SSSfzYd7q1GMgy8NuUYwoi8BoWAU+NmmGv5iIBhtD+
QyDnZzOLImXun4ChQMv+9METYWspGx93X1KzwXtWjy4cHwaaiz6ZLwukhlp0nWYK
bbnDWZMONAlGYC8mV17iEzUZ23KsBFJe9hSP2wIGN/lxRmMX10X6TvVfyJVPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUlbaxB8OO4x30YGwWE3gTdy7jI6IwHwYDVR0j
BBgwFoAUgZDUU5M6V8FS1AncBbb5a29mLnYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RDU4RjRFMDZGODJDQzQ0MDcxM0U3RTQzMzc2MjY1Qjcy
NzAzMTJEREI4NEJEOUY5NUMxNzE3MzBBQTJERjY1LzAvODE5MEQ0NTM5MzNBNTdD
MTUyRDQwOURDMDVCNkY5NkI2RjY2MkU3Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MTkwRDQ1MzkzM0E1N0MxNTJE
NDA5REMwNUI2Rjk2QjZGNjYyRTc2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEQ1OEY0RTA2RjgyQ0M0NDA3MTNFN0U0MzM3NjI2NUI3MjcwMzEyRERC
ODRCRDlGOTVDMTcxNzMwQUEyREY2NS8wLzMxMzMzODJlMzkzOTJlMzEzNDM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMzMzkzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAopjlDAN
BgkqhkiG9w0BAQsFAAOCAQEADpbAxWYTGLwOiaShNxcLk9FD8WYyNhwa0re1ptFO
Vhu6bFkuVuJTpbQTUGz8q52WpzebzFMj6PW/YM/ZrvZ8nUHFdxo+9x0HqUGCpdzm
MsZjPjOtqbe+ghKOzLI6QfdUsqD5kMBoPvH8NA9X8QNVv9JFxiPNURY/QDkheYx2
THXPzAKhwRaywiXmtJgkpEEetCVydqj8JnEPJr84RDn/U+2QIglH3zknQb3OLd7+
kvjW8wBH72uWUl4rZ4PM65Vc8TvEVwp0ibs19Qqlfq64mHIeMLdJxUp/H6kkRxtw
Zlhyv9xiiAwPX1PIexBBZo5Yrl+NLTP8FXUhOaN6s7F+aw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org