Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3133382e39392e3231322e302f32322d3234203d3e203237363630.roa
File:                     3133382e39392e3231322e302f32322d3234203d3e203237363630.roa (raw, json)
Hash identifier:          5jHLF/UHJjbWhDUPbb70tVR8XsnMNpn5EtI5WG3T9k0=
Subject key identifier:   1D:5B:91:1F:CB:8A:07:0F:D2:83:2C:03:56:A3:2B:AD:C5:42:78:E5
Certificate issuer:       /CN=25C15E195BF2ED33877938F33D7C7B208AE94115
Certificate serial:       24F57D3BDEFCD4EAF97D2D58809DF4D226922F78
Authority key identifier: 25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3133382e39392e3231322e302f32322d3234203d3e203237363630.roa
Signing time:             Tue 23 Jul 2024 15:50:04 +0000
ROA not before:           Tue 23 Jul 2024 15:45:04 +0000
ROA not after:            Tue 22 Jul 2025 15:50:04 +0000
asID:                     27660
IP address blocks:        138.99.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl
                          rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f5:7d:3b:de:fc:d4:ea:f9:7d:2d:58:80:9d:f4:d2:26:92:2f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C15E195BF2ED33877938F33D7C7B208AE94115
        Validity
            Not Before: Jul 23 15:45:04 2024 GMT
            Not After : Jul 22 15:50:04 2025 GMT
        Subject: CN=1D5B911FCB8A070FD2832C0356A32BADC54278E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:80:bf:32:2a:48:bd:ed:25:d3:2b:6a:f7:
                    54:d8:f5:88:e8:7a:30:d1:53:13:90:a9:dd:a7:ee:
                    ec:39:92:91:e5:5e:98:55:5c:5c:1e:85:da:db:8d:
                    32:59:ab:52:6f:d1:62:97:2e:c1:94:8e:4a:cd:78:
                    23:1f:f4:76:b7:4c:08:d6:70:08:1a:55:c9:1d:16:
                    a1:2e:47:cf:5b:cc:ef:f7:17:d9:e1:81:ff:b9:e3:
                    46:4f:a9:8d:6b:31:dc:25:bc:75:e5:4f:69:98:18:
                    f6:93:35:6c:a1:8f:d1:fb:09:78:0e:95:65:40:83:
                    03:d4:93:0e:9f:34:97:c6:3f:17:82:a6:ac:5a:7d:
                    65:2a:cb:d4:3b:38:ba:cf:76:1c:2c:cd:b4:32:94:
                    83:bb:ad:97:74:2a:62:d9:c2:26:ca:3d:4d:29:09:
                    a5:f9:14:91:db:ae:a1:13:51:58:e9:88:9a:1d:a2:
                    7d:9e:d3:00:b6:3c:ea:56:0e:30:e5:28:db:6c:55:
                    5c:d1:40:43:5d:52:63:04:bc:77:7b:0a:7e:4b:0c:
                    18:08:b9:e7:12:23:73:a6:4f:07:67:f9:ab:bd:c2:
                    f5:e7:71:fd:a1:4d:00:dc:0c:bf:f9:f4:51:65:3b:
                    e1:bc:28:66:e8:5d:b1:5a:8d:59:8d:df:67:0e:b4:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5B:91:1F:CB:8A:07:0F:D2:83:2C:03:56:A3:2B:AD:C5:42:78:E5
            X509v3 Authority Key Identifier:
                keyid:25:C1:5E:19:5B:F2:ED:33:87:79:38:F3:3D:7C:7B:20:8A:E9:41:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/25C15E195BF2ED33877938F33D7C7B208AE94115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25C15E195BF2ED33877938F33D7C7B208AE94115.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/609341E1F78470A0F035144F6A34D595FF8964D2A588EACE1B13A38C868D4F27/0/3133382e39392e3231322e302f32322d3234203d3e203237363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:e5:98:55:44:fc:9f:ae:a4:49:04:5c:b6:cb:e7:e2:de:ed:
         ed:5d:d3:aa:40:d0:48:ec:18:93:ab:2c:40:9a:19:a3:3b:9e:
         03:7b:4a:53:98:1a:3c:03:2c:7f:d7:e5:e0:08:22:aa:20:ac:
         9a:75:3e:fe:bd:a5:07:ee:ed:c9:7d:52:90:95:70:24:b6:9b:
         36:5f:d5:00:20:94:18:03:4d:49:64:4b:3c:35:42:54:2e:fb:
         93:9b:72:7f:b0:b6:bb:3d:20:34:77:f9:39:a2:7e:a1:58:2e:
         54:4a:2c:4d:47:26:4b:a6:4a:95:67:7a:e0:88:44:a4:5d:98:
         88:31:4c:4a:ef:24:59:5f:12:8e:25:8c:15:f5:92:94:d6:86:
         ab:a2:4f:8d:99:54:51:1c:97:34:71:48:46:3e:31:ee:ec:54:
         77:ca:1b:1f:0c:82:bb:5d:cc:b8:6d:f0:48:32:95:f7:d0:a3:
         fc:4c:f3:bd:c7:7d:1e:f4:20:a9:2e:71:c5:75:3e:c6:39:f5:
         b5:37:0a:d9:c1:58:c0:f2:fc:10:e5:7b:e9:1c:f0:3a:af:29:
         90:20:1d:1b:99:35:ad:6b:b1:e2:44:3f:ee:9a:f5:26:f1:85:
         c9:15:a0:d2:4e:51:0d:d4:d4:b8:6f:b9:35:01:89:6f:b3:db:
         0a:ba:ef:eb
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJPV9O9781Or5fS1YgJ300iaSL3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDMTVFMTk1QkYyRUQzMzg3NzkzOEYzM0Q3QzdCMjA4
QUU5NDExNTAeFw0yNDA3MjMxNTQ1MDRaFw0yNTA3MjIxNTUwMDRaMDMxMTAvBgNV
BAMTKDFENUI5MTFGQ0I4QTA3MEZEMjgzMkMwMzU2QTMyQkFEQzU0Mjc4RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUq4C/MipIve0l0ytq91TY9Yjo
ejDRUxOQqd2n7uw5kpHlXphVXFwehdrbjTJZq1Jv0WKXLsGUjkrNeCMf9Ha3TAjW
cAgaVckdFqEuR89bzO/3F9nhgf+540ZPqY1rMdwlvHXlT2mYGPaTNWyhj9H7CXgO
lWVAgwPUkw6fNJfGPxeCpqxafWUqy9Q7OLrPdhwszbQylIO7rZd0KmLZwibKPU0p
CaX5FJHbrqETUVjpiJodon2e0wC2POpWDjDlKNtsVVzRQENdUmMEvHd7Cn5LDBgI
uecSI3OmTwdn+au9wvXncf2hTQDcDL/59FFlO+G8KGboXbFajVmN32cOtMarAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHVuRH8uKBw/SgywDVqMrrcVCeOUwHwYDVR0j
BBgwFoAUJcFeGVvy7TOHeTjzPXx7IIrpQRUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MDkzNDFFMUY3ODQ3MEEwRjAzNTE0NEY2QTM0RDU5NUZG
ODk2NEQyQTU4OEVBQ0UxQjEzQTM4Qzg2OEQ0RjI3LzAvMjVDMTVFMTk1QkYyRUQz
Mzg3NzkzOEYzM0Q3QzdCMjA4QUU5NDExNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUMxNUUxOTVCRjJFRDMzODc3
OTM4RjMzRDdDN0IyMDhBRTk0MTE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjA5MzQxRTFGNzg0NzBBMEYwMzUxNDRGNkEzNEQ1OTVGRjg5NjREMkE1
ODhFQUNFMUIxM0EzOEM4NjhENEYyNy8wLzMxMzMzODJlMzkzOTJlMzIzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM2MzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAopj1DAN
BgkqhkiG9w0BAQsFAAOCAQEACOWYVUT8n66kSQRctsvn4t7t7V3TqkDQSOwYk6ss
QJoZozueA3tKU5gaPAMsf9fl4AgiqiCsmnU+/r2lB+7tyX1SkJVwJLabNl/VACCU
GANNSWRLPDVCVC77k5tyf7C2uz0gNHf5OaJ+oVguVEosTUcmS6ZKlWd64IhEpF2Y
iDFMSu8kWV8SjiWMFfWSlNaGq6JPjZlUURyXNHFIRj4x7uxUd8obHwyCu13MuG3w
SDKV99Cj/Ezzvcd9HvQgqS5xxXU+xjn1tTcK2cFYwPL8EOV76RzwOq8pkCAdG5k1
rWux4kQ/7pr1JvGFyRWg0k5RDdTUuG+5NQGJb7PbCrrv6w==
-----END CERTIFICATE-----
Generated at Wed Sep 18 16:39:26 2024 by rpki-client on console-ams.rpki-client.org